last executing test programs: 14.277843495s ago: executing program 2 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 13.304787684s ago: executing program 2 (id=300): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") 11.800214181s ago: executing program 3 (id=308): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}, 0x0) 11.180317035s ago: executing program 3 (id=311): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r2}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r3], 0x20}}, 0x0) 10.418080792s ago: executing program 3 (id=314): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.913386115s ago: executing program 0 (id=332): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005c80), 0x4f, 0x10122, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) 4.529585033s ago: executing program 1 (id=334): r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.991665996s ago: executing program 4 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 3.900559026s ago: executing program 1 (id=336): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bind$packet(r0, &(0x7f0000000280)={0x11, 0x1b, 0x0, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602", 0x1c}], 0x1}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000180)=@id, 0x0, 0x80800) 3.514760339s ago: executing program 0 (id=337): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 3.176468464s ago: executing program 4 (id=338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.036985698s ago: executing program 1 (id=339): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9108141, 0x0, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@hci, 0x80, 0x0}, 0x10021) 2.9167338s ago: executing program 0 (id=340): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 2.815008476s ago: executing program 2 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.692830173s ago: executing program 3 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='htcp\x00', 0x5) sendmmsg$inet6(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2b8616e034943b34856578f47725f5de5921a9337fa606874d59c90157f6cffe97464c0e926d02f82758a5a2a40ae9d9baf1feb099d84c3f18dcae364ef283f5aa84d1bbd56604703ff1793be14aa7cca0e20306b9767cef376177a6d01e4d86dcff7a2db441ce2cf07604d72f0e14c98fc76a03a42bdb5df0975a75705bcf18532efbc74054e7447cbf8725b9882ffc721afc60508517050888f4f64fdedaed1912e15d1328c2116dddc41978f42c67a17ff6798aec399d44f1cdaa89f76e56f1f65247bbd1df200a1b88d4048d14e7f53e29cda581be8bb6e442029d3789dbeed17b4d11bf116ec8e5e550433eab69924455f8f0fb571eb1b6", 0xfa}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000740)="79ccd4ba770c19fe5d1eed32fa5201d5f02f5a838ceb1aaf74f76640e411a240b4", 0x21}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e40)="ba99276bdb3ae27d95579ab6bf069257ed26fce454a327f805b588c050c01b772e6760934d257ac22b2baad299e093e44ea5", 0x32}], 0x1}}, {{&(0x7f0000000f00)={0xa, 0x4e24, 0x35, @remote, 0x27}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000f40)="4f5bcb2cce240e253dd925b4e99fa235bfb8894219c4067050ab0f061f47873fa8bd195f5b62", 0x26}, {0x0}], 0x2}}, {{&(0x7f0000001100)={0xa, 0x4e23, 0x1, @loopback, 0xe708}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001140)="a63ef23e831cbca3ca642af0c527301354efe4532f38ffec86", 0x19}], 0x1, &(0x7f00000042c0)}}, {{&(0x7f0000001240)={0xa, 0x4e22, 0x2, @loopback, 0x5da9029d}, 0x1c, &(0x7f0000004600)=[{&(0x7f0000004540)="4b24e248143b941a21e47dcae2e1f3e8c48a57f99a6d91bb803c4630b08247ce8f5b53c646c8d196f30234bde2c21027261d5a54aed6edad8596a380322b20c989122d8806e04eaada61f2d374f37721998a09a35db7627f25b985", 0x5b}], 0x1}}, {{&(0x7f0000004640)={0xa, 0x4e23, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @local}, 0x11ef}, 0x1c, &(0x7f0000004940)=[{&(0x7f0000004680)="96dd7e94f2e76d34aca861e50f2811c287fe93f4e5", 0x15}, {0x0}], 0x2, &(0x7f0000004ac0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x7, 0x80) 2.392025797s ago: executing program 4 (id=343): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 2.224588854s ago: executing program 1 (id=344): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005c80), 0x4f, 0x10122, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) 2.224312172s ago: executing program 0 (id=345): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)='?L', 0x2}], 0x1, 0x0, 0x0, 0x50}, 0x0) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40012002) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="6ed5e8e6", 0x4}], 0x1}, 0x1050) 1.734535162s ago: executing program 4 (id=346): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x4}}], 0x10) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) 1.635356355s ago: executing program 0 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x40000) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) 1.298704507s ago: executing program 2 (id=348): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060001080006040001aaaaaaaaaa31ac1414bbaaaaaaaaaa00"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.149243351s ago: executing program 3 (id=349): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000004700)=""/4114, 0x1012}, {0x0}, {&(0x7f0000000400)=""/153, 0x99}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x18000, 0x0) 933.855818ms ago: executing program 4 (id=350): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)={0x48, r1, 0x1, 0x100003, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x48}}, 0x0) 824.069957ms ago: executing program 1 (id=351): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) 648.96507ms ago: executing program 2 (id=352): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x8, 0xf989, "43ecdca9"}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 550.525359ms ago: executing program 3 (id=353): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000009540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="17c768e802fdccad79", 0x9}, {0x0}], 0x2, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000800)="a38757116a", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f00000030c0)="960c1c0e47525f3ef27cdb354a9d0966d72da6596154f3d908ae21310d163a83481c4bc883b1404d4031", 0x2a}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x1805) close(0x3) 