last executing test programs: 6.887319679s ago: executing program 2 (id=70): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x34}}, 0x0) 6.086790201s ago: executing program 2 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 5.863820316s ago: executing program 0 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 5.704362593s ago: executing program 3 (id=75): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x8800) 5.468479004s ago: executing program 1 (id=77): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2, @void, @value}, 0x94) 4.913126198s ago: executing program 3 (id=78): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x0, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000000000000000cf2e8439ca11fe", 0x28}], 0x1}, 0x40000) 4.768414675s ago: executing program 0 (id=79): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.767951377s ago: executing program 4 (id=80): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x2}, &(0x7f00000002c0)=0x8) 4.726347733s ago: executing program 1 (id=81): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40800000810000073110900000000008510"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f00000000c0), 0xb9) 4.236765898s ago: executing program 2 (id=82): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) 3.85313128s ago: executing program 3 (id=83): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x34}}, 0x0) 3.790460119s ago: executing program 0 (id=84): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}], 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 3.757067411s ago: executing program 1 (id=85): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 3.655606534s ago: executing program 4 (id=86): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)) 3.019862749s ago: executing program 3 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004d80)=[{{&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000480)=""/24, 0x18}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/53, 0x35}], 0x7, &(0x7f00000006c0)=""/105, 0x69}, 0x4}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/66, 0x42}, {&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/197, 0xc5}], 0x4, &(0x7f0000000b40)=""/145, 0x91}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1a}], 0x4, 0x2000, 0x0) 2.923921423s ago: executing program 2 (id=88): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002c80), 0x0, 0x8800) 2.887789716s ago: executing program 1 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xfff2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 2.82824126s ago: executing program 0 (id=90): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r1, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) 2.81512633s ago: executing program 4 (id=91): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x91}, &(0x7f0000000080)=0x8) 2.080388637s ago: executing program 2 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 1.996463748s ago: executing program 4 (id=93): socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 1.876747465s ago: executing program 0 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffff79, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x2040) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafbe863cac50580088b77fb3cf321872b", 0x1e}, {0x0}, {&(0x7f0000000300)="1dd962be50a86ef92f7d", 0xa}], 0x3) 1.579652045s ago: executing program 1 (id=95): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair(0x1f, 0x0, 0xf, 0x0) 1.488512657s ago: executing program 3 (id=96): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r3, 0x2}, &(0x7f00000002c0)=0x8) 1.122661288s ago: executing program 4 (id=97): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x34}}, 0x0) 514.495046ms ago: executing program 3 (id=98): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 364.550791ms ago: executing program 1 (id=99): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x8000400) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 155.06336ms ago: executing program 4 (id=100): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x101}, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 30.743778ms ago: executing program 2 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x007'], 0x10) 0s ago: executing program 0 (id=102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002c80), 0x0, 0x8800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 207.321012][ T5771] cgroup: Unknown subsys name 'net' [ 207.442511][ T5771] cgroup: Unknown subsys name 'cpuset' [ 207.459051][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.611773][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.618525][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.060501][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 