last executing test programs: 6.77093257s ago: executing program 3 (id=53): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a6be7", 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="85", 0x1}], 0x1}}], 0x2, 0x40448c0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="dec16de814b1401a1966937c35dcf69eec5ab33cef25002646cd82c07d5e00d08cc76eec6c8a7d2f7c7497", 0x2b}], 0x1) shutdown(r0, 0x1) 5.560507081s ago: executing program 3 (id=58): socket$inet6(0xa, 0x80002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 5.480265031s ago: executing program 0 (id=59): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 5.0890336s ago: executing program 2 (id=60): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 5.040998239s ago: executing program 1 (id=61): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x30}}, 0x0) 4.78448309s ago: executing program 4 (id=62): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$netlink(0x10, 0x3, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99e", 0xbc}, {&(0x7f00000002c0)="9c812b37fa6bd3963c", 0x9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d393", 0x67}, {&(0x7f0000000300)="104b0bc7729b3dba1c1440052d447073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7ccef0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfdbbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d9acd490947abd218e48bdad7fdb322d54f962e04a63b9a067cd4c82dc40f9a6febd82bf8e1f13bc900f2cd0197451705ac52b3590e1c61512b69eca267f16f1b32f9ca19b75d3b", 0x125}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65", 0x73}, {0x0}], 0x4}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x11) 4.402842257s ago: executing program 0 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8) 4.396307372s ago: executing program 3 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}}, 0x0) 4.328089956s ago: executing program 2 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b003400"], 0x9c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0) 4.21192978s ago: executing program 1 (id=66): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3.811518039s ago: executing program 4 (id=67): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @local}, &(0x7f00000000c0)=0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 3.440331019s ago: executing program 0 (id=68): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a6be7", 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="85", 0x1}], 0x1}}], 0x2, 0x40448c0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="dec16de814b1401a1966937c35dcf69eec5ab33cef25002646cd82c07d5e00d08cc76eec6c8a7d2f7c7497", 0x2b}], 0x1) shutdown(r0, 0x1) 3.44005639s ago: executing program 1 (id=69): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) 3.377550264s ago: executing program 2 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 3.24895383s ago: executing program 3 (id=71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474000000000da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5005f500", "7c5cec21291a43fe"}, 0x38) 2.832603297s ago: executing program 4 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 2.541353611s ago: executing program 1 (id=73): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 2.479238328s ago: executing program 0 (id=74): socket$inet6(0xa, 0x80002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 2.252483762s ago: executing program 2 (id=75): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 2.032044757s ago: executing program 4 (id=76): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x30}}, 0x0) 1.736537725s ago: executing program 1 (id=77): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115c00000000008510000002000000850000007600000095000000002000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.711592226s ago: executing program 3 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8) 1.469555141s ago: executing program 0 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1.241256895s ago: executing program 2 (id=80): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.077534396s ago: executing program 4 (id=81): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x4) 732.76884ms ago: executing program 3 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f000000080003", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) 697.104655ms ago: executing program 1 (id=83): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) 440.282591ms ago: executing program 0 (id=84): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a6be7", 0x3, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x10000}, 0x1c) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="85", 0x1}], 0x1}}], 0x2, 0x40448c0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="dec16de814b1401a1966937c35dcf69eec5ab33cef25002646cd82c07d5e00d08cc76eec6c8a7d2f7c7497", 0x2b}], 0x1) shutdown(r0, 0x1) 256.604609ms ago: executing program 2 (id=85): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 0s ago: executing program 4 (id=86): socket$inet6(0xa, 0x80002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 210.206786][ T5793] cgroup: Unknown subsys name 'net' [ 210.326643][ T5793] cgroup: Unknown subsys name 'cpuset' [ 210.343885][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 231.573520][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.580511][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.537871][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 