last executing test programs: 1m22.511340713s ago: executing program 3 (id=4): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 1m22.302072453s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 1m20.279450272s ago: executing program 3 (id=8): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0x2}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000001140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "827503", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x2, 0x0, 0x1, 0x2, 0x3, 0x9}, 0x1, {0xcd9a}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x3, 0x2, 0x6}, 0x2, {0x4, 0xceaa, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 1m19.784994721s ago: executing program 2 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) 1m19.550105555s ago: executing program 3 (id=11): iopl(0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, 0x0) unshare(0x24060400) r6 = socket$inet(0x2, 0x3, 0x7ff) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m17.761267235s ago: executing program 2 (id=12): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004"], 0x4c}}, 0x0) 1m1.347882405s ago: executing program 32 (id=11): iopl(0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, 0x0) unshare(0x24060400) r6 = socket$inet(0x2, 0x3, 0x7ff) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m0.571205153s ago: executing program 33 (id=12): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004"], 0x4c}}, 0x0) 6.405715919s ago: executing program 0 (id=152): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0xfba}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 5.586226472s ago: executing program 0 (id=157): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x13, 0x602c}, 0x54) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x40}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 5.580663694s ago: executing program 5 (id=158): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.279459571s ago: executing program 4 (id=161): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}}, "6598912007ff0000"}}}}}, 0x0) 4.693115442s ago: executing program 5 (id=162): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x0, &(0x7f00000009c0), 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 4.423036582s ago: executing program 1 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.36828401s ago: executing program 6 (id=164): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000280), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000044) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x11) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 4.368083372s ago: executing program 4 (id=165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a9980f3", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.097974771s ago: executing program 0 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) 3.861728507s ago: executing program 5 (id=167): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/16, @ANYRES32], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.616797036s ago: executing program 1 (id=168): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.53872063s ago: executing program 4 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "bc4a06", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.446944444s ago: executing program 0 (id=170): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3.279819191s ago: executing program 6 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 2.909013223s ago: executing program 1 (id=172): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.542004662s ago: executing program 6 (id=173): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.514717095s ago: executing program 4 (id=174): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000001740)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.369934587s ago: executing program 5 (id=175): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.941371669s ago: executing program 0 (id=176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.757884214s ago: executing program 6 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x1d9, &(0x7f0000000800)=ANY=[], 0x0) 1.460916509s ago: executing program 4 (id=178): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.420803429s ago: executing program 1 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2=0x7f000001}}]}]}, 0x34}}, 0x0) 1.065906435s ago: executing program 5 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) 781.382042ms ago: executing program 6 (id=181): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/208, 0xd0}], 0x1}, 0x2}], 0x1, 0x40012163, 0x0) 667.449989ms ago: executing program 1 (id=182): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 570.471621ms ago: executing program 4 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@delchain={0x24, 0x66, 0x221, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r4) 432.638762ms ago: executing program 0 (id=184): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002618851600000a00180000000000000000001c005a"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008010) 263.670382ms ago: executing program 5 (id=185): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x3, 0x4) 110.334825ms ago: executing program 6 (id=186): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x2, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 0s ago: executing program 1 (id=187): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.214' (ED25519) to the list of known hosts. [ 173.488589][ T5774] cgroup: Unknown subsys name 'net' [ 173.617013][ T5774] cgroup: Unknown subsys name 'cpuset' [ 173.631802][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 179.351094][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 