last executing test programs: 5.980937524s ago: executing program 1 (id=575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 5.551334062s ago: executing program 3 (id=577): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000600)="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", 0x10c}], 0x1, 0x73a, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 5.204580012s ago: executing program 1 (id=579): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00'], 0x40, 0x4040800}}], 0x1, 0x4000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 4.79553401s ago: executing program 0 (id=581): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2b, 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.532565605s ago: executing program 3 (id=582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000540)="a8ebd84a58b1", 0x6}, {&(0x7f0000000640)="ec5d", 0x2}], 0x2) 4.21998605s ago: executing program 2 (id=583): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 4.137547166s ago: executing program 0 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)="a7", 0x1) setsockopt$inet6_int(r0, 0x29, 0x37, 0x0, 0x0) 3.471242086s ago: executing program 4 (id=585): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18030000ff7f0000000000007f20000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b502000000000100850000008300000abc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084200000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3.384171085s ago: executing program 1 (id=586): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="14000600070000000001040000000000040000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3.183185031s ago: executing program 3 (id=587): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x42, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x20040001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, 0x0}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4) 3.087599525s ago: executing program 0 (id=588): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21b9ae72ded771e1}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x384, 0xd, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x344, 0x3, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9243188b6fd8bb72ea679772eb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "051fa797f9f32b7ae2d510ca59f4627efea8aa451da113727e44a3298ff41705f5683dff8d76ad30d8d946013482ae8705f4e5b804234f6a464b9c32bae41a37276d5c078c8764e340a27a5839b778fc6331d42d8ce1c26d56a1fadfa310df829182c1aa734730aae667e92110897104da7ae4ff22ffece274c7196cf53774748a3bc30ba2f3f5a2ef69741e38bc8e11092ee3dda674983c28739dec3da0223a0c363374fbb4be767b12de462a9009ea624a6001ac3fff44046f0a0cfac5b515ba03f44167d8e3c36ed58f3c48a56e41919e7ab848dae774d805d81ecc6d9bd5f7db4cc2a471cfe813a1bc4d8d1e7d7d5518e378ce7399"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5abc9fca197f46bd}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5599bff6cfa67afd}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x384}, 0x1, 0x0, 0x0, 0x4041}, 0x4008020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xc2, 0x10001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x7800, 0x8, 0x80, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@bridge_setlink={0x40, 0x13, 0x4, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r0, 0x80, 0x210}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3f731}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004005}, 0x40000) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa3c0011d40ee7ac68fde51e1a59c78ff0e1cb982845a8fd0d"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.020164776s ago: executing program 2 (id=589): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 2.512407639s ago: executing program 1 (id=590): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x24040400) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0xfc}, 0xa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6119eed40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000003c0), 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000380)) unshare(0x59041000) 2.509376019s ago: executing program 4 (id=591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000000700)="a27f83b3c87343f4da6f7df6001d38d2d4e7c43f8ce4dd4ff5c8d30f411d4a3b35a1aa8f36f12a518b9baabc6fb69cd41943661cd632e22457c06d08141ffc6a08842d227b9281f89dfbbe8ba02446f837a85524e8136a3d14e037f7d09643b5cd4a6af22d08adb93fd03db23c358a", 0x6f}, {&(0x7f0000000480)="f56195e3f573c880e60ac86db4b643700f3db94abbb5129bbe80", 0x1a}, {&(0x7f0000003700)="d422f2b80b1bcefe0bc1fb045f3a153e84f5d67bba9b3c7f2da2875ee4a468dd0b88bcf7ca0c3c9f0ea1f8514b5ed5c4ace069617d71e84dfb9e7c825ba2e6c8b2945eb474f77640c3a43b57fd97a28adeaf9239a07bc5ab0741ac0fdabea5a39f40db7fe0fcc2f42d045203011300b3a9068b906f91b497a4f3b17124ebe1fab6430023c4f8bfd0f84280499fa811e93b3746d334b4b0369b31b4504f0e08f5790289befeca88f02fa02f5f1de0b0ffabab594e696b6d592dfe04", 0xbb}, {&(0x7f0000000540)="9934e99df8658df0cff33c622286d1361d07df0a5dce44bc26843649c132c4a090447df1175794f35747ff", 0x2b}, {&(0x7f00000037c0)="ef464beea007362703e9973f8fd43990da1e0c560aedf8d30b70bc5026009be4897c3be2d40414558f15af38dd2c6512f19bac86ea24ebb78935da36b4feaceeaddab27c90ee12e102c854aa31c51e87207bb16da5614811cc197aa63b893679f7f4eb28797971d2aa6ed82aa879bb6658f2f3b5e1dea3a43a14a11c4bbaecb46e684f313be5", 0x86}], 0x5}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000004a00)="50271b49125c5b37127a1ba8004f9286dec63f21f1df7e58a55adc3f67598b8bb9ffc059281b2a177ef10e1ee51bb526c008fbe50aa48d15fa7f842cc1cd4c6a8ce2581429387ee6a9a431c15a14f1d3a492780a967a2881440ed24ba123c10bb9a333246605416122789b0b16c4d12fa4651fb0dce1bdaa6379eeb8cb0ad3dd68123a6fbcf93ffb4227c8ce1bbaf7fb4259", 0x92}], 0x1}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004c40)="0b3b9ba8e6a6dacf554c44518b3b099543ee23897e0d9aceae2620cb9be475b52ff36ae7f5d16a3745c4f17c34e7c46a3106b3b090573eba5b68c9e69dadd296bd39d4cabbca976a6c09290644a14212c24caf4832c3c96f08bbadf4085e79eb46a5cc2d2a49a9b4e124", 0x6a}, {&(0x7f0000004cc0)="0c558476210103249fc5f6476d0d35874353f3063c8f10e291ee178ff6983e6c208d676733fb75a21784f0c3ae81fd7b8ed6ecbf6c3cc0fe30099e276e39baf8adcb1afadd13fa5ffa7e0c646e753136791552155affceb974945f65a47c8f95c093a063d951325a50de01ac48bd05c5b3d727a38929584679de0a88ce791139dd6378f3281c0e29a3fae586d492db1bcafea55e5a556335053cf884c2fcd11968f960d101bfd0db8ee8286541120dac440d2a37b385e8fa1e051b341be100e9d2d72f01f55946a098afd44956a11d67837d59e70bf74877599bbb0a02f32c73e4049c12d5e43e4da6f87dbfba3130", 0xef}, {&(0x7f0000004dc0)="868ff7d4fba07e6c3056358c3f07e1fecfd75c0848780d60a2b5ddfe3f4bb4a51b42546a84f9963e76376fe162f9ff6f7f987782d6dd59fd03806994ece0fde896187dc14f46163c7fe5d6a4afe3a5eb9be370b6a40f33a2007bf041ac3037a1f4fe0fa788e30c2b837b31aab94833ac21cd417cade9ddfe9240d3b1c0db79f0410ec4b140f555c40e24f9763e3c9298d796d57b26a387ac7a968ca2ec5029d3b87b662a4091b15dc1aa4afa2eae95894f81535221710ea2d96e", 0xba}, {&(0x7f0000004e80)="c3d22ea6ac4fc8ff1bea184fda08f6aeab2d02c16c2796f66097979169ea92e6b11ab34a8eff2cfe2cc467ca238adc240e3c018230c1ba24b81be3d3785a483a84f24e10d7ae7dcbe527754dca030bbd6ba032fd75b28053083b4d1a56770128247c972dc24143fd19e344a566a75a3327101fd721f505fbdb375099df01567e10cb952db86d423ea074c46a0da96fd88e2310abe3c7c5f3130f86443b92caac0d5c913240af9ee0eeb8e783250f5730b886bb1715ff13cc27a80273f0896732fc9b", 