268.823561][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.831784][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.839736][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.849368][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.858511][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.867816][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.891640][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.902809][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.909075][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.923305][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.925653][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.940331][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.951586][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.967192][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.976843][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.986488][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.993344][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.012301][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.021902][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.049891][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.073672][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.092235][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.125574][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.171405][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.183860][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.749801][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 270.815065][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 270.951007][ T5798] Bluetooth: hci1: command tx timeout [ 271.139149][ T5798] Bluetooth: hci2: command tx timeout [ 271.145229][ T5798] Bluetooth: hci0: command tx timeout [ 271.158578][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 271.194526][ T5798] Bluetooth: hci3: command tx timeout [ 271.351703][ T5798] Bluetooth: hci4: command tx timeout [ 271.979021][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.987219][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.995088][ T5793] bridge_slave_0: entered allmulticast mode [ 272.005324][ T5793] bridge_slave_0: entered promiscuous mode [ 272.051327][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.058990][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.066872][ T5795] bridge_slave_0: entered allmulticast mode [ 272.076861][ T5795] bridge_slave_0: entered promiscuous mode [ 272.115848][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 272.145322][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.159003][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.167013][ T5793] bridge_slave_1: entered allmulticast mode [ 272.177333][ T5793] bridge_slave_1: entered promiscuous mode [ 272.187569][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 272.245380][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.254644][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.262541][ T5795] bridge_slave_1: entered allmulticast mode [ 272.271619][ T5795] bridge_slave_1: entered promiscuous mode [ 272.597399][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.672832][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.694261][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.918341][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.060548][ T5798] Bluetooth: hci1: command tx timeout [ 273.114815][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.123226][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.131253][ T5794] bridge_slave_0: entered allmulticast mode [ 273.141363][ T5794] bridge_slave_0: entered promiscuous mode [ 273.175333][ T5795] team0: Port device team_slave_0 added [ 273.201519][ T5798] Bluetooth: hci0: command tx timeout [ 273.207255][ T5802] Bluetooth: hci2: command tx timeout [ 273.271124][ T5802] Bluetooth: hci3: command tx timeout [ 273.276933][ T5795] team0: Port device team_slave_1 added [ 273.287275][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.296703][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.304571][ T5794] bridge_slave_1: entered allmulticast mode [ 273.314647][ T5794] bridge_slave_1: entered promiscuous mode [ 273.344086][ T5793] team0: Port device team_slave_0 added [ 273.407309][ T5793] team0: Port device team_slave_1 added [ 273.456165][ T5802] Bluetooth: hci4: command tx timeout [ 273.679873][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.688803][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.716537][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.787538][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.849138][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.857040][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.864749][ T5796] bridge_slave_0: entered allmulticast mode [ 273.874546][ T5796] bridge_slave_0: entered promiscuous mode [ 