183.793219][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.801578][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.830746][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.838792][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.846711][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.855108][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.869158][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.881841][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.890716][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.896455][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.911272][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.920067][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.922425][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.938718][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.958560][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.992639][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.002093][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.021301][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.036809][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.047493][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.060159][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.068562][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.114384][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.125164][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.139563][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.292929][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 185.653988][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 185.990204][ T5794] Bluetooth: hci1: command tx timeout [ 186.051907][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 186.072944][ T5794] Bluetooth: hci0: command tx timeout [ 186.141739][ T5794] Bluetooth: hci2: command tx timeout [ 186.392739][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 186.462578][ T5794] Bluetooth: hci3: command tx timeout [ 186.538222][ T5794] Bluetooth: hci4: command tx timeout [ 186.577727][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.585617][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.593451][ T5792] bridge_slave_0: entered allmulticast mode [ 186.603234][ T5792] bridge_slave_0: entered promiscuous mode [ 186.645443][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 186.717007][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.728449][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.736045][ T5792] bridge_slave_1: entered allmulticast mode [ 186.751606][ T5792] bridge_slave_1: entered promiscuous mode [ 187.006802][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.014519][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.023006][ T5791] bridge_slave_0: entered allmulticast mode [ 187.032622][ T5791] bridge_slave_0: entered promiscuous mode [ 187.132195][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.140044][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.147432][ T5791] bridge_slave_1: entered allmulticast mode [ 187.160256][ T5791] bridge_slave_1: entered promiscuous mode [ 187.181034][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.315085][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.327638][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.337781][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.345329][ T5796] bridge_slave_0: entered allmulticast mode [ 187.354151][ T5796] bridge_slave_0: entered promiscuous mode [ 187.481875][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.489749][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.497344][ T5796] bridge_slave_1: entered allmulticast mode [ 187.511464][ T5796] bridge_slave_1: entered promiscuous mode [ 187.534251][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.610038][ T5792] team0: Port device team_slave_0 added [ 187.659264][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.751917][ T5792] team0: Port device team_slave_1 added [ 187.758227][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.765693][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.773392][ T5803] bridge_slave_0: entered allmulticast mode [ 187.782066][ T5803] bridge_slave_0: entered promiscuous mode [ 187.939458][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.982763][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.990359][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.998453][ T5803] bridge_slave_1: entered allmulticast mode [ 188.006761][ T5803] bridge_slave_1: entered promiscuous mode [ 188.017156][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.025021][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.032614][ T5804] bridge_slave_0: entered allmulticast mode [ 188.041310][ T5804] bridge_slave_0: entered promiscuous mode [ 188.061079][ T5791] team0: Port device team_slave_0 added [ 188.068275][ T5794] Bluetooth: hci1: command tx timeout [ 188.075906][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.094429][ T5791] team0: Port device team_slave_1 added [ 188.149056][ T5794] Bluetooth: hci0: command tx timeout [ 188.170725][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.178489][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.186079][ T5804] bridge_slave_1: entered allmulticast mode [ 188.194459][ T5804] bridge_slave_1: entered promiscuous mode [ 188.218200][ T5794] Bluetooth: hci2: command tx timeout [ 188.277614][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.284878][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.311316][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.456291][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.463525][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.490940][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.513762][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.543469][ T5794] Bluetooth: hci3: command tx timeout [ 188.575104][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.582404][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.608774][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.628281][ T5794] Bluetooth: hci4: command tx timeout [ 188.628609][ T5796] team0: Port device team_slave_0 added [ 188.651857][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.706869][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.719201][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.726298][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.752539][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.771183][ T5796] team0: Port device team_slave_1 added [ 188.847608][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.866086][ T5803] team0: Port device team_slave_0 added [ 188.992180][ T5803] team0: Port device team_slave_1 added [ 189.064910][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.073273][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.099624][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.158836][ T5804] team0: Port device team_slave_0 added [ 189.215336][ T5792] hsr_slave_0: entered promiscuous mode [ 189.224214][ T5792] hsr_slave_1: entered promiscuous mode [ 189.236607][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.244914][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.271475][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.319914][ T5804] team0: Port device team_slave_1 added [ 189.328067][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.335158][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.362610][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.432202][ T5791] hsr_slave_0: entered promiscuous mode [ 189.444579][ T5791] hsr_slave_1: entered promiscuous mode [ 189.453187][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 189.459233][ T5791] Cannot create hsr debugfs directory [ 189.517651][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.524857][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.551221][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.727152][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.734493][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.760846][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.875728][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.882949][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.909442][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.032418][ T5796] hsr_slave_0: entered promiscuous mode [ 190.042490][ T5796] hsr_slave_1: entered promiscuous mode [ 190.051333][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 190.057215][ T5796] Cannot create hsr debugfs directory [ 190.098818][ T5803] hsr_slave_0: entered promiscuous mode [ 190.107203][ T5803] hsr_slave_1: entered promiscuous mode [ 190.115513][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 190.121447][ T5803] Cannot create hsr debugfs directory [ 190.138102][ T5794] Bluetooth: hci1: command tx timeout [ 190.218209][ T5794] Bluetooth: hci0: command tx timeout [ 190.300248][ T5794] Bluetooth: hci2: command tx timeout [ 190.532620][ T5804] hsr_slave_0: entered promiscuous mode [ 190.542805][ T5804] hsr_slave_1: entered promiscuous mode [ 190.551579][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 190.557455][ T5804] Cannot create hsr debugfs directory [ 190.621090][ T5794] Bluetooth: hci3: command tx timeout [ 190.698191][ T5794] Bluetooth: hci4: command tx timeout [ 191.294545][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.370994][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.402320][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.492447][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.648678][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.720103][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.768464][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.809590][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.942384][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.991312][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.022634][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.076869][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.218662][ T5794] Bluetooth: hci1: command tx timeout [ 192.258898][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.299098][ T5794] Bluetooth: hci0: command tx timeout [ 192.339919][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.364826][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.389979][ T5794] Bluetooth: hci2: command tx timeout [ 192.417290][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.577084][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.654964][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.662899][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.698350][ T5794] Bluetooth: hci3: command tx timeout [ 192.715955][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.778478][ T5794] Bluetooth: hci4: command tx timeout [ 192.803669][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.878709][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.971473][ T4108] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.979284][ T4108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.995119][ T4108] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.002874][ T4108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.432542][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.459599][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.753580][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.785353][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.817388][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.825196][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.893811][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.941416][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.949075][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.014142][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.021768][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.077626][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.151565][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.159169][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.249750][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.257282][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.272633][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.280264][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.539262][ T5803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.550055][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.606773][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.833929][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.137068][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.182422][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.236768][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.244374][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.377523][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.385121][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.493467][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.567207][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.664925][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.958196][ T5791] veth0_vlan: entered promiscuous mode [ 197.124062][ T5791] veth1_vlan: entered promiscuous mode [ 197.160891][ T5796] veth0_vlan: entered promiscuous mode [ 197.266725][ T5803] veth0_vlan: entered promiscuous mode [ 197.284580][ T5796] veth1_vlan: entered promiscuous mode [ 197.391891][ T5803] veth1_vlan: entered promiscuous mode [ 197.663981][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.681134][ T5791] veth0_macvtap: entered promiscuous mode [ 197.764780][ T5791] veth1_macvtap: entered promiscuous mode [ 197.792356][ T5796] veth0_macvtap: entered promiscuous mode [ 197.833604][ T5803] veth0_macvtap: entered promiscuous mode [ 197.870188][ T5796] veth1_macvtap: entered promiscuous mode [ 197.937693][ T5803] veth1_macvtap: entered promiscuous mode [ 198.093895][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.141952][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.180635][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.199510][ T5792] veth0_vlan: entered promiscuous mode [ 198.292078][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.303635][ T4086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.318236][ T5804] veth0_vlan: entered promiscuous mode [ 198.333303][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.368822][ T4086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.388625][ T5792] veth1_vlan: entered promiscuous mode [ 198.415946][ T4086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.462061][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.488383][ T4392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.498684][ T4392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.509472][ T5804] veth1_vlan: entered promiscuous mode [ 198.540972][ T4392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.583107][ T4392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.656215][ T4392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.708518][ T4392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.717521][ T4392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.803177][ T4392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.907561][ T4392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.949959][ T5804] veth0_macvtap: entered promiscuous mode [ 198.972779][ T5792] veth0_macvtap: entered promiscuous mode [ 199.033214][ T5792] veth1_macvtap: entered promiscuous mode [ 199.065269][ T5804] veth1_macvtap: entered promiscuous mode [ 199.216331][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.262161][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.365168][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.399026][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.447003][ T4108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.504175][ T4108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.542208][ T4108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.564945][ T4108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.592729][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.668364][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.677396][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.746499][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.324480][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.333849][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.515250][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.523413][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.890027][ T5791] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 204.906228][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.916674][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.014399][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.024893][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.029505][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.040411][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.416583][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.431091][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.481714][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.490024][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.672166][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.680317][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.531294][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.539685][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.168131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 207.179385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 207.760343][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.768612][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.090606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 208.429181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 208.437684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 208.499953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 209.984071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 210.139427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 210.241856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 210.549473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 218.699434][ T6020] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12'. [ 229.322183][ T6034] Zero length message leads to an empty skb [ 229.639801][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.650248][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.659954][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.673972][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.685530][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.869782][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.876509][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.819088][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.840382][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.850816][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.909559][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.937325][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.768625][ T5794] Bluetooth: hci5: command tx timeout [ 232.145549][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 233.023279][ T5794] Bluetooth: hci6: command tx timeout [ 233.889249][ T5794] Bluetooth: hci5: command tx timeout [ 234.955487][ T132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.098535][ T5794] Bluetooth: hci6: command tx timeout [ 235.333465][ T132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.647076][ T132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.799368][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 235.873275][ T132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.978863][ T5794] Bluetooth: hci5: command tx timeout [ 236.746632][ T132] bridge_slave_1: left allmulticast mode [ 236.752706][ T132] bridge_slave_1: left promiscuous mode [ 236.767280][ T132] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.896064][ T132] bridge_slave_0: left allmulticast mode [ 236.902115][ T132] bridge_slave_0: left promiscuous mode [ 236.908909][ T132] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.454743][ T5794] Bluetooth: hci6: command tx timeout [ 238.090109][ T5794] Bluetooth: hci5: command tx timeout [ 239.719325][ T5794] Bluetooth: hci6: command tx timeout [ 239.845000][ T132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.956682][ T132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.026543][ T132] bond0 (unregistering): Released all slaves [ 240.268678][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.276199][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.286133][ T6035] bridge_slave_0: entered allmulticast mode [ 240.297685][ T6035] bridge_slave_0: entered promiscuous mode [ 240.499921][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.509873][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.517572][ T6035] bridge_slave_1: entered allmulticast mode [ 240.527453][ T6035] bridge_slave_1: entered promiscuous mode [ 240.979773][ T132] hsr_slave_0: left promiscuous mode [ 241.001432][ T132] hsr_slave_1: left promiscuous mode [ 241.009717][ T132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.017285][ T132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.110883][ T132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.118601][ T132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.223337][ T132] veth1_macvtap: left promiscuous mode [ 241.229257][ T132] veth0_macvtap: left promiscuous mode [ 241.235324][ T132] veth1_vlan: left promiscuous mode [ 241.241089][ T132] veth0_vlan: left promiscuous mode [ 242.508330][ T132] team0 (unregistering): Port device team_slave_1 removed [ 242.649011][ T132] team0 (unregistering): Port device team_slave_0 removed [ 243.089766][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.255624][ T6105] ip6_vti0: entered promiscuous mode [ 243.428653][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.798551][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.806268][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.813987][ T6042] bridge_slave_0: entered allmulticast mode [ 243.822200][ T6042] bridge_slave_0: entered promiscuous mode [ 243.950567][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.958330][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.965792][ T6042] bridge_slave_1: entered allmulticast mode [ 243.977217][ T6042] bridge_slave_1: entered promiscuous mode [ 244.118385][ T6035] team0: Port device team_slave_0 added [ 244.275151][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.334205][ T6035] team0: Port device team_slave_1 added [ 244.676375][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.719996][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 244.730132][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 244.740028][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.821353][ T6114] C: renamed from lo (while UP) [ 244.844142][ T6114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 244.883981][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.915730][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.945303][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.954517][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.982079][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.104074][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.113264][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.140423][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.191473][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.391223][ T6042] team0: Port device team_slave_0 added [ 245.460373][ T6042] team0: Port device team_slave_1 added [ 245.956584][ T14] bridge_slave_1: left allmulticast mode [ 245.962640][ T14] bridge_slave_1: left promiscuous mode [ 245.968911][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.119489][ T14] bridge_slave_0: left allmulticast mode [ 246.125342][ T14] bridge_slave_0: left promiscuous mode [ 246.132172][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.813088][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.848446][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.896563][ T14] bond0 (unregistering): Released all slaves [ 247.220802][ T6035] hsr_slave_0: entered promiscuous mode [ 247.230948][ T6035] hsr_slave_1: entered promiscuous mode [ 247.238864][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 247.244685][ T6035] Cannot create hsr debugfs directory [ 247.263635][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.270912][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.297630][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.534194][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.541630][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.568259][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.234799][ T6142] bridge0: entered promiscuous mode [ 248.240375][ T6142] bridge0: entered allmulticast mode [ 248.276254][ T14] hsr_slave_0: left promiscuous mode [ 248.288605][ T14] hsr_slave_1: left promiscuous mode [ 248.296766][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.307417][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.376691][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.384994][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.476558][ T14] veth1_macvtap: left promiscuous mode [ 248.482853][ T14] veth0_macvtap: left promiscuous mode [ 248.489153][ T14] veth1_vlan: left promiscuous mode [ 248.494672][ T14] veth0_vlan: left promiscuous mode [ 248.895288][ T6149] netlink: 64 bytes leftover after parsing attributes in process `syz.4.49'. [ 249.166350][ T14] team0 (unregistering): Port device team_slave_1 removed [ 249.212521][ T14] team0 (unregistering): Port device team_slave_0 removed [ 249.839648][ T6150] syzkaller1: entered promiscuous mode [ 249.845337][ T6150] syzkaller1: entered allmulticast mode [ 249.877264][ T6042] hsr_slave_0: entered promiscuous mode [ 249.887528][ T6042] hsr_slave_1: entered promiscuous mode [ 249.896581][ T6042] debugfs: 'hsr0' already exists in 'hsr' [ 249.902719][ T6042] Cannot create hsr debugfs directory [ 249.987505][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 249.997787][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 250.882980][ T6164] loop7: detected capacity change from 0 to 16384 [ 251.102932][ T6164] loop7: detected capacity change from 16384 to 16383 [ 251.223830][ T6035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.374359][ T6035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.497005][ T6035] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.638526][ T6035] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.901106][ T6171] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 252.165130][ T6042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.334435][ T6042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.462029][ T6042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.600553][ T6042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.196733][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.476250][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.562028][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.569631][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.639235][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.646728][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.257839][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.456395][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.662088][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.669707][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.819970][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.827572][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.280664][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.077655][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.382565][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.281738][ T6258] netlink: zone id is out of range [ 258.503081][ T6258] x_tables: duplicate underflow at hook 2 [ 259.042000][ T6035] veth0_vlan: entered promiscuous mode [ 259.215202][ T6035] veth1_vlan: entered promiscuous mode [ 259.545271][ T6035] veth0_macvtap: entered promiscuous mode [ 259.632690][ T6035] veth1_macvtap: entered promiscuous mode [ 259.881482][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.997741][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.117550][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.168836][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.177855][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.303968][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.441803][ T6289] netlink: 'syz.0.85': attribute type 4 has an invalid length. [ 260.629176][ T6042] veth0_vlan: entered promiscuous mode [ 260.745459][ T6042] veth1_vlan: entered promiscuous mode [ 261.288401][ T6042] veth0_macvtap: entered promiscuous mode [ 261.419193][ T6042] veth1_macvtap: entered promiscuous mode [ 261.719820][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.833136][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.991951][ T4108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.046620][ T4108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.109669][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.145401][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.796179][ T794] IPVS: starting estimator thread 0... [ 262.919808][ T6322] IPVS: using max 240 ests per chain, 12000 per kthread [ 265.164279][ T6357] syzkaller0: entered promiscuous mode [ 265.170659][ T6357] syzkaller0: entered allmulticast mode [ 266.286471][ T6376] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 269.285506][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 269.978649][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 270.161964][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.170368][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.260486][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.268676][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.864155][ T6427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 272.451532][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.459751][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.426786][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.439039][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.612577][ T6457] netlink: 'syz.5.118': attribute type 1 has an invalid length. [ 273.781112][ T6457] 8021q: VLANs not supported on ip6_vti0 [ 275.271770][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17'. [ 275.419877][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17'. [ 275.906788][ T6484] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 276.165153][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.384388][ T6498] netlink: 44 bytes leftover after parsing attributes in process `syz.6.129'. [ 276.471119][ T6495] bond1: (slave veth3): Enslaving as an active interface with a down link [ 276.746141][ T6503] warning: `syz.4.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.920020][ T6496] bond1: (slave veth0_to_bond): making interface the new active one [ 276.935049][ T6496] veth0_to_bond: entered promiscuous mode [ 276.943851][ T6496] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 277.141534][ T6504] bond1: entered promiscuous mode [ 277.147769][ T6504] bond1: entered allmulticast mode [ 277.153700][ T6504] veth0_to_bond: entered allmulticast mode [ 277.230291][ T6498] netlink: 40 bytes leftover after parsing attributes in process `syz.6.129'. [ 277.250373][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.499565][ T6510] syzkaller0: entered promiscuous mode [ 278.505240][ T6510] syzkaller0: entered allmulticast mode [ 279.583910][ T14] wlan1: Trigger new scan to find an IBSS to join [ 281.157420][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.144'. [ 282.208709][ T6565] syz_tun: entered allmulticast mode [ 283.582516][ T4319] wlan1: Trigger new scan to find an IBSS to join [ 284.407358][ T6598] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 284.655858][ T134] wlan1: Creating new IBSS network, BSSID ba:bf:6d:d7:b4:05 [ 288.672953][ T6665] ===================================================== [ 288.684007][ T6665] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 288.692485][ T6665] _copy_to_iter+0xef3/0x33f0 [ 288.697386][ T6665] __skb_datagram_iter+0x196/0x12c0 [ 288.706496][ T6665] skb_copy_datagram_iter+0x5b/0x1e0 [ 288.714349][ T6665] netlink_recvmsg+0x4bb/0xfe0 [ 288.719636][ T6665] sock_recvmsg+0x2df/0x390 [ 288.724434][ T6665] __sys_recvfrom+0x282/0x550 [ 288.729437][ T6665] __x64_sys_recvfrom+0x130/0x200 [ 288.734658][ T6665] x64_sys_call+0x3227/0x3e70 [ 288.739812][ T6665] do_syscall_64+0xd3/0xf80 [ 288.744595][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.750902][ T6665] [ 288.753299][ T6665] Uninit was created at: [ 288.757769][ T6665] __kmalloc_node_track_caller_noprof+0xb77/0x1c90 [ 288.764695][ T6665] kmalloc_reserve+0x22f/0x4b0 [ 288.769756][ T6665] __alloc_skb+0x805/0x1040 [ 288.774426][ T6665] netlink_dump+0x24f/0x17d0 [ 288.782170][ T6665] __netlink_dump_start+0x716/0xd60 [ 288.787599][ T6665] rtnetlink_rcv_msg+0x1262/0x14b0 [ 288.793869][ T6665] netlink_rcv_skb+0x54d/0x680 [ 288.798992][ T6665] rtnetlink_rcv+0x35/0x40 [ 288.803631][ T6665] netlink_unicast+0xf04/0x12b0 [ 288.808847][ T6665] netlink_sendmsg+0x10b3/0x1250 [ 288.813986][ T6665] __sock_sendmsg+0x333/0x3d0 [ 288.819139][ T6665] ____sys_sendmsg+0x7f5/0xcf0 [ 288.824100][ T6665] ___sys_sendmsg+0x271/0x3b0 [ 288.829122][ T6665] __x64_sys_sendmsg+0x211/0x3e0 [ 288.834258][ T6665] x64_sys_call+0x1c60/0x3e70 [ 288.839411][ T6665] do_syscall_64+0xd3/0xf80 [ 288.844125][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.850432][ T6665] [ 288.852843][ T6665] Bytes 32-35 of 44 are uninitialized [ 288.858446][ T6665] Memory access of size 44 starts at ffff88801e51b000 [ 288.865327][ T6665] Data copied to user address 00007f72ee3b1010 [ 288.871863][ T6665] [ 288.874321][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.4.183 Not tainted syzkaller #0 PREEMPT(none) [ 288.886849][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.898273][ T6665] ===================================================== [ 288.905394][ T6665] Disabling lock debugging due to kernel taint [ 288.911877][ T6665] Kernel panic - not syncing: kmsan.panic set ... [ 288.918443][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.4.183 Tainted: G B syzkaller #0 PREEMPT(none) [ 288.929408][ T6665] Tainted: [B]=BAD_PAGE [ 288.933643][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.943830][ T6665] Call Trace: [ 288.947216][ T6665] [ 288.950224][ T6665] __dump_stack+0x26/0x30 [ 288.954722][ T6665] dump_stack_lvl+0x50/0x1c0 [ 288.959475][ T6665] ? dump_stack+0x12/0x25 [ 288.963976][ T6665] dump_stack+0x1e/0x25 [ 288.968296][ T6665] vpanic+0x435/0xd30 [ 288.972505][ T6665] panic+0x15d/0x160 [ 288.976633][ T6665] kmsan_report+0x31c/0x320 [ 288.981327][ T6665] ? kmsan_internal_check_memory+0x16c/0x230 [ 288.987486][ T6665] ? kmsan_copy_to_user+0xf1/0x190 [ 288.992779][ T6665] ? _copy_to_iter+0xef3/0x33f0 [ 288.997788][ T6665] ? __skb_datagram_iter+0x196/0x12c0 [ 289.003334][ T6665] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 289.008965][ T6665] ? netlink_recvmsg+0x4bb/0xfe0 [ 289.014090][ T6665] ? sock_recvmsg+0x2df/0x390 [ 289.018908][ T6665] ? __sys_recvfrom+0x282/0x550 [ 289.023935][ T6665] ? __x64_sys_recvfrom+0x130/0x200 [ 289.029295][ T6665] ? x64_sys_call+0x3227/0x3e70 [ 289.034321][ T6665] ? do_syscall_64+0xd3/0xf80 [ 289.039217][ T6665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.045813][ T6665] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 289.051849][ T6665] ? do_syscall_64+0x81/0xf80 [ 289.056704][ T6665] ? filter_irq_stacks+0x49/0x190 [ 289.061996][ T6665] ? stack_depot_save_flags+0x35/0x790 [ 289.067616][ T6665] ? kmsan_get_metadata+0xfb/0x160 [ 289.072917][ T6665] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 289.079440][ T6665] ? kmsan_internal_poison_memory+0x78/0x90 [ 289.085515][ T6665] ? kmsan_internal_poison_memory+0x4a/0x90 [ 289.091596][ T6665] ? kmsan_slab_free+0xd0/0x140 [ 289.096644][ T6665] ? kmsan_get_metadata+0xfb/0x160 [ 289.101964][ T6665] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 289.107994][ T6665] kmsan_internal_check_memory+0x16c/0x230 [ 289.114007][ T6665] kmsan_copy_to_user+0xf1/0x190 [ 289.119136][ T6665] _copy_to_iter+0xef3/0x33f0 [ 289.123965][ T6665] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 289.130479][ T6665] ? kmsan_get_metadata+0xfb/0x160 [ 289.135777][ T6665] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 289.141782][ T6665] ? kmsan_get_metadata+0xfb/0x160 [ 289.147082][ T6665] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 289.153625][ T6665] __skb_datagram_iter+0x196/0x12c0 [ 289.159010][ T6665] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 289.164867][ T6665] skb_copy_datagram_iter+0x5b/0x1e0 [ 289.170340][ T6665] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 289.176351][ T6665] netlink_recvmsg+0x4bb/0xfe0 [ 289.181312][ T6665] ? aa_sock_msg_perm+0x284/0x2e0 [ 289.186522][ T6665] ? __pfx_netlink_recvmsg+0x10/0x10 [ 289.192023][ T6665] sock_recvmsg+0x2df/0x390 [ 289.196704][ T6665] __sys_recvfrom+0x282/0x550 [ 289.201571][ T6665] ? kmsan_get_metadata+0xfb/0x160 [ 289.206929][ T6665] __x64_sys_recvfrom+0x130/0x200 [ 289.212153][ T6665] x64_sys_call+0x3227/0x3e70 [ 289.217011][ T6665] do_syscall_64+0xd3/0xf80 [ 289.221696][ T6665] ? clear_bhb_loop+0x40/0x90 [ 289.226526][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.232578][ T6665] RIP: 0033:0x7f72ed591514 [ 289.237100][ T6665] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 289.256855][ T6665] RSP: 002b:00007f72ee3b0ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 289.265448][ T6665] RAX: ffffffffffffffda RBX: 00007f72ee3b0fc0 RCX: 00007f72ed591514 [ 289.273538][ T6665] RDX: 0000000000001000 RSI: 00007f72ee3b1010 RDI: 0000000000000006 [ 289.281878][ T6665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.289978][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 289.298053][ T6665] R13: 00007f72ee3b0f68 R14: 00007f72ee3b1010 R15: 0000000000000000 [ 289.306182][ T6665] [ 289.309674][ T6665] Kernel Offset: disabled [ 289.314051][ T6665] Rebooting in 86400 seconds..