0xc2}, {&(0x7f0000004f80)="68e158740a3a5457794587bca6f6f1cc137e5744d2967957ad26d3e8cf", 0x1d}], 0x5}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000053c0)="a985cc1124623bb428ffa36895e23c9755b8e5a5a5bdda52ec31907cd01bdfdf180520ed8e67ebada0e1e1e147af2e0ed136d6d4dac15f073476", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000054c0)="efd1d7380d9ad06901b210926f", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006640)="7d94f704f1845b4db489dd7fbc", 0xd}, {&(0x7f0000006680)="02e18d33392575787e760eb5e6c97548b167aa43cf904fd1f1cf1fdbac2df5722236a3a2ce01f8c12962606c01a9faee84f2a90e98b1ac6f447c560f79a87cab1cb74cf8ad2435b9ea40f33bfcb8df85b833468c4105f0ee7c9dd5b50997713da4fa01a6e9413af550971a246e9b9f04dd729685fbf6d442bed48c7e3f1e", 0x7e}, {&(0x7f00000067c0)="f93fb2d69cc85fa7b17d1778b8d3e184e5f45b7f2085b9db9a6a3887b5e8ff80e8ecea3e18af06fd2f9e700a2eb082b47b9f1d200c14d0e7f93e01a81ece23a4620af7e2c5dbdb724bbff914a5d9927506f57c74e35c6d09745449b27ff36b06b287e4fb674c3d679d6400b92539eba1309a54f345c39903481bae8aa3c9ada596886c9b725b6516f1cb8ed5fbb90d7485f4fa13e65d79c64d11247e5dfb9924c1e56958a2c9aa4ab707ce", 0xab}, {&(0x7f0000006880)="75269e4f88d09d1dea20894a2eb0911d44b2ca7d6fd455b9cb74f18e2dc4969d072a51057263cc6407daef3b75f04d2a842b86383c1c15de06baa2eeabb63f9f798af9cfd35f39498271053504d970aa10ade5f0732e8f651bf289fa7c618d9bf837a1122fa24359a29aba8218b6272bbb996716fb8b4271661b7ff57aaa75bcdd0c8259543e9a46d59f543642300f617dbbc0258dd0b7cb5ccdca92075c28cd7b5af72ec306835148061adde6a76ec8b779e349a450fbc012c3d13600c11023e8115f2d9610863059bbfc9569f13e8186a02b0d1a107f914e9be4d54fe8", 0xde}, {&(0x7f0000006980)="2c1ca53d5364e7a3167e9b0f5e654b8afe43a4d0a741dbcf9cfdf0b4f38056bcc38721526a01", 0x26}, {&(0x7f0000006a00)="8c343f83a7371b6eca878c83c827bb7bfa3ea2acd5f1e25e328820d5c2a05caab7b5e3e42d3973a7ad14e1375f854d127e6ce875c1607def10b42e74192891bb506e16387a8319629b3b16d063c06ed3e3", 0x51}], 0x6}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000006b40)="d1354241a2c053337cfae48ce1ebf3f6787599a9055fcee3f9fa8332569e7b4f4c9d6d3fc8c5d5b49bad2e0abeb5a910a4d1fe496cafc08c2d885a6da097a2c1350240482e26254f7947dae57d6db6d3bda4361487022f405aefd677afb437f8c090f4bf19b304aee544f046a233e6eb5c6f4a6b1db9b63f0455933d1a3b9fa19e7e54f6e8a3c5121d10218660e7a6826c6eb85f582cc7f24b304f360d1627d7fb1178c23ba1d97405f0bdfa6f405accade1ba2cf8ff7361ff9aecfb3dc385223b8087e756eb2f688d71c0ef100e0d5567f9f288fde6", 0xd6}, {&(0x7f0000006c40)="07c7a747b0ffa26568d6d6233b38ead425b668f37b228fc8e791ded67b6f82feb4f710fb66229e7b5c3eeb5c9c344bab215aef3058e3e784b725b57032266e2605f461ee6f86ec2d1988c84c48b9707eb47c9ce97dca36e9b4b369ca0b373cd01aa3a8b43372871c272a528807f6962b82be9c9eaff81f7cf628cd18e6f2811c43d9", 0x82}, {&(0x7f0000006d40)="96168f34030c97fa9b2b903dfb0262f2c0d3dcdd76e5e9d005f86f644704cce5d5e48459b6acf4891bb49f8a3fe21611378c262e8f91521d7adb97aa1699c7260343648a87ee888d3052662bed6bb7a97b04d6dae28bfeda091cc06c81d8df410d125c9de0b770c0a03ca7a0880ec389aa9dbc91d9f69b2f43efec71b7aa94f41a2a8f8b6e19fa464f4845355fca2bd924d4f535238d3d524111bb17daa6d67585ca54be37ca8e6c1a6e7b01d0bbcc369bb3a8c75fd959e8ef4e72c9a7235a9b6ec98cdfe3a25fe5c90fc4a0c138a7b2c3fca0fb0509903d2f1798556d8b93d119f2298212bb952cb7ae5b88e763de", 0xef}, {&(0x7f0000006e40)="8de59d9bf8e2fd6e5ade417b13cc6b2242cafecffc6d2b62ec014983a6d3daf386daa020c64e3aa081237a153e02935f5131d45f89afe3230990eba8eb726741523cb90fd8bb7c67e4eec04df93ee9329d9ef0ca332b917fcb55a486d921f3b0241fb780edfcef30ec52272a2f3ccbb6845dc239762e43968e815c92e6ed96740b4e25dd9ee5dc82446f48d0bec32b10059367fd31d41a1715a2daab25b783e2112169459569c84dfd3d455b304e77a03134207f29719ded3215070afe", 0xbd}, {&(0x7f0000006f00)="827a73a8fcb4db407470", 0xa}, {&(0x7f0000007f40)="c75daac44bd1c6144e96af38a41612294cbe5534a6a85244803036081f95c9ae9d85805276e538656aa5830a765c165c0c435ee880e6c9020474bf", 0x3b}], 0x6}}], 0x7, 0x4000c8d1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 2.475129362s ago: executing program 2 (id=592): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000600)="002147b7357e0e8d442441e9bea6583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16d2e54eec23d7c139254ead9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce449066bfe9fa0700eb00000000001861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c11640bf56f0fe1829f55cd2d91b74aee000000007014dbb599acce7d933ae8928eccad0b832113f23261cbd6e638d7cbcba5017e8088870cc9e2dd66ee7a3348127b1be9eb2e436a88ee6ac19fc6c2ef9c76db06321cdb20b89c774158f076c470f8d1b6fd2c80bd1d7821d7ec4657da4d92075b5479485d8a8ce5cef6deeb15c6c5", 0x10c}], 0x1, 0x73a, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 2.391501407s ago: executing program 3 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x164}}, 0x0) 2.098834046s ago: executing program 0 (id=594): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2b, 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.098323406s ago: executing program 4 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.877348801s ago: executing program 1 (id=596): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\b\x00\x00'], 0x40, 0x4040800}}], 0x1, 0x4000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 1.841544291s ago: executing program 2 (id=597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000540)="a8ebd84a58b1", 0x6}, {&(0x7f0000000640)="ec5d", 0x2}], 0x3) 1.79536745s ago: executing program 3 (id=598): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.603938163s ago: executing program 0 (id=599): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.558283284s ago: executing program 4 (id=600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8001, @empty, 0x80000001}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c) 759.281261ms ago: executing program 4 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r10, @ANYBLOB="14000600070000000001040000000000040000001400"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 555.597286ms ago: executing program 2 (id=602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) 534.551361ms ago: executing program 3 (id=603): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x42, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x20040001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, 0x0}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4) 343.965743ms ago: executing program 1 (id=604): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4c000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x40, 0x4, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000007484a800"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b1a, &(0x7f0000000040)) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 315.137101ms ago: executing program 0 (id=605): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="0a00e6ffaaaaaaaaaaaa00000a000200aa"], 0x54}}, 0x800) 89.066061ms ago: executing program 2 (id=606): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 0s ago: executing program 4 (id=607): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, 0x0, 0x0, 0x73a, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 171.985461][ T5784] cgroup: Unknown subsys name 'net' [ 172.120551][ T5784] cgroup: Unknown subsys name 'cpuset' [ 172.134698][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 177.967010][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 