last executing test programs: 1m38.125103881s ago: executing program 0 (id=1): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, &(0x7f0000001580), 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x318, 0x1}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x7) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000140)={0x110003, 0x0, [0x7, 0x1, 0x7, 0x2d5, 0x9, 0x3, 0x7, 0x4000000002279]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 1m37.229975233s ago: executing program 2 (id=6): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlock(&(0x7f00003a3000/0x3000)=nil, 0x3000) getpid() bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002"], 0x2c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}}, 0x0) 1m36.146211806s ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) chdir(&(0x7f00000001c0)='./file0/../file0/file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xfdef) 1m30.467526443s ago: executing program 2 (id=13): socket(0xa, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r2, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "54f4b819152ce95b6d8f6f8717ba5b8a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c1aeb3c76c9b29b4761493ea13a3dd7"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2ee}]}, 0x58}}, 0x0) 1m28.971722374s ago: executing program 2 (id=15): setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000002c0)="1a00000002000000", 0x8) 1m27.940094928s ago: executing program 2 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1m25.208359787s ago: executing program 2 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000002000010000000000040002000000000008000100", @ANYRES32=0x0, @ANYBLOB="100007000000000020"], 0x2c, 0x2) 1m24.267118724s ago: executing program 2 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) gettid() sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x3, 0x0, 0x7, 0x0}) 1m23.2359648s ago: executing program 4 (id=27): setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000002c0)="1a00000002000000", 0x8) 1m22.30336664s ago: executing program 4 (id=29): socket(0x18, 0x1, 0x0) r0 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1m20.630551574s ago: executing program 32 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) chdir(&(0x7f00000001c0)='./file0/../file0/file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xfdef) 1m20.533226413s ago: executing program 4 (id=33): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x40080c1) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "54f4b819152ce95b6d8f6f8717ba5b8a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c1aeb3c76c9b29b4761493ea13a3dd7"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2ee}]}, 0x58}}, 0x0) 50.656025088s ago: executing program 3 (id=72): r0 = socket(0x18, 0x1, 0x0) r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 49.37884695s ago: executing program 3 (id=74): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$media(0x0, 0x1, 0x200) 33.312904891s ago: executing program 35 (id=74): r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$media(0x0, 0x1, 0x200) 22.053840087s ago: executing program 5 (id=92): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b07, 0x0) 19.148309467s ago: executing program 5 (id=95): socket(0xa, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "54f4b819152ce95b6d8f6f8717ba5b8a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c1aeb3c76c9b29b4761493ea13a3dd7"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2ee}]}, 0x58}}, 0x0) 18.070351232s ago: executing program 5 (id=96): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b40)={'#! ', '', [{}]}, 0x5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fspick(0xffffffffffffffff, 0x0, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffff85b}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000001ee00001d00033400000000"], 0x18}}], 0x2, 0x20000080) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000307011c000000000000000000000020090001"], 0x20}}, 0x4040000) 15.708880796s ago: executing program 5 (id=99): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.741375214s ago: executing program 5 (id=102): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f00000005c0)='F', 0x1, 0x20000800, &(0x7f0000000040)={0x11, 0x8100, 0x0, 0x1, 0xe0}, 0x14) 12.945178348s ago: executing program 5 (id=103): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400008110004b04000050297fb1000000000000", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba"], 0x0) 6.472356573s ago: executing program 1 (id=107): r0 = socket(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 5.253895639s ago: executing program 1 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="1c00000034000701fffffffffeffffff03"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3.867801392s ago: executing program 1 (id=109): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.848912883s ago: executing program 1 (id=110): r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001900), 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 937.12516ms ago: executing program 1 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='sys_enter\x00', r1}, 0x18) readahead(0xffffffffffffffff, 0x7, 0xf) 0s ago: executing program 1 (id=112): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x11c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xec, 0x2, [@TCA_FLOW_EMATCHES={0xcc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd"}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x7fff, 0x9, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf0a, 0x3, 0x6c0}, {0x5, 0x0, 0x3, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x7f}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1}}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_POLICE={0x4}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000780)}}], 0x1, 0x240080cb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 191.040799][ T5798] cgroup: Unknown subsys name 'net' [ 191.163058][ T5798] cgroup: Unknown subsys name 'cpuset' [ 191.179925][ T5798] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.594259][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.105460][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.116015][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.119659][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.132297][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.132894][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.141164][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.148205][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.158965][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.162529][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.173637][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.183278][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.186716][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.196968][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.198605][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.213671][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.221241][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.229609][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.233024][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.239016][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.246324][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.258173][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.272985][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.281902][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.285338][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.301104][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.788338][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 