273.889628][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.898564][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.925553][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.942224][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.949388][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.975939][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.999287][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.065555][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.073547][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.082951][ T5796] bridge_slave_1: entered allmulticast mode [ 274.092358][ T5796] bridge_slave_1: entered promiscuous mode [ 274.104532][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.112585][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.138984][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.187071][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.194861][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.202712][ T5809] bridge_slave_0: entered allmulticast mode [ 274.212349][ T5809] bridge_slave_0: entered promiscuous mode [ 274.227522][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.235383][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.243303][ T5809] bridge_slave_1: entered allmulticast mode [ 274.253578][ T5809] bridge_slave_1: entered promiscuous mode [ 274.497440][ T5794] team0: Port device team_slave_0 added [ 274.553962][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.578954][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.601016][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.619648][ T5794] team0: Port device team_slave_1 added [ 274.799560][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.911164][ T5795] hsr_slave_0: entered promiscuous mode [ 274.920221][ T5795] hsr_slave_1: entered promiscuous mode [ 275.066539][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.073919][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.102352][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.113440][ T5802] Bluetooth: hci1: command tx timeout [ 275.126583][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.134228][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.161003][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.183825][ T5809] team0: Port device team_slave_0 added [ 275.228061][ T5793] hsr_slave_0: entered promiscuous mode [ 275.238783][ T5793] hsr_slave_1: entered promiscuous mode [ 275.248265][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.256331][ T5793] Cannot create hsr debugfs directory [ 275.270191][ T5796] team0: Port device team_slave_0 added [ 275.276273][ T5802] Bluetooth: hci2: command tx timeout [ 275.276391][ T5802] Bluetooth: hci0: command tx timeout [ 275.304398][ T5796] team0: Port device team_slave_1 added [ 275.320018][ T5809] team0: Port device team_slave_1 added [ 275.360991][ T5798] Bluetooth: hci3: command tx timeout [ 275.426838][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.434365][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.461100][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.513154][ T5798] Bluetooth: hci4: command tx timeout [ 275.657881][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.665292][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.693120][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.930603][ T5794] hsr_slave_0: entered promiscuous mode [ 275.940522][ T5794] hsr_slave_1: entered promiscuous mode [ 275.949231][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.957211][ T5794] Cannot create hsr debugfs directory [ 275.966697][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.974245][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.000984][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.117354][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.124688][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.151330][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.436296][ T5809] hsr_slave_0: entered promiscuous mode [ 276.447002][ T5809] hsr_slave_1: entered promiscuous mode [ 276.456177][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.464060][ T5809] Cannot create hsr debugfs directory [ 276.860687][ T5796] hsr_slave_0: entered promiscuous mode [ 276.869979][ T5796] hsr_slave_1: entered promiscuous mode [ 276.879404][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.887298][ T5796] Cannot create hsr debugfs directory [ 277.201555][ T5798] Bluetooth: hci1: command tx timeout [ 277.351375][ T5798] Bluetooth: hci0: command tx timeout [ 277.357298][ T5798] Bluetooth: hci2: command tx timeout [ 277.452017][ T5798] Bluetooth: hci3: command tx timeout [ 277.600101][ T5798] Bluetooth: hci4: command tx timeout [ 