183.947386][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.957385][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.967621][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.981437][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.992769][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.017884][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.028886][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.047355][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.068902][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.080715][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.118898][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.136520][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.153458][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.164245][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.177206][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.189125][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.197780][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.251956][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.257385][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.278987][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.280017][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.291129][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.298578][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.341238][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.352707][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.626867][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 185.645195][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 186.019963][ T5097] Bluetooth: hci0: command tx timeout [ 186.122097][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 186.176477][ T5097] Bluetooth: hci1: command tx timeout [ 186.342161][ T5097] Bluetooth: hci3: command tx timeout [ 186.348244][ T5816] Bluetooth: hci2: command tx timeout [ 186.509589][ T5097] Bluetooth: hci4: command tx timeout [ 186.602777][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 187.108136][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 187.134591][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.145549][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.153416][ T5809] bridge_slave_0: entered allmulticast mode [ 187.163054][ T5809] bridge_slave_0: entered promiscuous mode [ 187.178009][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.185676][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.193538][ T5801] bridge_slave_0: entered allmulticast mode [ 187.203301][ T5801] bridge_slave_0: entered promiscuous mode [ 187.276301][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.283926][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.291747][ T5809] bridge_slave_1: entered allmulticast mode [ 187.302223][ T5809] bridge_slave_1: entered promiscuous mode [ 187.318873][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.326733][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.334371][ T5801] bridge_slave_1: entered allmulticast mode [ 187.343899][ T5801] bridge_slave_1: entered promiscuous mode [ 187.550286][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.557998][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.566368][ T5813] bridge_slave_0: entered allmulticast mode [ 187.575974][ T5813] bridge_slave_0: entered promiscuous mode [ 187.679089][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.689005][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.696739][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.704229][ T5813] bridge_slave_1: entered allmulticast mode [ 187.712846][ T5813] bridge_slave_1: entered promiscuous mode [ 187.733267][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.794020][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.818872][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.899857][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.907535][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.915271][ T5804] bridge_slave_0: entered allmulticast mode [ 187.924987][ T5804] bridge_slave_0: entered promiscuous mode [ 188.099463][ T5097] Bluetooth: hci0: command tx timeout [ 188.153902][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.161656][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.169783][ T5804] bridge_slave_1: entered allmulticast mode [ 188.179546][ T5804] bridge_slave_1: entered promiscuous mode [ 188.226792][ T5801] team0: Port device team_slave_0 added [ 188.241867][ T5809] team0: Port device team_slave_0 added [ 188.257450][ T5097] Bluetooth: hci1: command tx timeout [ 188.291940][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.378945][ T5801] team0: Port device team_slave_1 added [ 188.421136][ T5097] Bluetooth: hci3: command tx timeout [ 188.421172][ T5816] Bluetooth: hci2: command tx timeout [ 188.444908][ T5809] team0: Port device team_slave_1 added [ 188.461313][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.510855][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.518373][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.526239][ T5810] bridge_slave_0: entered allmulticast mode [ 188.534531][ T5810] bridge_slave_0: entered promiscuous mode [ 188.576291][ T5097] Bluetooth: hci4: command tx timeout [ 188.593278][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.672752][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.680542][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.688433][ T5810] bridge_slave_1: entered allmulticast mode [ 188.697974][ T5810] bridge_slave_1: entered promiscuous mode [ 188.710495][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.717761][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.744111][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.795389][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.865067][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.872362][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.899157][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.949502][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.956920][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.983764][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.034563][ T5813] team0: Port device team_slave_0 added [ 189.104775][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.128511][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.141379][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.148597][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.175439][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.193568][ T5813] team0: Port device team_slave_1 added [ 189.208550][ T5804] team0: Port device team_slave_0 added [ 189.334574][ T5804] team0: Port device team_slave_1 added [ 189.375821][ T5810] team0: Port device team_slave_0 added [ 189.394970][ T5810] team0: Port device team_slave_1 added [ 189.504237][ T5809] hsr_slave_0: entered promiscuous mode [ 189.516707][ T5809] hsr_slave_1: entered promiscuous mode [ 