203.961273][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 204.372739][ T50] Bluetooth: hci3: command tx timeout [ 204.378376][ T50] Bluetooth: hci2: command tx timeout [ 204.385506][ T5823] Bluetooth: hci1: command tx timeout [ 204.391100][ T5823] Bluetooth: hci0: command tx timeout [ 204.398671][ T5110] Bluetooth: hci4: command tx timeout [ 204.644197][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 204.781080][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 204.898330][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 205.470916][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.479341][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.487246][ T5814] bridge_slave_0: entered allmulticast mode [ 205.497185][ T5814] bridge_slave_0: entered promiscuous mode [ 205.510076][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.517740][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.525708][ T5818] bridge_slave_0: entered allmulticast mode [ 205.535282][ T5818] bridge_slave_0: entered promiscuous mode [ 205.554324][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.561867][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.570720][ T5814] bridge_slave_1: entered allmulticast mode [ 205.580645][ T5814] bridge_slave_1: entered promiscuous mode [ 205.616117][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.627123][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.637091][ T5818] bridge_slave_1: entered allmulticast mode [ 205.649820][ T5818] bridge_slave_1: entered promiscuous mode [ 205.908106][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.042077][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.064296][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.102711][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.110260][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.118081][ T5822] bridge_slave_0: entered allmulticast mode [ 206.127858][ T5822] bridge_slave_0: entered promiscuous mode [ 206.279263][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.326841][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.335507][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.344092][ T5822] bridge_slave_1: entered allmulticast mode [ 206.352989][ T5822] bridge_slave_1: entered promiscuous mode [ 206.403825][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.411390][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.419319][ T5817] bridge_slave_0: entered allmulticast mode [ 206.428685][ T5817] bridge_slave_0: entered promiscuous mode [ 206.452475][ T5830] Bluetooth: hci2: command tx timeout [ 206.458096][ T5830] Bluetooth: hci4: command tx timeout [ 206.463884][ T5830] Bluetooth: hci0: command tx timeout [ 206.469492][ T5830] Bluetooth: hci1: command tx timeout [ 206.475329][ T5830] Bluetooth: hci3: command tx timeout [ 206.601991][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.609957][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.617860][ T5817] bridge_slave_1: entered allmulticast mode [ 206.627393][ T5817] bridge_slave_1: entered promiscuous mode [ 206.685611][ T5818] team0: Port device team_slave_0 added [ 206.751978][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.761857][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.769541][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.777271][ T5815] bridge_slave_0: entered allmulticast mode [ 206.786923][ T5815] bridge_slave_0: entered promiscuous mode [ 206.858736][ T5814] team0: Port device team_slave_0 added [ 206.874331][ T5818] team0: Port device team_slave_1 added [ 206.889127][ T5814] team0: Port device team_slave_1 added [ 206.952731][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.963063][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.970617][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.978619][ T5815] bridge_slave_1: entered allmulticast mode [ 206.988329][ T5815] bridge_slave_1: entered promiscuous mode [ 207.229212][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.279466][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.286747][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.313170][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.386530][ T5822] team0: Port device team_slave_0 added [ 207.405103][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.416983][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.425755][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.452729][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.467432][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.474883][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.501144][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.546920][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.566743][ T5822] team0: Port device team_slave_1 added [ 207.627534][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.634887][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.661377][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.757543][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.819083][ T5817] team0: Port device team_slave_0 added [ 207.940083][ T5817] team0: Port device team_slave_1 added [ 207.996014][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.003414][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.029677][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.163095][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.170341][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.196746][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.256265][ T5815] team0: Port device team_slave_0 added [ 208.316930][ T5818] hsr_slave_0: entered promiscuous mode [ 208.327395][ T5818] hsr_slave_1: entered promiscuous mode [ 208.399399][ T5815] team0: Port device team_slave_1 added [ 208.421664][ T5814] hsr_slave_0: entered promiscuous mode [ 208.431849][ T5814] hsr_slave_1: entered promiscuous mode [ 208.440532][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 208.446600][ T5814] Cannot create hsr debugfs directory [ 208.457634][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.464937][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.491313][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.516280][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.524965][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.532708][ T5110] Bluetooth: hci3: command tx timeout [ 208.553127][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.557068][ T5110] Bluetooth: hci0: command tx timeout [ 208.573222][ T5110] Bluetooth: hci2: command tx timeout [ 208.578782][ T5110] Bluetooth: hci1: command tx timeout [ 208.578857][ T50] Bluetooth: hci4: command tx timeout [ 208.671773][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.680385][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.706887][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.852417][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.859578][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.886307][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.014235][ T5822] hsr_slave_0: entered promiscuous mode [ 209.024537][ T5822] hsr_slave_1: entered promiscuous mode [ 209.033568][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 209.039481][ T5822] Cannot create hsr debugfs directory [ 209.287424][ T5817] hsr_slave_0: entered promiscuous mode [ 209.299445][ T5817] hsr_slave_1: entered promiscuous mode [ 209.308456][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 209.314432][ T5817] Cannot create hsr debugfs directory [ 209.556127][ T5815] hsr_slave_0: entered promiscuous mode [ 209.566521][ T5815] hsr_slave_1: entered promiscuous mode [ 209.575088][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 209.580953][ T5815] Cannot create hsr debugfs directory [ 210.615523][ T5830] Bluetooth: hci4: command tx timeout [ 210.621253][ T50] Bluetooth: hci1: command tx timeout [ 210.627346][ T5830] Bluetooth: hci2: command tx timeout [ 210.633120][ T50] Bluetooth: hci0: command tx timeout [ 210.638697][ T50] Bluetooth: hci3: command tx timeout [ 210.868645][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.981399][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.044105][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.075575][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.100939][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.123508][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.201566][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.319756][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.429975][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.498811][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.565954][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.592911][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.623915][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.651619][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.677336][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.730933][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.150875][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.180987][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.249768][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.281768][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.805101][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.856851][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.979235][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.083110][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.104944][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.165392][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.183099][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.190643][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.330183][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.337827][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.354314][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.361866][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.378701][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.386288][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.476839][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.538681][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.790215][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.797989][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.905681][ T5814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.917417][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.949694][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.957155][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.989870][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.997414][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.020360][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.027855][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.285122][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.581210][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.646532][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.743337][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.750828][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.864696][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.872431][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.183777][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.517166][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.778349][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.850765][ T5814] veth0_vlan: entered promiscuous mode [ 216.938674][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.050871][ T5814] veth1_vlan: entered promiscuous mode [ 217.235124][ T5818] veth0_vlan: entered promiscuous mode [ 217.376073][ T5818] veth1_vlan: entered promiscuous mode [ 217.540702][ T5815] veth0_vlan: entered promiscuous mode [ 217.632571][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.696418][ T5814] veth0_macvtap: entered promiscuous mode [ 217.713024][ T5815] veth1_vlan: entered promiscuous mode [ 217.751071][ T5822] veth0_vlan: entered promiscuous mode [ 217.791966][ T5814] veth1_macvtap: entered promiscuous mode [ 217.931126][ T5822] veth1_vlan: entered promiscuous mode [ 217.980658][ T5818] veth0_macvtap: entered promiscuous mode [ 218.057798][ T5818] veth1_macvtap: entered promiscuous mode [ 218.126206][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.162071][ T5815] veth0_macvtap: entered promiscuous mode [ 218.238823][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.288507][ T5815] veth1_macvtap: entered promiscuous mode [ 218.326005][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.461236][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.495178][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.510405][ T3598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.524348][ T5822] veth0_macvtap: entered promiscuous mode [ 218.576947][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.586370][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.645155][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.674940][ T5822] veth1_macvtap: entered promiscuous mode [ 218.708887][ T1109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.732339][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.765953][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.812052][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.881838][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.891118][ T1109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.984323][ T1109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.011350][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.043386][ T1109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.071729][ T1109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.102531][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.283501][ T1818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.323930][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.359499][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.403168][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.968067][ T5817] veth0_vlan: entered promiscuous mode [ 221.145456][ T5817] veth1_vlan: entered promiscuous mode [ 221.464159][ T5817] veth0_macvtap: entered promiscuous mode [ 221.549979][ T5817] veth1_macvtap: entered promiscuous mode [ 221.815475][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.915122][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.070734][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.119099][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.178385][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.252092][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.016450][ T1803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.024596][ T1803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.222540][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.230568][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.471488][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.479604][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.565796][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.574028][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.616169][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.624451][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.766127][ T4031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.775338][ T4031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.978735][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.997316][ T1803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.005553][ T1803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.049215][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.057472][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.737391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 228.162860][ T6013] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.181041][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.186740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 228.191731][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.441809][ T6018] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 228.463820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.554309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 229.625962][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.632852][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.896562][ T3884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.905364][ T3884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.163935][ T1803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.172785][ T1803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.605105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 230.706237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 230.913407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 231.013562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.465632][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.473882][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.481601][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.489468][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.501411][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.514387][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.530158][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.540163][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.548027][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 231.555881][ T42] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 232.174250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.210308][ T6035] bridge_slave_0: left allmulticast mode [ 232.216319][ T6035] bridge_slave_0: left promiscuous mode [ 232.223157][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.242440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 233.184567][ T6037] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 233.240395][ T6039] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 233.530477][ T6035] bridge_slave_1: left allmulticast mode [ 233.536688][ T6035] bridge_slave_1: left promiscuous mode [ 233.543591][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.999797][ T42] hid-generic 0001:0000:0000.0001: hidraw0: HID va0000.00 Device [syz1] on [ 234.502367][ T6035] bond0: (slave bond_slave_0): Releasing backup interface [ 234.631516][ T6035] bond0: (slave bond_slave_1): Releasing backup interface [ 234.829739][ T6035] team0: Port device team_slave_0 removed [ 234.957000][ T6035] team0: Port device team_slave_1 removed [ 234.968550][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.976410][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.145786][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.154189][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.389367][ T6032] syzkaller1: entered promiscuous mode [ 235.395147][ T6032] syzkaller1: entered allmulticast mode [ 235.465306][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.753034][ T6046] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 236.750754][ T6059] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.553904][ T6072] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 245.385379][ T1541] libceph: connect (1)[c::]:6789 error -101 [ 245.391833][ T1541] libceph: mon0 (1)[c::]:6789 connect error [ 245.969607][ T6112] infiniband syz0: set down [ 245.975111][ T6112] infiniband syz0: added bond_slave_1 [ 246.018809][ T1541] libceph: connect (1)[c::]:6789 error -101 [ 246.025136][ T1541] libceph: mon0 (1)[c::]:6789 connect error [ 246.050682][ T6107] ceph: No mds server is up or the cluster is laggy [ 246.485167][ T6112] RDS/IB: syz0: added [ 246.489544][ T6112] smc: adding ib device syz0 with port count 1 [ 246.496711][ T6112] smc: ib device syz0 port 1 has pnetid [ 248.497033][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.547230][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.571456][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.717362][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.746473][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.616226][ T6115] chnl_net:caif_netlink_parms(): no params data found [ 250.884377][ T50] Bluetooth: hci5: command tx timeout [ 251.696259][ T5443] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.865677][ T5443] usb 2-1: Using ep0 maxpacket: 8 [ 251.904676][ T5443] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 251.913170][ T5443] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.923467][ T5443] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.933625][ T5443] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.943810][ T5443] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.957087][ T5443] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.966424][ T5443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.480809][ T5443] usb 2-1: usb_control_msg returned -32 [ 252.486796][ T5443] usbtmc 2-1:16.0: can't read capabilities [ 252.932677][ T50] Bluetooth: hci5: command tx timeout [ 254.524386][ T5443] usb 2-1: USB disconnect, device number 2 [ 255.068162][ T50] Bluetooth: hci5: command tx timeout [ 255.145125][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.154051][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.161548][ T6115] bridge_slave_0: entered allmulticast mode [ 255.169828][ T6115] bridge_slave_0: entered promiscuous mode [ 255.192990][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.200477][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.209175][ T6115] bridge_slave_1: entered allmulticast mode [ 255.218032][ T6115] bridge_slave_1: entered promiscuous mode [ 255.559619][ T6115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.714396][ T6115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.195930][ T6115] team0: Port device team_slave_0 added [ 256.291676][ T6115] team0: Port device team_slave_1 added [ 256.633529][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.640607][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.667006][ T6115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.884228][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.891379][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.920712][ T6115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.093152][ T50] Bluetooth: hci5: command tx timeout [ 257.688313][ T6115] hsr_slave_0: entered promiscuous