237.174864ms ago: executing program 1 (id=354): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000000000000000000004210000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0xb645d3d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "b05c84be2e0c1f7d", "2af9f8c3730598f1aeeb7c5f1ffd95b6", "612883b6", "77dfa06c7938a7a6"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0xccf1}], 0x1, 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x1) splice(r7, 0x0, r4, 0x0, 0x8000000008, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) write(r5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 164.375848ms ago: executing program 4 (id=355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x324, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x310, 0x1, [@m_skbedit={0xec, 0x18, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xfff2}}]}, {0x85, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a168eca666c86a6321ae76cba859e771aa7894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69890f61ef4f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xe8, 0xc, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x21f7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b9f, 0xe}}]}, {0xa1, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc1619"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xfc, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x20000000, 0x7, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x3, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}]}, {0x8e, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba3573d039f7b6e9fb810ecdc039c3105f3423c721e04c7b057f85097c23a753a9cfb0eba5c7"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x3c, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "d85d43b7ea4d845296"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x324}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 132.193708ms ago: executing program 0 (id=356): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @mss={0x2, 0x9}, @window={0x3, 0x200, 0xc}], 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) 0s ago: executing program 2 (id=357): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x203, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x39}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NFC_CMD_GET_SE(r2, 0x0, 0x20000800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 174.926081][ T5768] cgroup: Unknown subsys name 'net' [ 175.112888][ T5768] cgroup: Unknown subsys name 'cpuset' [ 175.135305][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 220.414595][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 224.336142][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.364171][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.375196][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.385202][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.396745][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.398867][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.408708][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.410533][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.424283][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.434097][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.442962][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.494827][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.502688][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.512650][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.525047][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.533462][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.544346][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.557229][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.573414][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.583107][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.632010][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.635981][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.660763][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.660968][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.678717][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.679203][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.691763][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.706480][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.707677][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.725951][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.735142][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.780195][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.933076][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 226.180564][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 226.288968][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 226.524395][ T5793] Bluetooth: hci0: command tx timeout [ 226.654557][ T5793] Bluetooth: hci3: command tx timeout [ 226.660212][ T5793] Bluetooth: hci1: command tx timeout [ 226.694758][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 226.815654][ T5793] Bluetooth: hci4: command tx timeout [ 226.871206][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.879121][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.888240][ T5792] bridge_slave_0: entered allmulticast mode [ 226.897548][ T5792] bridge_slave_0: entered promiscuous mode [ 226.909510][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 226.914123][ T5793] Bluetooth: hci2: command tx timeout [ 226.932950][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.940997][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.948964][ T5792] bridge_slave_1: entered allmulticast mode [ 226.958176][ T5792] bridge_slave_1: entered promiscuous mode [ 227.153008][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.215547][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.565978][ T5792] team0: Port device team_slave_0 added [ 227.573998][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.581637][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.590437][ T5784] bridge_slave_0: entered allmulticast mode [ 227.599378][ T5784] bridge_slave_0: entered promiscuous mode [ 227.619726][ T5792] team0: Port device team_slave_1 added [ 227.738526][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.750061][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.757858][ T5784] bridge_slave_1: entered allmulticast mode [ 227.766024][ T5784] bridge_slave_1: entered promiscuous mode [ 227.850664][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.858560][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.866397][ T5795] bridge_slave_0: entered allmulticast mode [ 227.875428][ T5795] bridge_slave_0: entered promiscuous mode [ 228.006619][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.014651][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.022319][ T5794] bridge_slave_0: entered allmulticast mode [ 228.031297][ T5794] bridge_slave_0: entered promiscuous mode [ 228.041544][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.049390][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.057152][ T5795] bridge_slave_1: entered allmulticast mode [ 228.066093][ T5795] bridge_slave_1: entered promiscuous mode [ 228.155781][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.192326][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.199710][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.226801][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.247928][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.257551][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.265431][ T5794] bridge_slave_1: entered allmulticast mode [ 228.274451][ T5794] bridge_slave_1: entered promiscuous mode [ 228.377349][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.460639][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.467893][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.494107][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.536705][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.544806][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.552526][ T5785] bridge_slave_0: entered allmulticast mode [ 228.561587][ T5785] bridge_slave_0: entered promiscuous mode [ 228.594324][ T5793] Bluetooth: hci0: command tx timeout [ 228.660558][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.670819][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.680520][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.688709][ T5785] bridge_slave_1: entered allmulticast mode [ 228.697671][ T5785] bridge_slave_1: entered promiscuous mode [ 228.714242][ T5784] team0: Port device team_slave_0 added [ 228.751471][ T5793] Bluetooth: hci1: command tx timeout [ 228.754641][ T5786] Bluetooth: hci3: command tx timeout [ 228.776066][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.797210][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.815460][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.832569][ T5784] team0: Port device team_slave_1 added [ 228.888530][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.910021][ T5786] Bluetooth: hci4: command tx timeout [ 228.976606][ T5786] Bluetooth: hci2: command tx timeout [ 229.069434][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.155123][ T5795] team0: Port device team_slave_0 added [ 229.238211][ T5792] hsr_slave_0: entered promiscuous mode [ 229.250700][ T5792] hsr_slave_1: entered promiscuous mode [ 229.266236][ T5794] team0: Port device team_slave_0 added [ 229.282289][ T5795] team0: Port device team_slave_1 added [ 229.292453][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.299884][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.326613][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.387687][ T5785] team0: Port device team_slave_0 added [ 229.403262][ T5794] team0: Port device team_slave_1 added [ 229.446368][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.453514][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.480755][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.536004][ T5785] team0: Port device team_slave_1 added [ 229.656557][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.663706][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.690352][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.753467][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.760716][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.787234][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.855579][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.862734][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.889106][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.954456][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.961603][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.988269][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.118778][ T5784] hsr_slave_0: entered promiscuous mode [ 230.131081][ T5784] hsr_slave_1: entered promiscuous mode [ 230.139897][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.147749][ T5784] Cannot create hsr debugfs directory [ 230.171406][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.178825][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.205110][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.288008][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.295387][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.324005][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.486040][ T5794] hsr_slave_0: entered promiscuous mode [ 230.496320][ T5794] hsr_slave_1: entered promiscuous mode [ 230.504848][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.512593][ T5794] Cannot create hsr debugfs directory [ 230.674534][ T5786] Bluetooth: hci0: command tx timeout [ 230.746279][ T5795] hsr_slave_0: entered promiscuous mode [ 230.756125][ T5795] hsr_slave_1: entered promiscuous mode [ 230.764556][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.772292][ T5795] Cannot create hsr debugfs directory [ 230.815735][ T5786] Bluetooth: hci1: command tx timeout [ 230.821379][ T5786] Bluetooth: hci3: command tx timeout [ 230.823995][ T5785] hsr_slave_0: entered promiscuous mode [ 230.836768][ T5785] hsr_slave_1: entered promiscuous mode [ 230.845217][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.852950][ T5785] Cannot create hsr debugfs directory [ 230.974044][ T5786] Bluetooth: hci4: command tx timeout [ 231.054094][ T5786] Bluetooth: hci2: command tx timeout [ 231.698237][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.750058][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.857575][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.955129][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.150621][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.194091][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.232903][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.270318][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.320542][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.431910][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.508834][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.546825][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.586433][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.674649][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.720204][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.734311][ T5786] Bluetooth: hci0: command tx timeout [ 232.776073][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.822279][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.859852][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.908937][ T5786] Bluetooth: hci3: command tx timeout [ 232.914922][ T5786] Bluetooth: hci1: command tx timeout [ 232.949942][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.999464][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.054282][ T5786] Bluetooth: hci4: command tx timeout [ 233.139343][ T5786] Bluetooth: hci2: command tx timeout [ 233.651515][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.762497][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.940091][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.984375][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.028773][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.113986][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.121658][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.138327][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.146095][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.208103][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.247121][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.254831][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.272489][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.280137][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.326050][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.442491][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.450216][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.545324][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.662936][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.673913][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.721910][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.729609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.788790][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.796497][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.870087][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.877787][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.023059][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.278069][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.442538][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.450408][ T5069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.532515][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.540283][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.592884][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.073281][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.147662][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.188338][ T5792] veth0_vlan: entered promiscuous mode [ 237.319678][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.356686][ T5792] veth1_vlan: entered promiscuous mode [ 237.635389][ T5784] veth0_vlan: entered promiscuous mode [ 237.716903][ T5792] veth0_macvtap: entered promiscuous mode [ 237.753080][ T5784] veth1_vlan: entered promiscuous mode [ 237.810091][ T5792] veth1_macvtap: entered promiscuous mode [ 237.975917][ T5794] veth0_vlan: entered promiscuous mode [ 238.034101][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.082320][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.127612][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.140682][ T5794] veth1_vlan: entered promiscuous mode [ 238.245129][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.254299][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.263281][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.272521][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.319009][ T5784] veth0_macvtap: entered promiscuous mode [ 238.408256][ T5784] veth1_macvtap: entered promiscuous mode [ 238.586907][ T5794] veth0_macvtap: entered promiscuous mode [ 238.659377][ T5794] veth1_macvtap: entered promiscuous mode [ 238.712998][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.725028][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.741292][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.918219][ T5785] veth0_vlan: entered promiscuous mode [ 238.926635][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.939232][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.949680][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.960460][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.977699][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.011711][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.022492][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.037950][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.095361][ T5785] veth1_vlan: entered promiscuous mode [ 