last executing test programs: 1.793714576s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 1.14730815s ago: executing program 3 (id=6): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x6, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) close(r4) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usbip_server_init(0x3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 773.117397ms ago: executing program 0 (id=1): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x90, 0x80, 0x1, 0xd, {{0x5, 0x4, 0x3, 0x19, 0x14, 0x68, 0x0, 0x5b, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004811) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket(0x10, 0x3, 0x0) 59.615386ms ago: executing program 1 (id=2): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}}], 0x1, 0x240080cb) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r6 = socket(0x12, 0x800, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x68, "971827277d922e2afb1a79d21aa7c68f8eb6e30ddf4de3595bd823f1994766e60fbfa3cf5c4607077bffa6642f3d48f3fadee7cbe42a52619bd807a0d57dea34acbcb7d955061044248d6c728ccfdffc08aaec090a09c06f62ef1b668cd2d7ba87b2d897ef45c903"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000380)="fdffffffffe6f2458c079d63a866b31ff3ceda1e28f23f455e96a06001fc3f828b27b6", 0x23}], 0x2}}], 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) 2.12148ms ago: executing program 0 (id=7): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) 0s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000540)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6e}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 175.244334][ T5795] cgroup: Unknown subsys name 'net' [ 175.375943][ T5795] cgroup: Unknown subsys name 'cpuset' [ 175.391743][ T5795] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 181.294352][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 185.410282][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.418921][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.427615][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.436064][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.444286][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.452028][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.462571][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.472959][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.482360][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.493124][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.506371][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.532033][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.557609][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.561913][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.567176][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.576760][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.598519][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.620081][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.630040][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.639082][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.648702][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.661359][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.672430][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.684495][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.696571][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.823823][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 187.367421][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 187.563028][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 187.658958][ T5819] Bluetooth: hci0: command tx timeout [ 187.664567][ T5819] Bluetooth: hci1: command tx timeout [ 187.779160][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.786764][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.794300][ T5812] bridge_slave_0: entered allmulticast mode [ 187.801007][ T5819] Bluetooth: hci4: command tx timeout [ 187.804053][ T5812] bridge_slave_0: entered promiscuous mode [ 187.806676][ T5819] Bluetooth: hci3: command tx timeout [ 187.818161][ T5819] Bluetooth: hci2: command tx timeout [ 187.844389][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 187.971095][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.978727][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.986529][ T5812] bridge_slave_1: entered allmulticast mode [ 187.996282][ T5812] bridge_slave_1: entered promiscuous mode [ 188.262856][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.318557][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.380828][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 188.588076][ T5812] team0: Port device team_slave_0 added [ 188.608620][ T5812] team0: Port device team_slave_1 added [ 188.735350][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.742863][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.750607][ T5825] bridge_slave_0: entered allmulticast mode [ 188.760058][ T5825] bridge_slave_0: entered promiscuous mode [ 188.891290][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.898627][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.926447][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.943328][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.951055][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.960655][ T5825] bridge_slave_1: entered allmulticast mode [ 188.969696][ T5825] bridge_slave_1: entered promiscuous mode [ 189.173783][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.181104][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.208680][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.362558][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.373399][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.382921][ T5811] bridge_slave_0: entered allmulticast mode [ 189.393982][ T5811] bridge_slave_0: entered promiscuous