189.568152][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.575299][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.601971][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.728337][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.735471][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.762269][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.808197][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.815531][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.842946][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.958710][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.970059][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.997294][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.028656][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.036390][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.062803][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.122236][ T5801] hsr_slave_0: entered promiscuous mode [ 190.131207][ T5801] hsr_slave_1: entered promiscuous mode [ 190.139208][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 190.145102][ T5801] Cannot create hsr debugfs directory [ 190.153604][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.160848][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.176651][ T5097] Bluetooth: hci0: command tx timeout [ 190.187561][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.339949][ T5097] Bluetooth: hci1: command tx timeout [ 190.496334][ T5097] Bluetooth: hci3: command tx timeout [ 190.501970][ T5097] Bluetooth: hci2: command tx timeout [ 190.524023][ T5804] hsr_slave_0: entered promiscuous mode [ 190.532910][ T5804] hsr_slave_1: entered promiscuous mode [ 190.540871][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 190.546868][ T5804] Cannot create hsr debugfs directory [ 190.567785][ T5813] hsr_slave_0: entered promiscuous mode [ 190.577940][ T5813] hsr_slave_1: entered promiscuous mode [ 190.587290][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 190.593191][ T5813] Cannot create hsr debugfs directory [ 190.657825][ T5097] Bluetooth: hci4: command tx timeout [ 190.664350][ T5810] hsr_slave_0: entered promiscuous mode [ 190.674991][ T5810] hsr_slave_1: entered promiscuous mode [ 190.684063][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 190.690414][ T5810] Cannot create hsr debugfs directory [ 191.989513][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.060959][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.094902][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.117599][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.276832][ T5097] Bluetooth: hci0: command tx timeout [ 192.360339][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.385109][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.410295][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.430801][ T5097] Bluetooth: hci1: command tx timeout [ 192.436588][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.465243][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.486354][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.609627][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.619114][ T5097] Bluetooth: hci3: command tx timeout [ 192.624712][ T5097] Bluetooth: hci2: command tx timeout [ 192.650412][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.688190][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.712054][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.733738][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.740899][ T5816] Bluetooth: hci4: command tx timeout [ 192.806475][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.082012][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.124701][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.161175][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.186811][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.515875][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.632355][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.775015][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.848568][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.914289][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.921992][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.937124][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.944447][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.980429][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.988021][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.085276][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.092930][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.130614][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.360174][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.489440][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.558796][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.566451][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.639304][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.647112][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.701510][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.827494][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.928280][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.064567][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.072249][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.158310][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.166298][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.283106][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.425733][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.433492][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.560121][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.567731][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.593572][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.703576][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.104763][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.162003][ T5809] veth0_vlan: entered promiscuous mode [ 197.282289][ T5801] veth0_vlan: entered promiscuous mode [ 197.317819][ T5809] veth1_vlan: entered promiscuous mode [ 197.406112][ T5801] veth1_vlan: entered promiscuous mode [ 197.683096][ T5804] veth0_vlan: entered promiscuous mode [ 197.706561][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.793428][ T5809] veth0_macvtap: entered promiscuous mode [ 197.832715][ T5804] veth1_vlan: entered promiscuous mode [ 197.864692][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.875217][ T5801] veth0_macvtap: entered promiscuous mode [ 197.902146][ T5809] veth1_macvtap: entered promiscuous mode [ 197.967836][ T5801] veth1_macvtap: entered promiscuous mode [ 198.130917][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.263248][ T5804] veth0_macvtap: entered promiscuous mode [ 198.289417][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.306691][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.364102][ T5804] veth1_macvtap: entered promiscuous mode [ 198.396770][ T4440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.412425][ T3630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.499215][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.525597][ T3630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.557547][ T3630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.574913][ T5810] veth0_vlan: entered promiscuous mode [ 198.632086][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.657670][ T3630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.687654][ T3630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.743931][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.767446][ T3630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.803317][ T5810] veth1_vlan: entered promiscuous mode [ 198.825644][ T3630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.877683][ T3630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.922217][ T3630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.969660][ T4440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.011954][ T4440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.178410][ T5810] veth0_macvtap: entered promiscuous mode [ 199.333087][ T5810] veth1_macvtap: entered promiscuous mode [ 199.581369][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.713858][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.814908][ T3578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.878060][ T3578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.921155][ T3578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.968419][ T3578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.532925][ T5813] veth0_vlan: entered promiscuous mode [ 200.623473][ T5813] veth1_vlan: entered promiscuous mode [ 200.949313][ T5813] veth0_macvtap: entered promiscuous mode [ 201.034676][ T5813] veth1_macvtap: entered promiscuous mode [ 201.231541][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.344104][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.438399][ T3502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.503343][ T3502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.565111][ T3502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.620343][ T3502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.874226][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.882395][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.086800][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.094821][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.176577][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.184600][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.256809][ T3794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.264920][ T3794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.522675][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.533566][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.615476][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.624537][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.748902][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 206.567847][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.575945][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.659191][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 206.794021][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 206.867876][ T3794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.875913][ T3794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.745075][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.753765][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.063298][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.072464][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.469831][ T6007] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 208.618689][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 209.330382][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 209.683070][ T6018] geneve2: entered promiscuous mode [ 209.689271][ T6018] geneve2: entered allmulticast mode [ 210.011535][ T6032] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 210.019374][ T6032] syzkaller1: linktype set to 823 [ 210.093420][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 212.131921][ T6053] bridge0: entered promiscuous mode [ 212.137801][ T6053] vlan2: entered promiscuous mode [ 213.325176][ T6066] Illegal XDP return value 158 on prog (id 8) dev N/A, expect packet loss! [ 215.912723][ T6101] Zero length message leads to an empty skb [ 216.064695][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 216.118435][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 216.169063][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 216.254029][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 216.937848][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.52'. [ 216.950889][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 216.972092][ T6116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 217.053917][ T6117] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 217.171298][ T6122] syz_tun: entered allmulticast mode [ 217.207177][ T6121] syz_tun: left allmulticast mode [ 218.183993][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 219.213346][ T6149] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 219.948823][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.68'. [ 220.051037][ T6158] netlink: 34 bytes leftover after parsing attributes in process `syz.3.68'. [ 221.498572][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 221.905049][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 223.043322][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'. [ 224.416804][ T6221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.558155][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.564962][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.699593][ T6221] bond_slave_0: entered promiscuous mode [ 224.705614][ T6221] bond_slave_1: entered promiscuous mode [ 224.721411][ T6221] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.741515][ T6221] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 225.108000][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'. [ 225.417537][ T6233] netlink: 296 bytes leftover after parsing attributes in process `syz.3.94'. [ 225.494225][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.94'. [ 226.329280][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 229.037179][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'. [ 231.553782][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'. [ 231.766784][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 231.783765][ T6308] tipc: Started in network mode [ 231.793396][ T6308] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 231.805527][ T6308] tipc: Enabled bearer , priority 18 [ 232.916382][ T5876] tipc: Node number set to 10005162 [ 235.271686][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 237.114482][ T6358] netlink: 296 bytes leftover after parsing attributes in process `syz.0.146'. [ 237.181847][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'. [ 237.246901][ T6360] netlink: 'syz.3.147': attribute type 12 has an invalid length. [ 238.440502][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.151'. [ 239.054780][ T6388] netlink: 64 bytes leftover after parsing attributes in process `syz.1.150'. [ 239.065611][ T6388] block nbd0: not configured, cannot reconfigure [ 239.296287][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.306484][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.338521][ T6393] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 239.344944][ T6393] syzkaller1: linktype set to 823 [ 239.403438][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 240.091693][ T6410] netlink: 296 bytes leftover after parsing attributes in process `syz.4.162'. [ 240.148057][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.162'. [ 