239.184546][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.196709][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.209315][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.221422][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.236267][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.287233][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.296748][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.306676][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.315786][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.369079][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.380782][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.390158][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.399300][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.545389][ T5785] veth0_macvtap: entered promiscuous mode [ 239.603698][ T5785] veth1_macvtap: entered promiscuous mode [ 239.851980][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.863020][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.873311][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.884078][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.894325][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.905482][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.920487][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.140597][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.151473][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.161779][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.172843][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.183050][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.193974][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.208747][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.283823][ T5795] veth0_vlan: entered promiscuous mode [ 240.393586][ T5795] veth1_vlan: entered promiscuous mode [ 240.580163][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.589364][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.598634][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.607759][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.765032][ T5795] veth0_macvtap: entered promiscuous mode [ 240.865216][ T5795] veth1_macvtap: entered promiscuous mode [ 241.111814][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.122699][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.132932][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.145677][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.159753][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.171986][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.182245][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.193032][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.208007][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.420493][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.433168][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.444926][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.457115][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.467271][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.478166][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.488282][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.499157][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.514030][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.777848][ T5795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.787252][ T5795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.796450][ T5795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.805572][ T5795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.014270][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.022343][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.079525][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.087831][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.427496][ T5792] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 246.242331][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.250657][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.382919][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.391487][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.591812][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.600665][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.819653][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.828454][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.422015][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.430864][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.761658][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.770363][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.931682][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 248.374343][ T5975] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 248.468440][ T3983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.476594][ T3983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.562214][ T5975] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 248.749094][ T3898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.757291][ T3898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.991354][ T5990] syzkaller0: entered promiscuous mode [ 249.997255][ T5990] syzkaller0: entered allmulticast mode [ 251.513194][ T6010] netlink: 'syz.4.20': attribute type 4 has an invalid length. [ 251.586211][ T6016] netlink: 'syz.4.20': attribute type 4 has an invalid length. [ 251.846804][ T6015] syzkaller0: entered promiscuous mode [ 251.852518][ T6015] syzkaller0: entered allmulticast mode [ 252.945796][ T6028] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 252.953587][ T6028] netlink: 56 bytes leftover after parsing attributes in process `syz.1.25'. [ 253.024389][ T6028] Zero length message leads to an empty skb [ 253.875580][ T6036] warning: `syz.1.