mode [ 189.407079][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.414525][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.422179][ T5823] bridge_slave_0: entered allmulticast mode [ 189.431559][ T5823] bridge_slave_0: entered promiscuous mode [ 189.453127][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.462777][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.470621][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.478319][ T5823] bridge_slave_1: entered allmulticast mode [ 189.487938][ T5823] bridge_slave_1: entered promiscuous mode [ 189.538153][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.545979][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.553630][ T5811] bridge_slave_1: entered allmulticast mode [ 189.562990][ T5811] bridge_slave_1: entered promiscuous mode [ 189.585713][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.716142][ T5819] Bluetooth: hci1: command tx timeout [ 189.721898][ T50] Bluetooth: hci0: command tx timeout [ 189.803785][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.827278][ T5812] hsr_slave_0: entered promiscuous mode [ 189.837318][ T5812] hsr_slave_1: entered promiscuous mode [ 189.876776][ T50] Bluetooth: hci2: command tx timeout [ 189.885548][ T50] Bluetooth: hci3: command tx timeout [ 189.891120][ T50] Bluetooth: hci4: command tx timeout [ 189.964324][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.982602][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.040210][ T5825] team0: Port device team_slave_0 added [ 190.092243][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.102205][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.109794][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.117439][ T5813] bridge_slave_0: entered allmulticast mode [ 190.129642][ T5813] bridge_slave_0: entered promiscuous mode [ 190.206423][ T5825] team0: Port device team_slave_1 added [ 190.247198][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.254639][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.262357][ T5813] bridge_slave_1: entered allmulticast mode [ 190.271582][ T5813] bridge_slave_1: entered promiscuous mode [ 190.491217][ T5811] team0: Port device team_slave_0 added [ 190.507980][ T5823] team0: Port device team_slave_0 added [ 190.573483][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.591037][ T5811] team0: Port device team_slave_1 added [ 190.605875][ T5823] team0: Port device team_slave_1 added [ 190.668882][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.676237][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.702633][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.724473][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.736571][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.743715][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.769992][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.983905][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.991265][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.017704][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.074209][ T5813] team0: Port device team_slave_0 added [ 191.090283][ T5813] team0: Port device team_slave_1 added [ 191.137972][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.145287][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.172319][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.187265][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.194338][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.220632][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.367981][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.375331][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.401768][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.500507][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.507865][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.534150][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.550423][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.557713][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.584079][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.753064][ T5825] hsr_slave_0: entered promiscuous mode [ 191.761561][ T5825] hsr_slave_1: entered promiscuous mode [ 191.769173][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 191.775169][ T5825] Cannot create hsr debugfs directory [ 191.823741][ T5819] Bluetooth: hci1: command tx timeout [ 191.829732][ T5819] Bluetooth: hci0: command tx timeout [ 191.956858][ T5811] hsr_slave_0: entered promiscuous mode [ 191.966845][ T5811] hsr_slave_1: entered promiscuous mode [ 191.975643][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 191.981555][ T5811] Cannot create hsr debugfs directory [ 191.986411][ T5819] Bluetooth: hci4: command tx timeout [ 191.992533][ T5819] Bluetooth: hci3: command tx timeout [ 192.001202][ T5819] Bluetooth: hci2: command tx timeout [ 192.064254][ T5823] hsr_slave_0: entered promiscuous mode [ 192.073908][ T5823] hsr_slave_1: entered promiscuous mode [ 192.082072][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 192.088107][ T5823] Cannot create hsr debugfs directory [ 192.197212][ T5813] hsr_slave_0: entered promiscuous mode [ 192.207390][ T5813] hsr_slave_1: entered promiscuous mode [ 192.216420][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 192.222334][ T5813] Cannot create hsr debugfs directory [ 192.712764][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.830793][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.984287][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.121088][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.851800][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.876882][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.886124][ T50] Bluetooth: hci0: command tx timeout [ 193.886201][ T5819] Bluetooth: hci1: command tx timeout [ 