240.909110][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 242.088803][ T6438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 242.164492][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 242.547585][ T6441] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 242.554400][ T6441] syzkaller1: linktype set to 823 [ 242.604867][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 243.585952][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.596055][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.739357][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 244.193894][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.181'. [ 246.872687][ T6493] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 246.879409][ T6493] syzkaller1: linktype set to 823 [ 246.886992][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.897237][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.757155][ T6508] batadv1: entered promiscuous mode [ 249.515161][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.525344][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.053419][ T6543] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 250.060034][ T6543] syzkaller1: linktype set to 823 [ 250.382047][ T6551] Bluetooth: MGMT ver 1.23 [ 254.193251][ T6616] geneve2: entered promiscuous mode [ 254.207067][ T6616] geneve2: entered allmulticast mode [ 254.221808][ T4440] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.291027][ T4440] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.332007][ T4440] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.391469][ T4440] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.473557][ T6639] syzkaller0: entered promiscuous mode [ 255.479554][ T6639] syzkaller0: entered allmulticast mode [ 255.589930][ T6639] tipc: Started in network mode [ 255.595325][ T6639] tipc: Node identity 06282b82eab3, cluster identity 4711 [ 255.604213][ T6639] tipc: Enabled bearer , priority 0 [ 255.773929][ T6639] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 255.823690][ T6639] tipc: Resetting bearer [ 256.094974][ T6638] tipc: Resetting bearer [ 256.119538][ T6638] tipc: Disabling bearer [ 256.616895][ T6656] geneve2: entered promiscuous mode [ 256.622458][ T6656] geneve2: entered allmulticast mode [ 256.646247][ T75] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.767376][ T75] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.803372][ T75] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.837100][ T75] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 259.482843][ T6707] syzkaller0: entered promiscuous mode [ 259.491920][ T6707] syzkaller0: entered allmulticast mode [ 260.380780][ T6723] netlink: 104 bytes leftover after parsing attributes in process `syz.3.276'. [ 260.391556][ T6723] netlink: 104 bytes leftover after parsing attributes in process `syz.3.276'. [ 261.939626][ T6747] syzkaller0: entered promiscuous mode [ 261.945519][ T6747] syzkaller0: entered allmulticast mode [ 265.030097][ T6805] syzkaller0: entered promiscuous mode [ 265.035805][ T6805] syzkaller0: entered allmulticast mode [ 266.302426][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 266.776123][ T6842] batadv0: entered promiscuous mode [ 266.785376][ T6842] vlan2: entered promiscuous mode [ 267.124411][ T6849] syzkaller0: entered promiscuous mode [ 267.132443][ T6849] syzkaller0: entered allmulticast mode [ 269.108329][ T6886] syzkaller0: entered promiscuous mode [ 269.114008][ T6886] syzkaller0: entered allmulticast mode [ 271.120635][ T6922] tipc: Started in network mode [ 271.125907][ T6922] tipc: Node identity 7ea3b18c0dee, cluster identity 4711 [ 271.134285][ T6922] tipc: Enabled bearer , priority 0 [ 271.188984][ T6918] tipc: Resetting bearer [ 271.228224][ T6917] tipc: Disabling bearer [ 273.373817][ T6961] tipc: Started in network mode [ 273.379679][ T6961] tipc: Node identity ba7434c70e61, cluster identity 4711 [ 273.388892][ T6961] tipc: Enabled bearer , priority 0 [ 273.445714][ T6960] tipc: Resetting bearer [ 273.478953][ T6956] tipc: Disabling bearer [ 273.983972][ T6972] netlink: 260 bytes leftover after parsing attributes in process `syz.2.367'. [ 273.994116][ T6972] netlink: 256 bytes leftover after parsing attributes in process `syz.2.367'. [ 274.005838][ T6972] unsupported nlmsg_type 40 [ 274.056913][ T6972] syz_tun: entered allmulticast mode [ 274.109988][ T6972] dvmrp8: entered allmulticast mode [ 274.195765][ T6970] syz_tun: left allmulticast mode [ 277.870111][ T7035] syzkaller0: entered promiscuous mode [ 277.875791][ T7035] syzkaller0: entered allmulticast mode [ 277.964334][ T7035] tipc: Enabled bearer , priority 0 [ 277.999641][ T7035] tipc: Resetting bearer [ 278.047401][ T7033] tipc: Resetting bearer [ 278.101994][ T7033] tipc: Disabling bearer [ 280.063058][ T7078] tipc: Enabled bearer , priority 0 [ 280.113287][ T7079] syzkaller0: entered promiscuous mode [ 280.119262][ T7079] syzkaller0: entered allmulticast mode [ 280.132872][ T7078] syzkaller0: entered promiscuous mode [ 280.138733][ T7078] syzkaller0: entered allmulticast mode [ 280.164014][ T7079] tipc: Started in network mode [ 280.169324][ T7079] tipc: Node identity 667f934f35c1, cluster identity 4711 [ 280.178405][ T7079] tipc: Enabled bearer , priority 0 [ 280.226824][ T7076] tipc: Resetting bearer [ 280.279680][ T7076] tipc: Disabling bearer [ 280.360269][ T7085] tipc: Resetting bearer [ 280.432349][ T7077] tipc: Resetting bearer [ 280.478947][ T7077] tipc: Disabling bearer [ 280.861393][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.415'. [ 282.209108][ T7116] tipc: Enabled bearer , priority 0 [ 282.250126][ T7116] syzkaller0: entered promiscuous mode [ 282.263687][ T7116] syzkaller0: entered allmulticast mode [ 282.364170][ T7114] tipc: Resetting bearer [ 282.408935][ T7114] tipc: Disabling bearer [ 282.514530][ T7126] syzkaller0: entered promiscuous mode [ 282.520667][ T7126] syzkaller0: entered allmulticast mode [ 282.708668][ T7125] tipc: Enabled bearer , priority 0 [ 282.785273][ T7125] tipc: Resetting bearer [ 282.866316][ T7124] tipc: Resetting bearer [ 282.912147][ T7124] tipc: Disabling bearer [ 283.003007][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.429'. [ 283.038142][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 283.626904][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 284.762312][ T7162] tipc: Enabled bearer , priority 0 [ 284.797137][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 284.821232][ T7169] syzkaller0: entered promiscuous mode [ 284.827246][ T7169] syzkaller0: entered allmulticast mode [ 284.909983][ T7162] tipc: Resetting bearer [ 284.967656][ T7161] tipc: Resetting bearer [ 285.027332][ T7161] tipc: Disabling bearer [ 285.197986][ T7173] syzkaller0: entered promiscuous mode [ 285.203689][ T7173] syzkaller0: entered allmulticast mode [ 285.339490][ T7173] tipc: Enabled bearer , priority 0 [ 285.372497][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.447'. [ 285.396547][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.447'. [ 285.427989][ T7173] tipc: Resetting bearer [ 285.463057][ T7170] tipc: Resetting bearer [ 285.488188][ T7170] tipc: Disabling bearer [ 285.964598][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.971503][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.155011][ T7191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.453'. [ 286.662793][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 286.918675][ T7203] tipc: Enabled bearer , priority 0 [ 286.985567][ T7206] syzkaller0: entered promiscuous mode [ 286.991487][ T7206] syzkaller0: entered allmulticast mode [ 287.033228][ T7207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 287.079664][ T7203] tipc: Resetting bearer [ 287.101342][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.461'. [ 287.147497][ T7202] tipc: Resetting bearer [ 287.178363][ T7202] tipc: Disabling bearer [ 287.503319][ T7217] syzkaller0: entered promiscuous mode [ 287.509370][ T7217] syzkaller0: entered allmulticast mode [ 287.596691][ T7216] tipc: Enabled bearer , priority 0 [ 287.637332][ T7216] tipc: Resetting bearer [ 287.657276][ T7214] tipc: Resetting bearer [ 287.704824][ T7214] tipc: Disabling bearer [ 287.901816][ T7226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.466'. [ 288.426924][ T7233] dvmrp8: entered allmulticast mode [ 288.608061][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 289.007373][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.475'. [ 289.052673][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 289.291640][ T7248] tipc: Enabled bearer , priority 0 [ 289.353889][ T7247] syzkaller0: entered promiscuous mode [ 289.361378][ T7247] syzkaller0: entered allmulticast mode [ 289.478536][ T7247] tipc: Resetting bearer [ 289.511767][ T7246] tipc: Resetting bearer [ 289.552788][ T7246] tipc: Disabling bearer [ 289.621036][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 289.710310][ T7257] team_slave_0: entered promiscuous mode [ 289.716828][ T7257] team_slave_1: entered promiscuous mode [ 289.728665][ T7257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 289.745377][ T7257] team_slave_0: left promiscuous mode [ 289.751206][ T7257] team_slave_1: left promiscuous mode [ 290.747689][ T7273] netlink: 260 bytes leftover after parsing attributes in process `syz.2.485'. [ 290.775292][ T7273] syz_tun: entered allmulticast mode [ 290.809911][ T7270] syz_tun: left allmulticast mode [ 291.298065][ T7282] __nla_validate_parse: 1 callbacks suppressed [ 291.298148][ T7282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.490'. [ 291.342046][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.490'. [ 291.397194][ T7285] tipc: Enabled bearer , priority 0 [ 291.414488][ T7285] syzkaller0: entered promiscuous mode [ 291.423271][ T7285] syzkaller0: entered allmulticast mode [ 291.484636][ T7285] tipc: Resetting bearer [ 291.514626][ T7283] tipc: Resetting bearer [ 291.548825][ T7283] tipc: Disabling bearer [ 292.038122][ T7297] netlink: 'syz.0.494': attribute type 33 has an invalid length. [ 292.046488][ T7297] netlink: 152 bytes leftover after parsing attributes in process `syz.0.494'. [ 293.145106][ T7316] netlink: 260 bytes leftover after parsing attributes in process `syz.3.501'. [ 293.155105][ T7316] netlink: 256 bytes leftover after parsing attributes in process `syz.3.501'. [ 293.192971][ T7316] syz_tun: entered allmulticast mode [ 293.241616][ T7316] dvmrp8: entered allmulticast mode [ 293.328944][ T7315] syz_tun: left allmulticast mode [ 293.857940][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'. [ 293.888791][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 294.139238][ T7329] tipc: Enabled bearer , priority 0 [ 294.205296][ T7332] syzkaller0: entered promiscuous mode [ 294.211604][ T7332] syzkaller0: entered allmulticast mode [ 294.312487][ T7329] tipc: Resetting bearer [ 294.401514][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 294.438053][ T7328] tipc: Resetting bearer [ 294.499535][ T7328] tipc: Disabling bearer [ 295.220782][ T7344] netlink: 'syz.3.512': attribute type 33 has an invalid length. [ 295.229153][ T7344] netlink: 152 bytes leftover after parsing attributes in process `syz.3.512'. [ 295.483735][ T7349] syzkaller0: entered promiscuous mode [ 295.490338][ T7349] syzkaller0: entered allmulticast mode [ 295.624363][ T7347] tipc: Enabled bearer , priority 0 [ 295.655518][ T7347] tipc: Resetting bearer [ 295.807644][ T7345] tipc: Resetting bearer [ 295.858894][ T7345] tipc: Disabling bearer [ 295.879045][ T7356] netlink: 260 bytes leftover after parsing attributes in process `syz.2.516'. [ 296.161937][ T7357] syz_tun: entered allmulticast mode [ 296.229295][ T7354] syz_tun: left allmulticast mode [ 296.879897][ T7367] __nla_validate_parse: 1 callbacks suppressed [ 296.879980][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 296.949609][ T7368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 297.804969][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 298.057970][ T7382] geneve2: entered promiscuous mode [ 298.063415][ T7382] geneve2: entered allmulticast mode [ 298.352543][ T7386] tipc: Enabled bearer , priority 0 [ 298.420904][ T7386] tipc: Resetting bearer [ 298.732348][ T7390] syzkaller0: entered promiscuous mode [ 298.738776][ T7390] syzkaller0: entered allmulticast mode [ 298.767009][ T7384] tipc: Resetting bearer [ 298.792002][ T7384] tipc: Disabling bearer [ 299.311989][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 299.334429][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.534'. [ 300.523177][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 300.582189][ T7429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.541'. [ 301.242504][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 301.465585][ T7441] geneve2: entered promiscuous mode [ 301.471280][ T7441] geneve2: entered allmulticast mode [ 301.881612][ T7446] tipc: Enabled bearer , priority 0 [ 302.165241][ T7443] tipc: Disabling bearer [ 302.767628][ T7467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 303.178569][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 304.350033][ T7489] syzkaller0: entered promiscuous mode [ 304.355836][ T7489] syzkaller0: entered allmulticast mode [ 304.427048][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 304.455609][ T7489] tipc: Enabled bearer , priority 0 [ 304.497390][ T7489] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 304.521635][ T7488] tipc: Resetting bearer [ 304.567246][ T7488] tipc: Disabling bearer [ 304.594551][ T7493] netlink: 'syz.4.563': attribute type 3 has an invalid length. [ 304.604813][ T7493] netlink: 'syz.4.563': attribute type 1 has an invalid length. [ 304.634285][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.563'. [ 304.751968][ T7492] geneve2: entered promiscuous mode [ 304.757667][ T7492] geneve2: entered allmulticast mode [ 305.560405][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.568'. [ 307.853294][ T7543] syzkaller0: entered promiscuous mode [ 307.867910][ T7543] syzkaller0: entered allmulticast mode [ 307.993746][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 308.498054][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 308.504291][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 308.516876][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 308.518604][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 309.561848][ T7570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 309.608056][ T7570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'. [ 310.377815][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 