277.622511][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.746722][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.835363][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.941370][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.128699][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.247721][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.317452][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.344189][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.527443][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.563738][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.670568][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.713866][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.886630][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.008836][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.034775][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.070397][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.229115][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.264407][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.326143][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.406755][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.941076][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.152698][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.200031][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.278165][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.285910][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.371306][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.438170][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.445890][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.652405][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.695537][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.744211][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.751937][ T4029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.779894][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.944768][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.952504][ T4029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.977553][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.985270][ T4029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.014821][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.022534][ T4029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.123367][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.324103][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.331903][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.381964][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.469224][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.480067][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.552925][ T5795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.563828][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.624899][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.632728][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.795601][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.132125][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.139778][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.158528][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.166309][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.618524][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.897727][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.265734][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.349404][ T5793] veth0_vlan: entered promiscuous mode [ 284.516392][ T5793] veth1_vlan: entered promiscuous mode [ 284.602978][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.847958][ T5794] veth0_vlan: entered promiscuous mode [ 284.980478][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.009558][ T5794] veth1_vlan: entered promiscuous mode [ 285.088246][ T5795] veth0_vlan: entered promiscuous mode [ 285.173627][ T5793] veth0_macvtap: entered promiscuous mode [ 285.236195][ T5795] veth1_vlan: entered promiscuous mode [ 285.262557][ T5793] veth1_macvtap: entered promiscuous mode [ 285.558671][ T5794] veth0_macvtap: entered promiscuous mode [ 285.632096][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.695386][ T5795] veth0_macvtap: entered promiscuous mode [ 285.720184][ T5794] veth1_macvtap: entered promiscuous mode [ 285.755407][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.785674][ T5795] veth1_macvtap: entered promiscuous mode [ 285.943204][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.952607][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.961825][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.971024][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.023131][ T5796] veth0_vlan: entered promiscuous mode [ 286.105440][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.136145][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.168442][ T5796] veth1_vlan: entered promiscuous mode [ 