268.814823][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.825952][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.837709][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.847830][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.856816][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.865274][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.873593][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.882323][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.892167][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.900648][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.909069][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.917021][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.925192][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.940011][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.950525][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.957398][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.966344][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.978619][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.004503][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.017004][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.027361][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.032141][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.044257][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.045205][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.064468][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.331249][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 270.882062][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 271.004476][ T5832] Bluetooth: hci0: command tx timeout [ 271.154421][ T5832] Bluetooth: hci4: command tx timeout [ 271.160198][ T5832] Bluetooth: hci3: command tx timeout [ 271.167012][ T5825] Bluetooth: hci2: command tx timeout [ 271.172693][ T5825] Bluetooth: hci1: command tx timeout [ 271.625253][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.632968][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.641161][ T5820] bridge_slave_0: entered allmulticast mode [ 271.651258][ T5820] bridge_slave_0: entered promiscuous mode [ 271.665472][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 271.688963][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.697007][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.705074][ T5820] bridge_slave_1: entered allmulticast mode [ 271.715236][ T5820] bridge_slave_1: entered promiscuous mode [ 271.729148][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 271.753391][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 272.034507][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.087679][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.480826][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.488846][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.496914][ T5823] bridge_slave_0: entered allmulticast mode [ 272.506974][ T5823] bridge_slave_0: entered promiscuous mode [ 272.533796][ T5820] team0: Port device team_slave_0 added [ 272.560660][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.568651][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.576730][ T5823] bridge_slave_1: entered allmulticast mode [ 272.587360][ T5823] bridge_slave_1: entered promiscuous mode [ 272.668765][ T5820] team0: Port device team_slave_1 added [ 273.078541][ T5819] Bluetooth: hci0: command tx timeout [ 273.090447][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.101960][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.128565][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.234282][ T5819] Bluetooth: hci3: command tx timeout [ 273.240044][ T5819] Bluetooth: hci1: command tx timeout [ 273.247473][ T5819] Bluetooth: hci2: command tx timeout [ 273.253254][ T5819] Bluetooth: hci4: command tx timeout [ 273.277760][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.292765][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.301669][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.330070][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.385311][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.393008][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.401148][ T5817] bridge_slave_0: entered allmulticast mode [ 273.410805][ T5817] bridge_slave_0: entered promiscuous mode [ 273.471787][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.510057][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.517837][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.525864][ T5815] bridge_slave_0: entered allmulticast mode [ 273.535768][ T5815] bridge_slave_0: entered promiscuous mode [ 273.549201][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.557136][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.565271][ T5817] bridge_slave_1: entered allmulticast mode [ 273.574530][ T5817] bridge_slave_1: entered promiscuous mode [ 273.583647][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.591985][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.600152][ T5818] bridge_slave_0: entered allmulticast mode [ 273.609744][ T5818] bridge_slave_0: entered promiscuous mode [ 273.707282][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.715329][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.723136][ T5815] bridge_slave_1: entered allmulticast mode [ 273.732740][ T5815] bridge_slave_1: entered promiscuous mode [ 273.782377][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.790171][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.798246][ T5818] bridge_slave_1: entered allmulticast mode [ 273.808356][ T5818] bridge_slave_1: entered promiscuous mode [ 273.831281][ T5823] team0: Port device team_slave_0 added [ 273.994719][ T5823] team0: Port device team_slave_1 added [ 274.050668][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.237689][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.258347][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.280961][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.307546][ T5820] hsr_slave_0: entered promiscuous mode [ 274.317505][ T5820] hsr_slave_1: entered promiscuous mode [ 274.331519][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.338899][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.365755][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.389063][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.446468][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.503550][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.511314][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.538216][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.651160][ T5817] team0: Port device team_slave_0 added [ 274.769862][ T5817] team0: Port device team_slave_1 added [ 274.787008][ T5818] team0: Port device team_slave_0 added [ 