mode [ 257.697716][ T6115] hsr_slave_1: entered promiscuous mode [ 257.705828][ T6115] debugfs: 'hsr0' already exists in 'hsr' [ 257.711655][ T6115] Cannot create hsr debugfs directory [ 259.218425][ T5110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 259.228700][ T5110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 259.240060][ T5110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 259.293251][ T5110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 259.323728][ T5110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.848593][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 261.214258][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 261.221795][ T6115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.403335][ T6115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.413101][ T50] Bluetooth: hci6: command tx timeout [ 261.474649][ T6115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.631405][ T6115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.683359][ T6171] chnl_net:caif_netlink_parms(): no params data found [ 261.684063][ T42] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 261.698815][ T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.708911][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.719120][ T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.734382][ T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.749286][ T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.758704][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.241876][ T42] usb 2-1: usb_control_msg returned -32 [ 263.248099][ T42] usbtmc 2-1:16.0: can't read capabilities [ 263.373860][ T6115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.493585][ T50] Bluetooth: hci6: command tx timeout [ 263.685498][ T6115] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.807299][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.814839][ T4031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.965963][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.973436][ T4031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.249399][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.257377][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.265098][ T6171] bridge_slave_0: entered allmulticast mode [ 264.273749][ T6171] bridge_slave_0: entered promiscuous mode [ 264.467809][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.477883][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.485805][ T6171] bridge_slave_1: entered allmulticast mode [ 264.499333][ T6171] bridge_slave_1: entered promiscuous mode [ 264.821460][ T1541] usb 2-1: USB disconnect, device number 3 [ 265.572503][ T50] Bluetooth: hci6: command tx timeout [ 265.681975][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.805547][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.174833][ T6171] team0: Port device team_slave_0 added [ 266.254926][ T6171] team0: Port device team_slave_1 added [ 266.844422][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.854838][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.883201][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.169124][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.177511][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.205164][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.652580][ T50] Bluetooth: hci6: command tx timeout [ 268.032825][ T6171] hsr_slave_0: entered promiscuous mode [ 268.041577][ T6171] hsr_slave_1: entered promiscuous mode [ 268.049803][ T6171] debugfs: 'hsr0' already exists in 'hsr' [ 268.055710][ T6171] Cannot create hsr debugfs directory [ 268.211023][ T6217] loop7: detected capacity change from 0 to 16384 [ 268.502690][ T6218] loop7: detected capacity change from 16384 to 0 [ 268.579462][ C0] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 268.738037][ T6115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.108762][ T5110] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.174706][ T5110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.197948][ T5110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.254048][ T5110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.270408][ T5110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.542467][ T6224] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 270.706264][ T1541] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.000999][ T6171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.009564][ T1541] usb 2-1: Using ep0 maxpacket: 8 [ 271.037022][ T1541] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 271.046506][ T1541] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.058774][ T1541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.069628][ T1541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.079881][ T1541] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.093733][ T1541] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.103015][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.163514][ T6171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.231864][ T6171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.333782][ T50] Bluetooth: hci7: command tx timeout [ 271.421912][ T6171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.542781][ T1541] usb 2-1: usb_control_msg returned -32 [ 271.549835][ T1541] usbtmc 2-1:16.0: can't read capabilities [ 271.699081][ T1541] usb 2-1: USB disconnect, device number 4 [ 273.358841][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.422895][ T50] Bluetooth: hci7: command tx timeout [ 273.618616][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.771178][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.778658][ T3884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.954730][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.962284][ T3884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.265696][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 275.494577][ T50] Bluetooth: hci7: command tx timeout [ 276.359836][ T6115] veth0_vlan: entered promiscuous mode [ 276.567786][ T6115] veth1_vlan: entered promiscuous mode [ 277.407592][ T6115] veth0_macvtap: entered promiscuous mode [ 277.584130][ T50] Bluetooth: hci7: command tx timeout [ 277.633653][ T6115] veth1_macvtap: entered promiscuous mode [ 277.724231][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.801907][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.865785][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.017358][ T4330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.094339][ T4330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.149704][ T4330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.241570][ T4330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.708448][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.717715][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.725589][ T6221] bridge_slave_0: entered allmulticast mode [ 278.737632][ T6221] bridge_slave_0: entered promiscuous mode [ 278.926140][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.940327][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.948676][ T6221] bridge_slave_1: entered allmulticast mode [ 278.957570][ T6221] bridge_slave_1: entered promiscuous mode [ 279.618506][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.639160][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.104663][ T6221] team0: Port device team_slave_0 added [ 280.144622][ T6221] team0: Port device team_slave_1 added [ 