286.245418][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.281495][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.407879][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.417324][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.426615][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.435842][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.462934][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.472285][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.481708][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.490956][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.758955][ T5796] veth0_macvtap: entered promiscuous mode [ 286.848319][ T5796] veth1_macvtap: entered promiscuous mode [ 287.107905][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.244514][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.343564][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.352904][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.362178][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.371398][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.187322][ T5809] veth0_vlan: entered promiscuous mode [ 288.356855][ T5809] veth1_vlan: entered promiscuous mode [ 288.864678][ T5809] veth0_macvtap: entered promiscuous mode [ 288.950860][ T5809] veth1_macvtap: entered promiscuous mode [ 289.238795][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.386709][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.479895][ T5809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.491655][ T5809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.500730][ T5809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.512038][ T5809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.064503][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.071515][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.333197][ T4029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.342719][ T4029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.619481][ T763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.627849][ T763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.754485][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.762977][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.975031][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.984146][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.067239][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.076962][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.249632][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.258005][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.300991][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 295.639601][ T763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.648835][ T763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.054556][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.062885][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.618518][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 296.628008][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 296.638032][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 296.778679][ T5985] macvlan1: entered promiscuous mode [ 296.826990][ T5985] ipvlan0: entered promiscuous mode [ 296.838290][ T5985] ipvlan0: left promiscuous mode [ 296.914211][ T5985] macvlan1: left promiscuous mode [ 297.307791][ T5989] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 297.712013][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.720152][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.302732][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.311490][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.229109][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12'. [ 301.427357][ T6027] tipc: Started in network mode [ 301.433138][ T6027] tipc: Node identity aab0a48107a4, cluster identity 4711 [ 301.441765][ T6027] tipc: Enabled bearer , priority 0 [ 301.809999][ T6027] syzkaller0: entered promiscuous mode [ 301.815979][ T6027] syzkaller0: entered allmulticast mode [ 301.832206][ T6027] tipc: Resetting bearer [ 301.988348][ T6025] tipc: Resetting bearer [ 302.292514][ T6025] tipc: Disabling bearer [ 302.523231][ T6040] netlink: 72 bytes leftover after parsing attributes in process `syz.3.23'. [ 303.032264][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24'. [ 303.641790][ T6048] tipc: Started in network mode [ 303.647253][ T6048] tipc: Node identity 6a09603cfcef, cluster identity 4711 [ 303.656183][ T6048] tipc: Enabled bearer , priority 0 [ 303.886984][ T6055] syzkaller0: entered promiscuous mode [ 303.888309][ T6056] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 303.892798][ T6055] syzkaller0: entered allmulticast mode [ 303.896588][ T6055] tipc: Resetting bearer [ 303.961096][ T6044] tipc: Resetting bearer [ 304.292959][ T6044] tipc: Disabling bearer [ 305.426524][ T6064] Zero length message leads to an empty skb [ 306.518956][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 308.007058][ T6090] tipc: Enabled bearer , priority 0 [ 308.205373][ T6090] syzkaller0: entered promiscuous mode [ 308.211390][ T6090] syzkaller0: entered allmulticast mode [ 308.221170][ T6090] tipc: Resetting bearer [ 308.353159][ T6088] tipc: Resetting bearer [ 308.535416][ T6088] tipc: Disabling bearer [ 320.186786][ T6211] tipc: Started in network mode [ 320.192374][ T6211] tipc: Node identity fef0c6449b36, cluster identity 4711 [ 320.200610][ T6211] tipc: Enabled bearer , priority 0 [ 320.412122][ T6211] syzkaller0: entered promiscuous mode [ 320.417929][ T6211] syzkaller0: entered allmulticast mode [ 320.427590][ T6211] tipc: Resetting bearer [ 320.465285][ T3680] tipc: Resetting bearer [ 320.516483][ T6209] tipc: Resetting bearer [ 320.695663][ T6209] tipc: Disabling bearer [ 321.449872][ C0] ===================================================== [ 321.457444][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x7af/0x9a0 [ 321.464895][ C0] eth_type_trans+0x7af/0x9a0 [ 321.469820][ C0] ip_tunnel_rcv+0x2d7d/0x34f0 [ 321.474984][ C0] gre_rcv+0x1aad/0x2050 [ 321.479489][ C0] gre_rcv+0x285/0x380 [ 321.483941][ C0] ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 321.489735][ C0] ip_local_deliver_finish+0x32b/0x530 [ 321.495586][ C0] ip_local_deliver+0x228/0x4b0 [ 321.500682][ C0] ip_rcv_finish+0x4db/0x570 [ 321.505638][ C0] ip_rcv+0xcb/0x380 [ 321.509749][ C0] __netif_receive_skb+0x312/0xac0 [ 321.515239][ C0] process_backlog+0x485/0xa00 [ 321.520261][ C0] __napi_poll+0xdd/0x9c0 [ 321.525000][ C0] net_rx_action+0xa59/0x1ac0 [ 321.529947][ C0] handle_softirqs+0x166/0x6e0 [ 321.535044][ C0] __do_softirq+0x14/0x1b [ 321.539629][ C0] do_softirq+0x99/0x100 [ 321.544202][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 321.549451][ C0] __dev_queue_xmit+0x2e5d/0x5e20 [ 321.554824][ C0] neigh_resolve_output+0x9c5/0xaf0 [ 321.560285][ C0] ip_finish_output2+0x1abc/0x1d50 [ 321.565866][ C0] __ip_finish_output+0x284/0x860 [ 321.571278][ C0] ip_finish_output+0x4a/0x640 [ 321.576272][ C0] ip_mc_output+0x60c/0xdb0 [ 321.581201][ C0] __ip_queue_xmit+0x1f06/0x1fa0 [ 321.586405][ C0] sctp_v4_xmit+0x684/0x1120 [ 321.591326][ C0] sctp_packet_transmit+0x4389/0x46d0 [ 321.596989][ C0] sctp_packet_singleton+0x2e3/0x450 [ 321.602744][ C0] sctp_outq_flush+0x71c/0x67c0 [ 321.607858][ C0] sctp_outq_uncork+0x9e/0xc0 [ 321.612997][ C0] sctp_do_sm+0x8c8e/0x9720 [ 321.617768][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 321.623682][ C0] sctp_sendmsg_to_asoc+0x1a6a/0x2260 [ 321.629318][ C0] sctp_sendmsg+0x3910/0x49f0 [ 321.634360][ C0] inet_sendmsg+0x26c/0x2a0 [ 321.639110][ C0] __sock_sendmsg+0x278/0x3d0 [ 321.644176][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 321.649185][ C0] ___sys_sendmsg+0x271/0x3b0 [ 321.654224][ C0] __sys_sendmsg+0x1aa/0x300 [ 321.659059][ C0] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 321.665023][ C0] ia32_sys_call+0x3692/0x42c0 [ 321.670034][ C0] __do_fast_syscall_32+0xb0/0x150 [ 321.675517][ C0] do_fast_syscall_32+0x38/0x80 [ 321.680611][ C0] do_SYSENTER_32+0x1f/0x30 [ 321.685479][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.692186][ C0] [ 321.694642][ C0] Uninit was stored to memory at: [ 321.700034][ C0] pskb_expand_head+0x310/0x1610 [ 321.705329][ C0] skb_expand_head+0x499/0x8e0 [ 321.710341][ C0] ip_finish_output2+0xe48/0x1d50 [ 321.715748][ C0] __ip_finish_output+0x284/0x860 [ 321.721169][ C0] ip_finish_output+0x4a/0x640 [ 321.726196][ C0] ip_mc_output+0x60c/0xdb0 [ 321.731061][ C0] __ip_queue_xmit+0x1f06/0x1fa0 [ 321.736277][ C0] sctp_v4_xmit+0x684/0x1120 [ 321.741211][ C0] sctp_packet_transmit+0x4389/0x46d0 [ 321.746856][ C0] sctp_packet_singleton+0x2e3/0x450 [ 321.752546][ C0] sctp_outq_flush+0x71c/0x67c0 [ 321.757710][ C0] sctp_outq_uncork+0x9e/0xc0 [ 321.762798][ C0] sctp_do_sm+0x8c8e/0x9720 [ 321.767606][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 321.773452][ C0] sctp_sendmsg_to_asoc+0x1a6a/0x2260 [ 321.779074][ C0] sctp_sendmsg+0x3910/0x49f0 [ 321.784118][ C0] inet_sendmsg+0x26c/0x2a0 [ 321.788875][ C0] __sock_sendmsg+0x278/0x3d0 [ 321.793947][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 321.798976][ C0] ___sys_sendmsg+0x271/0x3b0 [ 321.804025][ C0] __sys_sendmsg+0x1aa/0x300 [ 321.808864][ C0] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 321.814800][ C0] ia32_sys_call+0x3692/0x42c0 [ 321.819803][ C0] __do_fast_syscall_32+0xb0/0x150 [ 321.825289][ C0] do_fast_syscall_32+0x38/0x80 [ 321.830389][ C0] do_SYSENTER_32+0x1f/0x30 [ 321.835250][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.841971][ C0] [ 321.844420][ C0] Uninit was created at: [ 321.848981][ C0] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 321.856099][ C0] kmalloc_reserve+0x22f/0x4b0 [ 321.861274][ C0] __alloc_skb+0x347/0x7d0 [ 321.865988][ C0] sctp_packet_transmit+0x44b/0x46d0 [ 321.871656][ C0] sctp_packet_singleton+0x2e3/0x450 [ 321.877226][ C0] sctp_outq_flush+0x71c/0x67c0 [ 321.882475][ C0] sctp_outq_uncork+0x9e/0xc0 [ 321.887412][ C0] sctp_do_sm+0x8c8e/0x9720 [ 321.892288][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 321.898005][ C0] sctp_sendmsg_to_asoc+0x1a6a/0x2260 [ 321.903744][ C0] sctp_sendmsg+0x3910/0x49f0 [ 321.908684][ C0] inet_sendmsg+0x26c/0x2a0 [ 321.913548][ C0] __sock_sendmsg+0x278/0x3d0 [ 321.918511][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 321.923625][ C0] ___sys_sendmsg+0x271/0x3b0 [ 321.928534][ C0] __sys_sendmsg+0x1aa/0x300 [ 321.933469][ C0] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 321.939273][ C0] ia32_sys_call+0x3692/0x42c0 [ 321.944364][ C0] __do_fast_syscall_32+0xb0/0x150 [ 321.949718][ C0] do_fast_syscall_32+0x38/0x80 [ 321.954935][ C0] do_SYSENTER_32+0x1f/0x30 [ 321.959684][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.966406][ C0] [ 321.968894][ C0] CPU: 0 UID: 0 PID: 6221 Comm: syz.3.98 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 321.981161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.991530][ C0] ===================================================== [ 321.998616][ C0] Disabling lock debugging due to kernel taint [ 322.005038][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 322.011657][ C0] CPU: 0 UID: 0 PID: 6221 Comm: syz.3.98 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 322.025417][ C0] Tainted: [B]=BAD_PAGE [ 322.029726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.039988][ C0] Call Trace: [ 322.043421][ C0] [ 322.046413][ C0] __dump_stack+0x26/0x30 [ 322.051002][ C0] dump_stack_lvl+0x53/0x270 [ 322.055871][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.061998][ C0] dump_stack+0x1e/0x25 [ 322.066413][ C0] panic+0x4bd/0xd50 [ 322.070633][ C0] kmsan_report+0x31c/0x320 [ 322.075434][ C0] ? __msan_warning+0x1b/0x30 [ 322.080378][ C0] ? eth_type_trans+0x7af/0x9a0 [ 322.085493][ C0] ? ip_tunnel_rcv+0x2d7d/0x34f0 [ 322.090719][ C0] ? gre_rcv+0x1aad/0x2050 [ 322.095404][ C0] ? gre_rcv+0x285/0x380 [ 322.099875][ C0] ? ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 322.105846][ C0] ? ip_local_deliver_finish+0x32b/0x530 [ 322.111715][ C0] ? ip_local_deliver+0x228/0x4b0 [ 322.116992][ C0] ? ip_rcv_finish+0x4db/0x570 [ 322.121971][ C0] ? ip_rcv+0xcb/0x380 [ 322.126240][ C0] ? __netif_receive_skb+0x312/0xac0 [ 322.131765][ C0] ? process_backlog+0x485/0xa00 [ 322.136952][ C0] ? __napi_poll+0xdd/0x9c0 [ 322.141680][ C0] ? net_rx_action+0xa59/0x1ac0 [ 322.146792][ C0] ? handle_softirqs+0x166/0x6e0 [ 322.151943][ C0] ? __do_softirq+0x14/0x1b [ 322.156649][ C0] ? do_softirq+0x99/0x100 [ 322.161274][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 322.166683][ C0] ? __dev_queue_xmit+0x2e5d/0x5e20 [ 322.172113][ C0] ? neigh_resolve_output+0x9c5/0xaf0 [ 322.177723][ C0] ? ip_finish_output2+0x1abc/0x1d50 [ 322.183276][ C0] ? __ip_finish_output+0x284/0x860 [ 322.188760][ C0] ? ip_finish_output+0x4a/0x640 [ 322.193955][ C0] ? ip_mc_output+0x60c/0xdb0 [ 322.198869][ C0] ? __ip_queue_xmit+0x1f06/0x1fa0 [ 322.204234][ C0] ? sctp_v4_xmit+0x684/0x1120 [ 322.209213][ C0] ? sctp_packet_transmit+0x4389/0x46d0 [ 322.215004][ C0] ? sctp_packet_singleton+0x2e3/0x450 [ 322.220727][ C0] ? sctp_outq_flush+0x71c/0x67c0 [ 322.226013][ C0] ? sctp_outq_uncork+0x9e/0xc0 [ 322.231120][ C0] ? sctp_do_sm+0x8c8e/0x9720 [ 322.236053][ C0] ? sctp_primitive_ASSOCIATE+0xd4/0x100 [ 322.241949][ C0] ? sctp_sendmsg_to_asoc+0x1a6a/0x2260 [ 322.247729][ C0] ? sctp_sendmsg+0x3910/0x49f0 [ 322.252819][ C0] ? inet_sendmsg+0x26c/0x2a0 [ 322.257722][ C0] ? __sock_sendmsg+0x278/0x3d0 [ 322.262829][ C0] ? ____sys_sendmsg+0x7e0/0xd80 [ 322.267993][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 322.273058][ C0] ? __sys_sendmsg+0x1aa/0x300 [ 322.278037][ C0] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 322.284000][ C0] ? ia32_sys_call+0x3692/0x42c0 [ 322.289144][ C0] ? __do_fast_syscall_32+0xb0/0x150 [ 322.294666][ C0] ? do_fast_syscall_32+0x38/0x80 [ 322.299926][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 322.304832][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.311610][ C0] ? stack_depot_save_flags+0x60f/0x7b0 [ 322.317425][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.322816][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 322.329413][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.334815][ C0] __msan_warning+0x1b/0x30 [ 322.339661][ C0] eth_type_trans+0x7af/0x9a0 [ 322.344620][ C0] ip_tunnel_rcv+0x2d7d/0x34f0 [ 322.349707][ C0] gre_rcv+0x1aad/0x2050 [ 322.354224][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.360341][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 322.365178][ C0] gre_rcv+0x285/0x380 [ 322.369472][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 322.374298][ C0] ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 322.380112][ C0] ip_local_deliver_finish+0x32b/0x530 [ 322.385835][ C0] ip_local_deliver+0x228/0x4b0 [ 322.390911][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 