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 256.719449][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 256.728785][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 256.751918][ T6062] gretap0: entered promiscuous mode [ 256.762394][ T6062] batadv_slave_1: entered promiscuous mode [ 260.326107][ T6100] loop2: detected capacity change from 0 to 2048 [ 260.832108][ T6100] hpfs: filesystem error: improperly stopped; already mounted read-only [ 260.841047][ T6100] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 260.849189][ T6100] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 261.415463][ T6100] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.61'. [ 262.043390][ T6125] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 262.472679][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 262.481840][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 262.491456][ T6130] netlink: 38 bytes leftover after parsing attributes in process `syz.1.72'. [ 262.500668][ T6130] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.270875][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 265.280108][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 265.293625][ T6162] netlink: 38 bytes leftover after parsing attributes in process `syz.3.89'. [ 265.319200][ T6162] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.569670][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 266.444970][ T6180] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET) [ 266.827065][ T6186] netdevsim netdevsim3 : renamed from netdevsim3 (while UP) [ 266.960289][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 268.336227][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 269.665645][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 270.644813][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 270.654158][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 270.663145][ T6236] netlink: 38 bytes leftover after parsing attributes in process `syz.1.122'. [ 270.672503][ T6236] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.796155][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.123'. [ 271.621169][ T6248] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 272.240392][ T6252] syzkaller0: entered promiscuous mode [ 272.254076][ T6252] syzkaller0: entered allmulticast mode [ 272.390231][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 273.727875][ T6273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 274.127731][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 274.196153][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.140'. [ 274.205762][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.140'. [ 274.259867][ T6277] gretap0: entered promiscuous mode [ 274.278837][ T6277] batadv_slave_1: entered promiscuous mode [ 274.287911][ T6277] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 274.300530][ T6277] Cannot create hsr debugfs directory [ 275.263026][ T6292] syzkaller0: entered promiscuous mode [ 275.268923][ T6292] syzkaller0: entered allmulticast mode [ 276.635792][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 276.696829][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.154'. [ 276.706224][ T6310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.154'. [ 276.729167][ T6310] gretap0: entered promiscuous mode [ 276.740714][ T6310] batadv_slave_1: entered promiscuous mode [ 276.754401][ T6310] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 276.762178][ T6310] Cannot create hsr debugfs directory [ 278.568667][ T6339] syzkaller0: entered promiscuous mode [ 278.574862][ T6339] syzkaller0: entered allmulticast mode [ 279.867651][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 281.549303][ T6372] syzkaller0: entered promiscuous mode [ 281.555189][ T6372] syzkaller0: entered allmulticast mode [ 281.995179][ T6375] loop1: detected capacity change from 0 to 2048 [ 282.454325][ T6375] hpfs: filesystem error: improperly stopped; already mounted read-only [ 282.463078][ T6375] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 282.472092][ T6375] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 283.025257][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 283.341364][ T6391] netlink: 'syz.0.181': attribute type 4 has an invalid length. [ 284.785727][ T6406] openvswitch: netlink: Flow key attr not present in new flow. [ 284.949699][ T6406] netlink: 830 bytes leftover after parsing attributes in process `syz.1.189'. [ 285.792385][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.799570][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.416125][ T6425] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 287.088999][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.203'. [ 287.102629][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 287.155818][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'. [ 288.115653][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 288.585740][ T6455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.209'. [ 289.075956][ T6464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.604476][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 291.040795][ T6491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.224'. [ 293.167154][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 293.435619][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.237'. [ 295.948658][ T6556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.252'. [ 297.263166][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 297.272917][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 298.420387][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'. [ 300.837291][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 300.846764][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.277'. [ 300.925416][ T6612] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 300.933298][ T6612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.278'. [ 301.874736][ T6621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'. [ 303.410414][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 304.086450][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 304.100550][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 304.222958][ T6649] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 304.232883][ T6649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.293'. [ 305.042791][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.296'. [ 306.769362][ T6683] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 306.777483][ T6683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.306'. [ 307.940812][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 