280.687299][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.695408][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.723078][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.958208][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.965593][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.994370][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.730871][ T6280] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 282.026128][ T6221] hsr_slave_0: entered promiscuous mode [ 282.035864][ T6221] hsr_slave_1: entered promiscuous mode [ 282.043859][ T6221] debugfs: 'hsr0' already exists in 'hsr' [ 282.049681][ T6221] Cannot create hsr debugfs directory [ 282.942670][ T4330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.962594][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 283.199568][ T4330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.394916][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 283.503362][ T5886] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 283.511811][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.522289][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.523787][ T4330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.532732][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.559086][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.573087][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.582589][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.804892][ T4330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.555149][ T4330] bridge_slave_1: left allmulticast mode [ 284.560959][ T4330] bridge_slave_1: left promiscuous mode [ 284.570930][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.701553][ T4330] bridge_slave_0: left allmulticast mode [ 284.707842][ T4330] bridge_slave_0: left promiscuous mode [ 284.714830][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.951954][ T5886] usb 2-1: usb_control_msg returned -32 [ 284.958269][ T5886] usbtmc 2-1:16.0: can't read capabilities [ 285.448142][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.479604][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.506775][ T4330] bond0 (unregistering): Released all slaves [ 285.622823][ T5886] usb 2-1: USB disconnect, device number 5 [ 285.870557][ T6171] veth0_vlan: entered promiscuous mode [ 287.137416][ T6171] veth1_vlan: entered promiscuous mode [ 287.980118][ T6221] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 288.053944][ T6221] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 288.094570][ T4330] hsr_slave_0: left promiscuous mode [ 288.105325][ T4330] hsr_slave_1: left promiscuous mode [ 288.113399][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.120892][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.198598][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.206341][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.387023][ T4330] veth1_macvtap: left promiscuous mode [ 288.393051][ T4330] veth0_macvtap: left promiscuous mode [ 288.398817][ T4330] veth1_vlan: left promiscuous mode [ 288.404455][ T4330] veth0_vlan: left promiscuous mode [ 289.790395][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 289.958323][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 290.257446][ T6221] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 290.414265][ T6171] veth0_macvtap: entered promiscuous mode [ 290.462685][ T6221] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 290.620451][ T6171] veth1_macvtap: entered promiscuous mode [ 291.049252][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.056170][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.384540][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.724770][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.863096][ T1109] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.945665][ T1109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.059949][ T1109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.130146][ T1109] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.391251][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.644041][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.867846][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.875565][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.891968][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.899589][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.237228][ T6331] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 293.727428][ T3982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.736420][ T3982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.784515][ T1541] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 294.848949][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.873910][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.884684][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.903836][ T3982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.914088][ T3982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.945766][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.963836][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.022866][ T1541] usb 2-1: Using ep0 maxpacket: 8 [ 295.157171][ T1541] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 295.165746][ T1541] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.176368][ T1541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.186663][ T1541] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.196848][ T1541] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.211259][ T1541] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.223647][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.022927][ T1541] usb 2-1: usb_control_msg returned -32 [ 296.028841][ T1541] usbtmc 2-1:16.0: can't read capabilities [ 296.234489][ T1541] usb 2-1: USB disconnect, device number 6 [ 297.092378][ T5110] Bluetooth: hci4: command tx timeout [ 297.948122][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.215156][ T5110] Bluetooth: hci4: command tx timeout [ 300.203794][ T6365] ptrace attach of "./syz-executor exec"[6370] was attempted by "./syz-executor exec"[6365] [ 301.114903][ T6339] chnl_net:caif_netlink_parms(): no params data found [ 301.263460][ T5110] Bluetooth: hci4: command tx timeout [ 302.623059][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.757400][ T6388] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.956041][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.327546][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.362607][ T5110] Bluetooth: hci4: command tx timeout [ 303.679713][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.312674][ T1541] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 304.502930][ T1541] usb 6-1: Using ep0 maxpacket: 8 [ 304.543372][ T1541] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 304.551933][ T1541] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.562673][ T1541] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.579520][ T1541] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.589685][ T1541] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.603333][ T1541] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.612683][ T1541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.759371][ T58] bridge_slave_1: left allmulticast mode [ 304.767671][ T58] bridge_slave_1: left promiscuous mode [ 304.777894][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.011126][ T58] bridge_slave_0: left allmulticast mode [ 305.017190][ T58] bridge_slave_0: left promiscuous mode [ 305.024129][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.399946][ T1541] usb 