322.397148][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 322.402748][ C0] ip_rcv_finish+0x4db/0x570 [ 322.407600][ C0] ip_rcv+0xcb/0x380 [ 322.411726][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 322.417093][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 322.421820][ C0] __netif_receive_skb+0x312/0xac0 [ 322.427177][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.432596][ C0] process_backlog+0x485/0xa00 [ 322.437635][ C0] ? net_rx_action+0x4b1/0x1ac0 [ 322.442778][ C0] ? __pfx_process_backlog+0x10/0x10 [ 322.448308][ C0] __napi_poll+0xdd/0x9c0 [ 322.452879][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.458259][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.464356][ C0] net_rx_action+0xa59/0x1ac0 [ 322.469277][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.474658][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.480832][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 322.486189][ C0] handle_softirqs+0x166/0x6e0 [ 322.491208][ C0] __do_softirq+0x14/0x1b [ 322.495736][ C0] do_softirq+0x99/0x100 [ 322.500187][ C0] [ 322.503258][ C0] [ 322.506333][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 322.511576][ C0] __dev_queue_xmit+0x2e5d/0x5e20 [ 322.516836][ C0] ? _raw_write_unlock_bh+0x2d/0x40 [ 322.522314][ C0] ? ___neigh_create+0x34f4/0x3b90 [ 322.527687][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.533087][ C0] ? __dev_queue_xmit+0x30c/0x5e20 [ 322.538462][ C0] neigh_resolve_output+0x9c5/0xaf0 [ 322.543936][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 322.549907][ C0] ip_finish_output2+0x1abc/0x1d50 [ 322.555337][ C0] __ip_finish_output+0x284/0x860 [ 322.560662][ C0] ip_finish_output+0x4a/0x640 [ 322.565699][ C0] ? __rcu_read_unlock+0x47/0xd0 [ 322.570879][ C0] ip_mc_output+0x60c/0xdb0 [ 322.575638][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 322.581283][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 322.586549][ C0] __ip_queue_xmit+0x1f06/0x1fa0 [ 322.591748][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 322.598399][ C0] sctp_v4_xmit+0x684/0x1120 [ 322.603319][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.608734][ C0] ? __pfx_sctp_v4_xmit+0x10/0x10 [ 322.613985][ C0] sctp_packet_transmit+0x4389/0x46d0 [ 322.619713][ C0] sctp_packet_singleton+0x2e3/0x450 [ 322.625299][ C0] ? kmsan_get_metadata+0xf0/0x160 [ 322.630725][ C0] sctp_outq_flush+0x71c/0x67c0 [ 322.635873][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 322.642222][ C0] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 322.648364][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.654457][ C0] sctp_outq_uncork+0x9e/0xc0 [ 322.659399][ C0] sctp_do_sm+0x8c8e/0x9720 [ 322.664164][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.669552][ C0] ? sctp_stream_init_ext+0x65/0x2f0 [ 322.675116][ C0] ? __msan_warning+0x1b/0x30 [ 322.680043][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.685433][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.691525][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.697001][ C0] sctp_primitive_ASSOCIATE+0xd4/0x100 [ 322.702813][ C0] sctp_sendmsg_to_asoc+0x1a6a/0x2260 [ 322.708427][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.713822][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.719970][ C0] sctp_sendmsg+0x3910/0x49f0 [ 322.724876][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 322.731543][ C0] ? __pfx_sctp_sendmsg+0x10/0x10 [ 322.736807][ C0] inet_sendmsg+0x26c/0x2a0 [ 322.741556][ C0] __sock_sendmsg+0x278/0x3d0 [ 322.746499][ C0] ____sys_sendmsg+0x7e0/0xd80 [ 322.751527][ C0] ___sys_sendmsg+0x271/0x3b0 [ 322.756443][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.762539][ C0] ? __rcu_read_unlock+0x6d/0xd0 [ 322.767699][ C0] ? __fget_files+0x3b4/0x4a0 [ 322.772598][ C0] ? __fget_files+0x3b9/0x4a0 [ 322.777491][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 322.782872][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.788968][ C0] __sys_sendmsg+0x1aa/0x300 [ 322.793830][ C0] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 322.799635][ C0] ia32_sys_call+0x3692/0x42c0 [ 322.804614][ C0] __do_fast_syscall_32+0xb0/0x150 [ 322.809980][ C0] do_fast_syscall_32+0x38/0x80 [ 322.815064][ C0] do_SYSENTER_32+0x1f/0x30 [ 322.819810][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.826402][ C0] RIP: 0023:0xf703e539 [ 322.830639][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.850498][ C0] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 322.859148][ C0] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800004c0 [ 322.867312][ C0] RDX: 00000000000003e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.875455][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.883615][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.891786][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.899977][ C0] [ 322.903419][ C0] Kernel Offset: disabled [ 322.907840][ C0] Rebooting in 86400 seconds..