308.675691][ T6699] loop2: detected capacity change from 0 to 512 [ 308.788006][ T6699] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.797738][ T6699] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 309.075031][ T6699] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 309.112987][ T6709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.134664][ T6711] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 309.147965][ T6699] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 309.198301][ T6699] System zones: 0-2, 18-18, 34-34 [ 309.349207][ T6699] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 309.506348][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 309.514037][ T6699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.781988][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.599547][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.844605][ T6801] ===================================================== [ 318.851946][ T6801] BUG: KMSAN: uninit-value in nsim_get_ringparam+0xa8/0xe0 [ 318.859714][ T6801] nsim_get_ringparam+0xa8/0xe0 [ 318.865220][ T6801] ethtool_set_ringparam+0x268/0x570 [ 318.870715][ T6801] dev_ethtool+0x126d/0x2a40 [ 318.875659][ T6801] dev_ioctl+0xb0e/0x1280 [ 318.880183][ T6801] compat_sock_ioctl+0xeea/0x1360 [ 318.885596][ T6801] __se_compat_sys_ioctl+0x80f/0x1020 [ 318.891179][ T6801] __ia32_compat_sys_ioctl+0x93/0xe0 [ 318.897030][ T6801] ia32_sys_call+0x2226/0x4180 [ 318.902017][ T6801] __do_fast_syscall_32+0xb0/0x110 [ 318.907928][ T6801] do_fast_syscall_32+0x38/0x80 [ 318.912998][ T6801] do_SYSENTER_32+0x1f/0x30 [ 318.917892][ T6801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 318.924697][ T6801] [ 318.927128][ T6801] Local variable kernel_ringparam created at: [ 318.933318][ T6801] ethtool_set_ringparam+0x96/0x570 [ 318.942527][ T6801] dev_ethtool+0x126d/0x2a40 [ 318.948262][ T6801] [ 318.950709][ T6801] CPU: 1 UID: 0 PID: 6801 Comm: syz.0.356 Not tainted 6.13.0-syzkaller-06077-gab18b8fff124 #0 [ 318.962665][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.973190][ T6801] ===================================================== [ 318.980469][ T6801] Disabling lock debugging due to kernel taint [ 318.987355][ T6801] Kernel panic - not syncing: kmsan.panic set ... [ 318.993919][ T6801] CPU: 1 UID: 0 PID: 6801 Comm: syz.0.356 Tainted: G B 6.13.0-syzkaller-06077-gab18b8fff124 #0 [ 319.005859][ T6801] Tainted: [B]=BAD_PAGE [ 319.010121][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 319.020343][ T6801] Call Trace: [ 319.023743][ T6801] [ 319.026801][ T6801] dump_stack_lvl+0x216/0x2d0 [ 319.031654][ T6801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 319.037702][ T6801] dump_stack+0x1e/0x24 [ 319.042038][ T6801] panic+0x4e2/0xcf0 [ 319.046161][ T6801] ? kmsan_get_metadata+0x51/0x1c0 [ 319.051532][ T6801] kmsan_report+0x2c7/0x2d0 [ 319.056270][ T6801] ? __msan_warning+0x95/0x120 [ 319.061252][ T6801] ? nsim_get_ringparam+0xa8/0xe0 [ 319.066488][ T6801] ? ethtool_set_ringparam+0x268/0x570 [ 319.072176][ T6801] ? dev_ethtool+0x126d/0x2a40 [ 319.077137][ T6801] ? dev_ioctl+0xb0e/0x1280 [ 319.081866][ T6801] ? compat_sock_ioctl+0xeea/0x1360 [ 319.087257][ T6801] ? __se_compat_sys_ioctl+0x80f/0x1020 [ 319.093017][ T6801] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 319.098724][ T6801] ? ia32_sys_call+0x2226/0x4180 [ 319.103878][ T6801] ? __do_fast_syscall_32+0xb0/0x110 [ 319.109386][ T6801] ? do_fast_syscall_32+0x38/0x80 [ 319.114626][ T6801] ? do_SYSENTER_32+0x1f/0x30 [ 319.119519][ T6801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.126299][ T6801] ? __do_fast_syscall_32+0xb0/0x110 [ 319.131838][ T6801] ? do_fast_syscall_32+0x38/0x80 [ 319.137091][ T6801] ? do_SYSENTER_32+0x1f/0x30 [ 319.141993][ T6801] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.148745][ T6801] ? tomoyo_domain_quota_is_ok+0x10d/0x6e0 [ 319.154808][ T6801] ? kmsan_get_metadata+0x13e/0x1c0 [ 319.160239][ T6801] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 319.166767][ T6801] ? kmsan_get_metadata+0x13e/0x1c0 [ 319.172262][ T6801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 319.178280][ T6801] ? kmsan_get_metadata+0x13e/0x1c0 [ 319.183678][ T6801] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 319.190114][ T6801] ? kmsan_get_metadata+0x13e/0x1c0 [ 319.195515][ T6801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 319.201530][ T6801] __msan_warning+0x95/0x120 [ 319.206302][ T6801] nsim_get_ringparam+0xa8/0xe0 [ 319.211341][ T6801] ? __pfx_nsim_set_ringparam+0x10/0x10 [ 319.217066][ T6801] ? __pfx_nsim_get_ringparam+0x10/0x10 [ 319.222791][ T6801] ethtool_set_ringparam+0x268/0x570 [ 319.228275][ T6801] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 319.234301][ T6801] dev_ethtool+0x126d/0x2a40 [ 319.239079][ T6801] dev_ioctl+0xb0e/0x1280 [ 319.243602][ T6801] compat_sock_ioctl+0xeea/0x1360 [ 319.248816][ T6801] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 319.254468][ T6801] __se_compat_sys_ioctl+0x80f/0x1020 [ 319.260055][ T6801] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 319.266590][ T6801] ? kmsan_get_metadata+0x13e/0x1c0 [ 319.271999][ T6801] __ia32_compat_sys_ioctl+0x93/0xe0 [ 319.277481][ T6801] ia32_sys_call+0x2226/0x4180 [ 319.282431][ T6801] __do_fast_syscall_32+0xb0/0x110 [ 319.287743][ T6801] ? switch_fpu_return+0x17/0x20 [ 319.292858][ T6801] do_fast_syscall_32+0x38/0x80 [ 319.297922][ T6801] do_SYSENTER_32+0x1f/0x30 [ 319.302631][ T6801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.309211][ T6801] RIP: 0023:0xf743d579 [ 319.313417][ T6801] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 319.333215][ T6801] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 319.341801][ T6801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 319.349917][ T6801] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.358036][ T6801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.366148][ T6801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 319.374277][ T6801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.382408][ T6801] [ 319.385955][ T6801] Kernel Offset: disabled [ 319.390340][ T6801] Rebooting in 86400 seconds..