6-1: usb_control_msg returned -32 [ 305.406590][ T1541] usbtmc 6-1:16.0: can't read capabilities [ 305.514383][ T1541] usb 6-1: USB disconnect, device number 2 [ 306.410240][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.547741][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.671205][ T58] bond0 (unregistering): Released all slaves [ 307.883544][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.890980][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.898987][ T6339] bridge_slave_0: entered allmulticast mode [ 307.907907][ T6339] bridge_slave_0: entered promiscuous mode [ 308.225781][ T6221] veth0_vlan: entered promiscuous mode [ 308.263501][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.271068][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.279289][ T6339] bridge_slave_1: entered allmulticast mode [ 308.288070][ T6339] bridge_slave_1: entered promiscuous mode [ 308.496065][ T6221] veth1_vlan: entered promiscuous mode [ 309.134900][ T58] hsr_slave_0: left promiscuous mode [ 309.227120][ T58] hsr_slave_1: left promiscuous mode [ 309.239227][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.252637][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.398668][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.406585][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.533516][ T58] veth1_macvtap: left promiscuous mode [ 309.539351][ T58] veth0_macvtap: left promiscuous mode [ 309.547472][ T58] veth1_vlan: left promiscuous mode [ 309.556061][ T58] veth0_vlan: left promiscuous mode [ 310.538497][ T58] team0 (unregistering): Port device team_slave_1 removed [ 310.563481][ T58] team0 (unregistering): Port device team_slave_0 removed [ 311.183901][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.211039][ T6429] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 311.422366][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.723923][ T6221] veth0_macvtap: entered promiscuous mode [ 312.004632][ T6339] team0: Port device team_slave_0 added [ 312.020219][ T6221] veth1_macvtap: entered promiscuous mode [ 312.121543][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.305604][ T6339] team0: Port device team_slave_1 added [ 312.363214][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.908662][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.055299][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.114668][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.121954][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.156182][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.249146][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.257545][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.355446][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.518685][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.526820][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.556473][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.728585][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.914955][ T3687] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.004196][ T3687] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.543041][ T5881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.590231][ T3598] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.624153][ T58] bridge_slave_1: left allmulticast mode [ 314.630066][ T58] bridge_slave_1: left promiscuous mode [ 314.637206][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.845856][ T58] bridge_slave_0: left allmulticast mode [ 314.852487][ T58] bridge_slave_0: left promiscuous mode [ 314.858989][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.243194][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 315.254288][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 315.266340][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 315.277967][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 315.709807][ T5881] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 315.719319][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.727759][ T5881] usb 6-1: Product: syz [ 315.733610][ T5881] usb 6-1: Manufacturer: syz [ 315.738424][ T5881] usb 6-1: SerialNumber: syz [ 315.774762][ T5881] usb 6-1: config 0 descriptor?? [ 315.784389][ T6452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 315.826209][ T6452] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 315.886382][ T5881] usb 6-1: ucan: probing device on interface #0 [ 316.354740][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.503448][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.557766][ T58] bond0 (unregistering): Released all slaves [ 316.938671][ T5881] usb 6-1: ucan: could not read protocol version, ret=-110 [ 316.947275][ T5881] usb 6-1: ucan: probe failed; try to update the device firmware [ 317.027560][ T3598] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.092647][ T6339] hsr_slave_0: entered promiscuous mode [ 317.101265][ T6339] hsr_slave_1: entered promiscuous mode [ 317.345462][ T4031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.353857][ T4031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.119040][ T58] hsr_slave_0: left promiscuous mode [ 319.212527][ T58] hsr_slave_1: left promiscuous mode [ 319.220660][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.229012][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.396015][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.403804][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.639153][ T58] veth1_macvtap: left promiscuous mode [ 319.645083][ T58] veth0_macvtap: left promiscuous mode [ 319.651009][ T58] veth1_vlan: left promiscuous mode [ 319.656823][ T58] veth0_vlan: left promiscuous mode [ 320.803819][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 320.947740][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.965658][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.987784][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.036530][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.047392][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.274821][ T58] team0 (unregistering): Port device team_slave_1 removed [ 321.404851][ T58] team0 (unregistering): Port device team_slave_0 removed [ 322.471762][ T6486] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.175081][ T5110] Bluetooth: hci2: command tx timeout [ 324.003410][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.098039][ T6339] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.338443][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.460505][ T6339] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.698418][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.836438][ T6339] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 325.020160][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.232931][ T6339] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 325.253682][ T5110] Bluetooth: hci2: command tx timeout [ 326.207009][ C0] ===================================================== [ 326.214420][ C0] BUG: KMSAN: uninit-value in pptp_xmit+0xc9a/0x2780 [ 326.221416][ C0] pptp_xmit+0xc9a/0x2780 [ 326.226127][ C0] ppp_input+0x1d9/0xe60 [ 326.230554][ C0] pppoe_rcv_core+0x166/0x6d0 [ 326.235540][ C0] sk_backlog_rcv+0x13f/0x420 [ 326.240425][ C0] __sk_receive_skb+0x562/0xac0 [ 326.245600][ C0] pppoe_rcv+0x9dd/0xcc0 [ 326.250034][ C0] __netif_receive_skb+0x474/0xac0 [ 326.255485][ C0] process_backlog+0x485/0xa00 [ 326.260446][ C0] __napi_poll+0xdd/0x8a0 [ 326.265104][ C0] net_rx_action+0xa59/0x1ac0 [ 326.269965][ C0] handle_softirqs+0x169/0x6e0 [ 326.275010][ C0] __irq_exit_rcu+0x66/0x180 [ 326.279778][ C0] irq_exit_rcu+0x12/0x20 [ 326.284377][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 326.290248][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 326.296532][ C0] __msan_metadata_ptr_for_load_8+0x2b/0x40 [ 326.302701][ C0] set_pte_range+0x760/0xf10 [ 326.307482][ C0] filemap_map_pages+0x1af9/0x3140 [ 326.312925][ C0] handle_mm_fault+0x8aac/0xdf70 [ 326.318045][ C0] do_user_addr_fault+0x177d/0x2560 [ 326.323535][ C0] exc_page_fault+0x68/0xb0 [ 326.328245][ C0] asm_exc_page_fault+0x2b/0x30 [ 326.333372][ C0] [ 326.335790][ C0] Uninit was created at: [ 326.340295][ C0] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 326.347123][ C0] kmalloc_reserve+0x22f/0x4b0 [ 326.352302][ C0] pskb_expand_head+0x1fc/0x1610 [ 326.357475][ C0] skb_realloc_headroom+0x152/0x2d0 [ 326.362992][ C0] pptp_xmit+0xa0d/0x2780 [ 326.367568][ C0] ppp_input+0x1d9/0xe60 [ 326.371991][ C0] pppoe_rcv_core+0x166/0x6d0 [ 326.376988][ C0] sk_backlog_rcv+0x13f/0x420 [ 326.381853][ C0] __sk_receive_skb+0x562/0xac0 [ 326.386983][ C0] pppoe_rcv+0x9dd/0xcc0 [ 326.391409][ C0] __netif_receive_skb+0x474/0xac0 [ 326.396858][ C0] process_backlog+0x485/0xa00 [ 326.401789][ C0] __napi_poll+0xdd/0x8a0 [ 326.406442][ C0] net_rx_action+0xa59/0x1ac0 [ 326.411302][ C0] handle_softirqs+0x169/0x6e0 [ 326.416339][ C0] __irq_exit_rcu+0x66/0x180 [ 326.421098][ C0] irq_exit_rcu+0x12/0x20 [ 326.425707][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 326.431580][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 326.437848][ C0] [ 326.440300][ C0] CPU: 0 UID: 0 PID: 6505 Comm: syz.1.112 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 326.452191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.462492][ C0] ===================================================== [ 326.469524][ C0] Disabling lock debugging due to kernel taint [ 326.475805][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 326.482414][ C0] CPU: 0 UID: 0 PID: 6505 Comm: syz.1.112 Tainted: G B 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 326.495741][ C0] Tainted: [B]=BAD_PAGE [ 326.499945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.510069][ C0] Call Trace: [ 326.513412][ C0] [ 326.516310][ C0] __dump_stack+0x26/0x30 [ 326.520758][ C0] dump_stack_lvl+0x53/0x270 [ 326.525471][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.531400][ C0] dump_stack+0x1e/0x25 [ 326.535690][ C0] vpanic+0x361/0xbc0 [ 326.539793][ C0] panic+0x15d/0x160 [ 326.543836][ C0] kmsan_report+0x31c/0x320 [ 326.548466][ C0] ? __msan_warning+0x1b/0x30 [ 326.553285][ C0] ? pptp_xmit+0xc9a/0x2780 [ 326.557947][ C0] ? ppp_input+0x1d9/0xe60 [ 326.562460][ C0] ? pppoe_rcv_core+0x166/0x6d0 [ 326.567419][ C0] ? sk_backlog_rcv+0x13f/0x420 [ 326.572360][ C0] ? __sk_receive_skb+0x562/0xac0 [ 326.577472][ C0] ? pppoe_rcv+0x9dd/0xcc0 [ 326.581984][ C0] ? __netif_receive_skb+0x474/0xac0 [ 326.587462][ C0] ? process_backlog+0x485/0xa00 [ 326.592497][ C0] ? __napi_poll+0xdd/0x8a0 [ 326.597131][ C0] ? net_rx_action+0xa59/0x1ac0 [ 326.602086][ C0] ? handle_softirqs+0x169/0x6e0 [ 326.607141][ C0] ? __irq_exit_rcu+0x66/0x180 [ 326.611998][ C0] ? irq_exit_rcu+0x12/0x20 [ 326.616623][ C0] ? sysvec_apic_timer_interrupt+0x84/0x90 [ 326.622574][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 326.628838][ C0] ? __msan_metadata_ptr_for_load_8+0x2b/0x40 [ 326.635035][ C0] ? set_pte_range+0x760/0xf10 [ 326.639903][ C0] ? filemap_map_pages+0x1af9/0x3140 [ 326.645316][ C0] ? handle_mm_fault+0x8aac/0xdf70 [ 326.650548][ C0] ? do_user_addr_fault+0x177d/0x2560 [ 326.656088][ C0] ? exc_page_fault+0x68/0xb0 [ 326.660877][ C0] ? asm_exc_page_fault+0x2b/0x30 [ 326.666001][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 326.672220][ C0] ? kmem_cache_free+0x3ef/0xec0 [ 326.677301][ C0] ? __kfree_skb+0x20b/0x260 [ 326.682027][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 326.687306][ C0] __msan_warning+0x1b/0x30 [ 326.691908][ C0] pptp_xmit+0xc9a/0x2780 [ 326.696458][ C0] ? __pfx_pptp_xmit+0x10/0x10 [ 326.701334][ C0] ppp_input+0x1d9/0xe60 [ 326.705682][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.711611][ C0] pppoe_rcv_core+0x166/0x6d0 [ 326.716444][ C0] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 326.721753][ C0] sk_backlog_rcv+0x13f/0x420 [ 326.726546][ C0] __sk_receive_skb+0x562/0xac0 [ 326.731500][ C0] ? get_item+0x407/0x570 [ 326.735950][ C0] pppoe_rcv+0x9dd/0xcc0 [ 326.740315][ C0] ? __pfx_pppoe_rcv+0x10/0x10 [ 326.745196][ C0] __netif_receive_skb+0x474/0xac0 [ 326.750445][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 326.755694][ C0] process_backlog+0x485/0xa00 [ 326.760583][ C0] ? __pfx_process_backlog+0x10/0x10 [ 326.765978][ C0] __napi_poll+0xdd/0x8a0 [ 326.770427][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 326.775649][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.781604][ C0] net_rx_action+0xa59/0x1ac0 [ 326.786377][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 326.791603][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 326.797543][ C0] ? __rcu_read_unlock+0x47/0xd0 [ 326.802615][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 326.807823][ C0] handle_softirqs+0x169/0x6e0 [ 326.812702][ C0] __irq_exit_rcu+0x66/0x180 [ 326.817393][ C0] irq_exit_rcu+0x12/0x20 [ 326.821822][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 326.827652][ C0] [ 326.830631][ C0] [ 326.833610][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 326.839713][ C0] RIP: 0010:__msan_metadata_ptr_for_load_8+0x2b/0x40 [ 326.846495][ C0] Code: 0f 1e fa 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 08 00 00 00 31 d2 e8 6c 27 00 00 48 89 5d f0 ff 75 f0 <9d> 48 83 c4 10 5b 5d c3 cc cc cc cc cc 0f 1f 84 00 00 00 00 00 90 [ 326.866201][ C0] RSP: 0000:ffff88811ab1f8b8 EFLAGS: 00000286 [ 326.872363][ C0] RAX: ffff88811a31fce8 RBX: 0000000000000286 RCX: 000000000058439b [ 326.880415][ C0] RDX: ffff88811a71fce8 RSI: 0000000000000001 RDI: ffff88811ab1fce8 [ 326.888461][ C0] RBP: ffff88811ab1f8d8 R08: ffffea000000000f R09: 0000000000000000 [ 326.896520][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 8000000000000025 [ 326.904562][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 8000000129b17025 [ 326.912642][ C0] set_pte_range+0x760/0xf10 [ 326.917360][ C0] filemap_map_pages+0x1af9/0x3140 [ 326.922593][ C0] ? filter_irq_stacks+0x49/0x190 [ 326.927802][ C0] handle_mm_fault+0x8aac/0xdf70 [ 326.932892][ C0] ? lock_vma_under_rcu+0x795/0x8d0 [ 326.938260][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 326.943880][ C0] do_user_addr_fault+0x177d/0x2560 [ 326.949201][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 326.954581][ C0] exc_page_fault+0x68/0xb0 [ 326.959224][ C0] asm_exc_page_fault+0x2b/0x30 [ 326.964180][ C0] RIP: 0023:0xf70ee96b [ 326.968371][ C0] Code: 24 14 83 e9 01 c1 e1 0e 89 f0 89 fa 0f ac fe 03 0f ac d0 06 8d 14 0b 89 f1 25 ff 3f 00 00 83 e1 07 01 d0 ba 01 00 00 00 d3 e2 <84> 90 20 20 00 00 0f 85 69 fd ff ff e9 0a fe ff ff e8 4f 3a fe ff [ 326.988095][ C0] RSP: 002b:00000000ff933690 EFLAGS: 00010202 [ 326.994268][ C0] RAX: 000000000c39627c RBX: 000000000c230000 RCX: 0000000000000006 [ 327.002359][ C0] RDX: 0000000000000040 RSI: 00000000f1bf13e6 RDI: 00000000ffffffff [ 327.010410][ C0] RBP: 00000000f7f75610 R08: 0000000000000000 R09: 0000000000000000 [ 327.018470][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 327.026517][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 327.034585][ C0] [ 327.038046][ C0] Kernel Offset: disabled [ 327.042436][ C0] Rebooting in 86400 seconds..