274.846162][ T5815] team0: Port device team_slave_0 added [ 274.902195][ T5818] team0: Port device team_slave_1 added [ 275.017554][ T5815] team0: Port device team_slave_1 added [ 275.065298][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.072533][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.099116][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.164721][ T5819] Bluetooth: hci0: command tx timeout [ 275.269232][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.276671][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.303531][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.314768][ T5819] Bluetooth: hci2: command tx timeout [ 275.316776][ T5825] Bluetooth: hci1: command tx timeout [ 275.320348][ T5819] Bluetooth: hci3: command tx timeout [ 275.326462][ T5832] Bluetooth: hci4: command tx timeout [ 275.373681][ T5823] hsr_slave_0: entered promiscuous mode [ 275.384920][ T5823] hsr_slave_1: entered promiscuous mode [ 275.393087][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.401242][ T5823] Cannot create hsr debugfs directory [ 275.450850][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.458355][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.485060][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.603649][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.611140][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.637774][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.652364][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.659915][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.686607][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.726902][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.734589][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.761202][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.181851][ T5817] hsr_slave_0: entered promiscuous mode [ 276.191252][ T5817] hsr_slave_1: entered promiscuous mode [ 276.200650][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.208582][ T5817] Cannot create hsr debugfs directory [ 276.360523][ T5815] hsr_slave_0: entered promiscuous mode [ 276.370963][ T5815] hsr_slave_1: entered promiscuous mode [ 276.379964][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.387957][ T5815] Cannot create hsr debugfs directory [ 276.439005][ T5818] hsr_slave_0: entered promiscuous mode [ 276.449624][ T5818] hsr_slave_1: entered promiscuous mode [ 276.458760][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.466924][ T5818] Cannot create hsr debugfs directory [ 277.234511][ T5819] Bluetooth: hci0: command tx timeout [ 277.336243][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.396317][ T5819] Bluetooth: hci1: command tx timeout [ 277.396845][ T5109] Bluetooth: hci3: command tx timeout [ 277.402150][ T5825] Bluetooth: hci4: command tx timeout [ 277.407648][ T5109] Bluetooth: hci2: command tx timeout [ 277.450123][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.494117][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.651900][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.048685][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.129717][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.186699][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.243275][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.302357][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.375007][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.448405][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.525738][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.585357][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.728576][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.841685][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.871505][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.932539][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.965623][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.053664][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.091203][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.413682][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.670904][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.779382][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.787180][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.818270][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.916047][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.923818][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.043652][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.172449][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.180289][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.224687][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.284508][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.292145][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.565896][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.631652][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.767149][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.774958][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.872590][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.906658][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.938831][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.946623][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.021463][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.181844][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.219467][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.227259][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.379794][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.387663][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.429580][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.437372][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.671804][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.683834][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.746510][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.754271][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.868207][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.164980][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.516360][ T5820] veth0_vlan: entered promiscuous mode [ 283.617157][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.682389][ T5820] veth1_vlan: entered promiscuous mode [ 283.800902][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.213487][ T5820] veth0_macvtap: entered promiscuous mode [ 284.349283][ T5820] veth1_macvtap: entered promiscuous mode [ 284.373154][ T5815] veth0_vlan: entered promiscuous mode [ 284.521937][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.546132][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.578850][ T5817] veth0_vlan: entered promiscuous mode [ 284.622155][ T5815] veth1_vlan: entered promiscuous mode [ 284.710902][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.752853][ T5817] veth1_vlan: entered promiscuous mode [ 284.832078][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.844230][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.853342][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.863211][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.143902][ T5815] veth0_macvtap: entered promiscuous mode [ 285.202105][ T5815] veth1_macvtap: entered promiscuous mode [ 285.275212][ T5818] veth0_vlan: entered promiscuous mode [ 285.390569][ T5817] veth0_macvtap: entered promiscuous mode [ 285.406305][ T5818] veth1_vlan: entered promiscuous mode [ 285.477516][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.568245][ T5817] veth1_macvtap: entered promiscuous mode [ 285.610350][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.757112][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.766370][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.775628][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.784894][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.850888][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.925227][ T5818] veth0_macvtap: entered promiscuous mode [ 285.978644][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.031719][ T5818] veth1_macvtap: entered promiscuous mode [ 286.102252][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.113000][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.125099][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.134569][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.282265][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.432021][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.548838][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.558190][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.567533][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.576778][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.620908][ T5823] veth0_vlan: entered promiscuous mode [ 286.771042][ T5823] veth1_vlan: entered promiscuous mode [ 287.203149][ T5823] veth0_macvtap: entered promiscuous mode [ 287.351015][ T5823] veth1_macvtap: entered promiscuous mode [ 287.602383][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.715367][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.791119][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.801785][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.811751][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.821163][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.937077][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.945360][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.082841][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.089909][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.295814][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.305437][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.440391][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.449514][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.819166][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 293.897461][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.907570][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.022641][ T3965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.032107][ T3965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.500934][ T3727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.510511][ T3727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.728902][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.737957][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.120237][ T3913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.128900][ T3913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.595234][ T6004] Zero length message leads to an empty skb [ 295.731617][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.740778][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.977561][ T6006] tipc: Enabling of bearer rejected, failed to enable media [ 295.995408][ T6006] syzkaller0: entered promiscuous mode [ 296.001254][ T6006] syzkaller0: entered allmulticast mode [ 296.187637][ T3965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.203577][ T3965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.190201][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 298.481317][ T6036] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 300.854560][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 300.934592][ T6063] syzkaller0: entered promiscuous mode [ 300.940680][ T6063] syzkaller0: entered allmulticast mode [ 301.827077][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 301.836513][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 303.366348][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 304.763888][ T6102] netlink: 900 bytes leftover after parsing attributes in process `syz.3.39'. [ 306.523405][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 310.250688][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 313.167321][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 314.720123][ T6210] netlink: 536 bytes leftover after parsing attributes in process `syz.3.82'. [ 315.167829][ T6217] ===================================================== [ 315.175551][ T6217] BUG: KMSAN: uninit-value in nf_flow_offload_inet_hook+0x7e4/0x940 [ 315.184219][ T6217] nf_flow_offload_inet_hook+0x7e4/0x940 [ 315.190187][ T6217] nf_hook_slow+0xe1/0x3d0 [ 315.195033][ T6217] __netif_receive_skb_core+0x4aff/0x70c0 [ 315.201066][ T6217] __netif_receive_skb+0xcc/0xac0 [ 315.206449][ T6217] netif_receive_skb+0x57/0x630 [ 315.211635][ T6217] tun_rx_batched+0x1df/0x980 [ 315.216783][ T6217] tun_get_user+0x4ee0/0x6b40 [ 315.221845][ T6217] tun_chr_write_iter+0x3e9/0x5c0 [ 315.227229][ T6217] vfs_write+0xb4b/0x1580 [ 315.231836][ T6217] __ia32_sys_write+0x1f9/0x4d0 [ 315.237107][ T6217] ia32_sys_call+0x30f2/0x42c0 [ 315.242111][ T6217] __do_fast_syscall_32+0xb0/0x150 [ 315.247659][ T6217] do_fast_syscall_32+0x38/0x80 [ 315.252878][ T6217] do_SYSENTER_32+0x1f/0x30 [ 315.257791][ T6217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.264518][ T6217] [ 315.266987][ T6217] Uninit was created at: [ 315.271551][ T6217] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 315.277827][ T6217] kmalloc_reserve+0x13c/0x4b0 [ 315.282888][ T6217] __alloc_skb+0x347/0x7d0 [ 315.287693][ T6217] alloc_skb_with_frags+0xc5/0xa60 [ 315.293111][ T6217] sock_alloc_send_pskb+0xad8/0xc70 [ 315.298727][ T6217] tun_get_user+0x1019/0x6b40 [ 315.303689][ T6217] tun_chr_write_iter+0x3e9/0x5c0 [ 315.309142][ T6217] vfs_write+0xb4b/0x1580 [ 315.313790][ T6217] __ia32_sys_write+0x1f9/0x4d0 [ 315.319135][ T6217] ia32_sys_call+0x30f2/0x42c0 [ 315.324829][ T6217] __do_fast_syscall_32+0xb0/0x150 [ 315.330254][ T6217] do_fast_syscall_32+0x38/0x80 [ 315.335556][ T6217] do_SYSENTER_32+0x1f/0x30 [ 315.340354][ T6217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.347151][ T6217] [ 315.349669][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.2.85 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(undef) [ 315.361992][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.372443][ T6217] ===================================================== [ 315.379831][ T6217] Disabling lock debugging due to kernel taint [ 315.386393][ T6217] Kernel panic - not syncing: kmsan.panic set ... [ 315.393063][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.2.85 Tainted: G B 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(undef) [ 315.407108][ T6217] Tainted: [B]=BAD_PAGE [ 315.411453][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.421956][ T6217] Call Trace: [ 315.425430][ T6217] [ 315.428534][ T6217] __dump_stack+0x26/0x30 [ 315.433133][ T6217] dump_stack_lvl+0x53/0x270 [ 315.437983][ T6217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.444085][ T6217] dump_stack+0x1e/0x25 [ 315.448507][ T6217] panic+0x4bd/0xd50 [ 315.452693][ T6217] kmsan_report+0x31c/0x320 [ 315.457455][ T6217] ? __msan_warning+0x1b/0x30 [ 315.462361][ T6217] ? nf_flow_offload_inet_hook+0x7e4/0x940 [ 315.468409][ T6217] ? nf_hook_slow+0xe1/0x3d0 [ 315.473236][ T6217] ? __netif_receive_skb_core+0x4aff/0x70c0 [ 315.479414][ T6217] ? __netif_receive_skb+0xcc/0xac0 [ 315.484810][ T6217] ? netif_receive_skb+0x57/0x630 [ 315.490086][ T6217] ? tun_rx_batched+0x1df/0x980 [ 315.495151][ T6217] ? tun_get_user+0x4ee0/0x6b40 [ 315.500293][ T6217] ? tun_chr_write_iter+0x3e9/0x5c0 [ 315.505769][ T6217] ? vfs_write+0xb4b/0x1580 [ 315.510551][ T6217] ? __ia32_sys_write+0x1f9/0x4d0 [ 315.515851][ T6217] ? ia32_sys_call+0x30f2/0x42c0 [ 315.521010][ T6217] ? __do_fast_syscall_32+0xb0/0x150 [ 315.526565][ T6217] ? do_fast_syscall_32+0x38/0x80 [ 315.531855][ T6217] ? do_SYSENTER_32+0x1f/0x30 [ 315.536778][ T6217] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.543537][ T6217] ? kmsan_get_metadata+0xfb/0x160 [ 315.548928][ T6217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.555011][ T6217] ? __pskb_pull_tail+0x1779/0x2660 [ 315.560459][ T6217] ? kmsan_get_metadata+0xfb/0x160 [ 315.565877][ T6217] __msan_warning+0x1b/0x30 [ 315.570607][ T6217] nf_flow_offload_inet_hook+0x7e4/0x940 [ 315.576481][ T6217] ? kmsan_get_metadata+0xfb/0x160 [ 315.581853][ T6217] ? __pfx_nf_flow_offload_inet_hook+0x10/0x10 [ 315.588254][ T6217] ? __pfx_nf_flow_offload_inet_hook+0x10/0x10 [ 315.594744][ T6217] nf_hook_slow+0xe1/0x3d0 [ 315.599435][ T6217] __netif_receive_skb_core+0x4aff/0x70c0 [ 315.605457][ T6217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.611558][ T6217] ? filter_irq_stacks+0x49/0x190 [ 315.616876][ T6217] __netif_receive_skb+0xcc/0xac0 [ 315.622202][ T6217] netif_receive_skb+0x57/0x630 [ 315.627360][ T6217] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.633456][ T6217] ? tun_rx_batched+0x16c/0x980 [ 315.638546][ T6217] tun_rx_batched+0x1df/0x980 [ 315.643473][ T6217] ? kmsan_get_metadata+0xfb/0x160 [ 315.648857][ T6217] tun_get_user+0x4ee0/0x6b40 [ 315.653754][ T6217] ? stack_depot_save_flags+0x35/0x7b0 [ 315.659453][ T6217] ? __rcu_read_unlock+0x6d/0xd0 [ 315.664622][ T6217] ? kmsan_get_metadata+0xfb/0x160 [ 315.669996][ T6217] ? kmsan_get_metadata+0xfb/0x160 [ 315.675380][ T6217] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 315.681968][ T6217] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 315.688365][ T6217] tun_chr_write_iter+0x3e9/0x5c0 [ 315.693652][ T6217] vfs_write+0xb4b/0x1580 [ 315.698259][ T6217] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 315.704047][ T6217] __ia32_sys_write+0x1f9/0x4d0 [ 315.709193][ T6217] ia32_sys_call+0x30f2/0x42c0 [ 315.714169][ T6217] __do_fast_syscall_32+0xb0/0x150 [ 315.719586][ T6217] do_fast_syscall_32+0x38/0x80 [ 315.724711][ T6217] do_SYSENTER_32+0x1f/0x30 [ 315.729487][ T6217] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.736095][ T6217] RIP: 0023:0xf704e539 [ 315.740365][ T6217] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 315.760675][ T6217] RSP: 002b:00000000f501d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 315.769334][ T6217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 315.777484][ T6217] RDX: 0000000000000fce RSI: 0000000000000000 RDI: 0000000000000000 [ 315.785635][ T6217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.793771][ T6217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.801910][ T6217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.810111][ T6217] [ 315.813617][ T6217] Kernel Offset: disabled [ 315.818078][ T6217] Rebooting in 86400 seconds..