312.145659][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.601'. [ 312.597384][ T5450] ===================================================== [ 312.604862][ T5450] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 312.612953][ T5450] _copy_to_iter+0xef3/0x33f0 [ 312.618298][ T5450] __skb_datagram_iter+0x196/0x12c0 [ 312.623794][ T5450] skb_copy_datagram_iter+0x5b/0x1e0 [ 312.629496][ T5450] netlink_recvmsg+0x4bb/0xfe0 [ 312.634498][ T5450] sock_recvmsg+0x2df/0x390 [ 312.639269][ T5450] ____sys_recvmsg+0x193/0x610 [ 312.644242][ T5450] ___sys_recvmsg+0x20b/0x850 [ 312.649232][ T5450] __x64_sys_recvmsg+0x20e/0x3d0 [ 312.654369][ T5450] x64_sys_call+0x35f0/0x3e30 [ 312.664086][ T5450] do_syscall_64+0xd9/0xfa0 [ 312.675367][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.683688][ T5450] [ 312.686218][ T5450] Uninit was stored to memory at: [ 312.691722][ T5450] pskb_expand_head+0x310/0x1610 [ 312.697071][ T5450] netlink_trim+0x496/0x500 [ 312.701769][ T5450] netlink_broadcast_filtered+0x80/0x28f0 [ 312.707863][ T5450] nlmsg_notify+0x15b/0x2f0 [ 312.712572][ T5450] rtnl_notify+0xba/0x100 [ 312.717176][ T5450] wireless_nlevent_process+0xfe/0x290 [ 312.722805][ T5450] process_scheduled_works+0xb91/0x1d80 [ 312.728699][ T5450] worker_thread+0xedf/0x1590 [ 312.733598][ T5450] kthread+0xd5c/0xf00 [ 312.740037][ T5450] ret_from_fork+0x1f5/0x4c0 [ 312.744922][ T5450] ret_from_fork_asm+0x1a/0x30 [ 312.750486][ T5450] [ 312.752903][ T5450] Uninit was stored to memory at: [ 312.758478][ T5450] wireless_send_event+0x67f/0x1530 [ 312.763837][ T5450] ioctl_standard_iw_point+0x12b0/0x13f0 [ 312.776485][ T5450] compat_standard_call+0x188/0x4c0 [ 312.781896][ T5450] wext_ioctl_dispatch+0x192/0x7a0 [ 312.789282][ T5450] compat_wext_handle_ioctl+0x1a1/0x300 [ 312.795039][ T5450] compat_sock_ioctl+0x20c/0xff0 [ 312.800463][ T5450] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 312.806343][ T5450] ia32_sys_call+0x2d5f/0x4310 [ 312.811512][ T5450] __do_fast_syscall_32+0xb0/0x150 [ 312.817047][ T5450] do_fast_syscall_32+0x38/0x80 [ 312.822139][ T5450] do_SYSENTER_32+0x1f/0x30 [ 312.826980][ T5450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.833693][ T5450] [ 312.836228][ T5450] Local variable iwp created at: [ 312.841258][ T5450] compat_standard_call+0x4a/0x4c0 [ 312.846694][ T5450] wext_ioctl_dispatch+0x192/0x7a0 [ 312.851981][ T5450] [ 312.854382][ T5450] Bytes 60-63 of 64 are uninitialized [ 312.860096][ T5450] Memory access of size 64 starts at ffff88811b01a100 [ 312.867216][ T5450] Data copied to user address 00007fff02e6ff70 [ 312.879935][ T5450] [ 312.882444][ T5450] CPU: 1 UID: 101 PID: 5450 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 312.894185][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.904690][ T5450] ===================================================== [ 312.911849][ T5450] Disabling lock debugging due to kernel taint [ 312.918426][ T5450] Kernel panic - not syncing: kmsan.panic set ... [ 312.925115][ T5450] CPU: 1 UID: 101 PID: 5450 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 312.935998][ T5450] Tainted: [B]=BAD_PAGE [ 312.940558][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.950771][ T5450] Call Trace: [ 312.954170][ T5450] [ 312.957382][ T5450] __dump_stack+0x26/0x30 [ 312.961941][ T5450] dump_stack_lvl+0x53/0x270 [ 312.966816][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 312.972889][ T5450] dump_stack+0x1e/0x25 [ 312.977252][ T5450] vpanic+0x435/0xd30 [ 312.981444][ T5450] panic+0x15d/0x160 [ 312.985665][ T5450] kmsan_report+0x31c/0x320 [ 312.990350][ T5450] ? kmsan_internal_check_memory+0x1e1/0x230 [ 312.996569][ T5450] ? kmsan_copy_to_user+0xf1/0x190 [ 313.001943][ T5450] ? _copy_to_iter+0xef3/0x33f0 [ 313.006980][ T5450] ? __skb_datagram_iter+0x196/0x12c0 [ 313.012570][ T5450] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 313.018264][ T5450] ? netlink_recvmsg+0x4bb/0xfe0 [ 313.023410][ T5450] ? sock_recvmsg+0x2df/0x390 [ 313.028264][ T5450] ? ____sys_recvmsg+0x193/0x610 [ 313.033410][ T5450] ? ___sys_recvmsg+0x20b/0x850 [ 313.038541][ T5450] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 313.044191][ T5450] ? x64_sys_call+0x35f0/0x3e30 [ 313.049220][ T5450] ? do_syscall_64+0xd9/0xfa0 [ 313.054103][ T5450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.060328][ T5450] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 313.066620][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.071931][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.077198][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.083268][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.088711][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.094689][ T5450] ? __pfx__raw_spin_lock+0x1/0x10 [ 313.099961][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.105229][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.111297][ T5450] kmsan_internal_check_memory+0x1e1/0x230 [ 313.117333][ T5450] kmsan_copy_to_user+0xf1/0x190 [ 313.122431][ T5450] _copy_to_iter+0xef3/0x33f0 [ 313.127262][ T5450] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 313.133796][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.139107][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.145179][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.150797][ T5450] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 313.157456][ T5450] __skb_datagram_iter+0x196/0x12c0 [ 313.162864][ T5450] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 313.168824][ T5450] skb_copy_datagram_iter+0x5b/0x1e0 [ 313.174308][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.180315][ T5450] netlink_recvmsg+0x4bb/0xfe0 [ 313.185311][ T5450] ? aa_sock_msg_perm+0x29c/0x2f0 [ 313.190619][ T5450] ? __pfx_netlink_recvmsg+0x10/0x10 [ 313.196728][ T5450] sock_recvmsg+0x2df/0x390 [ 313.201683][ T5450] ____sys_recvmsg+0x193/0x610 [ 313.206667][ T5450] ? setup_fault_attr+0x2e0/0x300 [ 313.211898][ T5450] ? stack_depot_save_flags+0x35/0x7b0 [ 313.217581][ T5450] ___sys_recvmsg+0x20b/0x850 [ 313.222558][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.228557][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.233916][ T5450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 313.240008][ T5450] __x64_sys_recvmsg+0x20e/0x3d0 [ 313.245310][ T5450] ? kmsan_get_metadata+0xfb/0x160 [ 313.250624][ T5450] x64_sys_call+0x35f0/0x3e30 [ 313.255507][ T5450] do_syscall_64+0xd9/0xfa0 [ 313.260235][ T5450] ? irqentry_exit+0x16/0x60 [ 313.265030][ T5450] ? clear_bhb_loop+0x40/0x90 [ 313.269917][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.276082][ T5450] RIP: 0033:0x7f5141787407 [ 313.280649][ T5450] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 313.300525][ T5450] RSP: 002b:00007fff02e6fe60 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 313.309320][ T5450] RAX: ffffffffffffffda RBX: 00007f51416fd740 RCX: 00007f5141787407 [ 313.317603][ T5450] RDX: 0000000000000040 RSI: 00007fff02e6fee0 RDI: 0000000000000009 [ 313.325695][ T5450] RBP: 000055895758caa0 R08: 0000000000000000 R09: 0000000000000000 [ 313.333867][ T5450] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 313.341950][ T5450] R13: 00007fff02e74040 R14: 0000000000000000 R15: 00007fff02e74030 [ 313.350161][ T5450] [ 313.353781][ T5450] Kernel Offset: disabled [ 313.358176][ T5450] Rebooting in 86400 seconds..