193.917459][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.938805][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.959679][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.044242][ T50] Bluetooth: hci2: command tx timeout [ 194.049976][ T50] Bluetooth: hci3: command tx timeout [ 194.050743][ T5819] Bluetooth: hci4: command tx timeout [ 194.064218][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.192853][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.224014][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.381937][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.518549][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.566819][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.683838][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.752499][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.779914][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.848530][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.922685][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.958407][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.966772][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.091419][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.098969][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.208337][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.215961][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.424222][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.798795][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.898006][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.905643][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.004642][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.020912][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.028489][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.164899][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.317956][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.359208][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.422954][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.514175][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.521785][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.540309][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.662758][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.670304][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.685877][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.693401][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.713930][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.721498][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.952846][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.963610][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.024593][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.032168][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.047485][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.054910][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.843621][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.376037][ T5812] veth0_vlan: entered promiscuous mode [ 198.494524][ T5812] veth1_vlan: entered promiscuous mode [ 198.607143][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.916107][ T5812] veth0_macvtap: entered promiscuous mode [ 199.025498][ T5812] veth1_macvtap: entered promiscuous mode [ 199.073400][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.158574][ T5825] veth0_vlan: entered promiscuous mode [ 199.217058][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.281043][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.325798][ T5825] veth1_vlan: entered promiscuous mode [ 199.380507][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.439450][ T3006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.487141][ T3006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.541660][ T3006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.577301][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.652509][ T3006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.785725][ T5825] veth0_macvtap: entered promiscuous mode [ 199.828895][ T5823] veth0_vlan: entered promiscuous mode [ 199.886944][ T5825] veth1_macvtap: entered promiscuous mode [ 199.913162][ T5823] veth1_vlan: entered promiscuous mode [ 199.974244][ T5813] veth0_vlan: entered promiscuous mode [ 200.126861][ T5813] veth1_vlan: entered promiscuous mode [ 200.156888][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.252789][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.378536][ T3006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.412140][ T5823] veth0_macvtap: entered promiscuous mode [ 200.434956][ T3006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.487164][ T4966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.528534][ T5813] veth0_macvtap: entered promiscuous mode [ 200.541016][ T4966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.574594][ T5823] veth1_macvtap: entered promiscuous mode [ 200.644557][ T5813] veth1_macvtap: entered promiscuous mode [ 200.817380][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.873502][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.937214][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.981687][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.060562][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.135355][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.183618][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.255890][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.264908][ T4249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.352652][ T4249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.390402][ T4249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.441368][ T4249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.477537][ T5811] veth0_vlan: entered promiscuous mode [ 202.593893][ T5811] veth1_vlan: entered promiscuous mode [ 202.988855][ T5811] veth0_macvtap: entered promiscuous mode [ 203.053811][ T5811] veth1_macvtap: entered promiscuous mode [ 203.268057][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.386738][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.456090][ T4249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.487738][ T4249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.555850][ T4249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.564876][ T4249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.532370][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.540948][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.785403][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.793451][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.188686][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 207.546924][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.554930][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.704268][ T5990] overlayfs: overlapping lowerdir path [ 207.897276][ T4125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.905490][ T4125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.170696][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.179050][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.270428][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.282026][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.362556][ T5995] Bluetooth: MGMT ver 1.23 [ 208.388229][ T5995] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 208.567608][ T5999] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 208.574450][ T5999] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.582942][ T5999] vhci_hcd vhci_hcd.0: Device attached [ 208.674422][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.684593][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.738672][ T4125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.746802][ T4125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.865637][ T5895] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 209.007025][ T6002] vhci_hcd: connection reset by peer [ 209.025852][ T4966] vhci_hcd: stop threads [ 209.030281][ T4966] vhci_hcd: release socket [ 209.034906][ T4966] vhci_hcd: disconnect device [ 209.303973][ T6011] ===================================================== [ 209.311398][ T6011] BUG: KMSAN: uninit-value in pptp_xmit+0xc9a/0x2780 [ 209.318609][ T6011] pptp_xmit+0xc9a/0x2780 [ 209.323135][ T6011] ppp_input+0x1d9/0xe60 [ 209.327694][ T6011] pppoe_rcv_core+0x166/0x6d0 [ 209.332570][ T6011] sk_backlog_rcv+0x13f/0x420 [ 209.337630][ T6011] __release_sock+0x1d3/0x330 [ 209.342536][ T6011] release_sock+0x6b/0x270 [ 209.347208][ T6011] pppoe_sendmsg+0x15d/0xcb0 [ 209.351969][ T6011] __sock_sendmsg+0x330/0x3d0 [ 209.356987][ T6011] ____sys_sendmsg+0x893/0xd80 [ 209.361944][ T6011] ___sys_sendmsg+0x271/0x3b0 [ 209.366947][ T6011] __sys_sendmmsg+0x3bf/0x7c0 [ 209.371811][ T6011] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 209.377813][ T6011] ia32_sys_call+0x39e0/0x4310 [ 209.382717][ T6011] __do_fast_syscall_32+0xb0/0x150 [ 209.388181][ T6011] do_fast_syscall_32+0x38/0x80 [ 209.393176][ T6011] do_SYSENTER_32+0x1f/0x30 [ 209.397944][ T6011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.404463][ T6011] [ 209.407008][ T6011] Uninit was created at: [ 209.411583][ T6011] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 209.418452][ T6011] kmalloc_reserve+0x22f/0x4b0 [ 209.423387][ T6011] pskb_expand_head+0x1fc/0x1610 [ 209.428811][ T6011] skb_realloc_headroom+0x152/0x2d0 [ 209.434228][ T6011] pptp_xmit+0xa0d/0x2780 [ 209.438864][ T6011] ppp_input+0x1d9/0xe60 [ 209.443276][ T6011] pppoe_rcv_core+0x166/0x6d0 [ 209.448303][ T6011] sk_backlog_rcv+0x13f/0x420 [ 209.453141][ T6011] __release_sock+0x1d3/0x330 [ 209.458172][ T6011] release_sock+0x6b/0x270 [ 209.462743][ T6011] pppoe_sendmsg+0x15d/0xcb0 [ 209.467676][ T6011] __sock_sendmsg+0x330/0x3d0 [ 209.472496][ T6011] ____sys_sendmsg+0x893/0xd80 [ 209.477560][ T6011] ___sys_sendmsg+0x271/0x3b0 [ 209.482417][ T6011] __sys_sendmmsg+0x3bf/0x7c0 [ 209.487467][ T6011] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 209.493331][ T6011] ia32_sys_call+0x39e0/0x4310 [ 209.498417][ T6011] __do_fast_syscall_32+0xb0/0x150 [ 209.503675][ T6011] do_fast_syscall_32+0x38/0x80 [ 209.508843][ T6011] do_SYSENTER_32+0x1f/0x30 [ 209.513488][ T6011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.520239][ T6011] [ 209.522678][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.1.2 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 209.534319][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.544672][ T6011] ===================================================== [ 209.551816][ T6011] Disabling lock debugging due to kernel taint [ 209.558210][ T6011] Kernel panic - not syncing: kmsan.panic set ... [ 209.564764][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.1.2 Tainted: G B 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 209.577895][ T6011] Tainted: [B]=BAD_PAGE [ 209.582149][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.592332][ T6011] Call Trace: [ 209.595724][ T6011] [ 209.598757][ T6011] __dump_stack+0x26/0x30 [ 209.603268][ T6011] dump_stack_lvl+0x53/0x270 [ 209.608036][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 209.614033][ T6011] dump_stack+0x1e/0x25 [ 209.618381][ T6011] vpanic+0x361/0xbc0 [ 209.622565][ T6011] panic+0x15d/0x160 [ 209.626679][ T6011] kmsan_report+0x31c/0x320 [ 209.631359][ T6011] ? __msan_warning+0x1b/0x30 [ 209.636191][ T6011] ? pptp_xmit+0xc9a/0x2780 [ 209.640900][ T6011] ? ppp_input+0x1d9/0xe60 [ 209.645525][ T6011] ? pppoe_rcv_core+0x166/0x6d0 [ 209.650590][ T6011] ? sk_backlog_rcv+0x13f/0x420 [ 209.655621][ T6011] ? __release_sock+0x1d3/0x330 [ 209.660711][ T6011] ? release_sock+0x6b/0x270 [ 209.665473][ T6011] ? pppoe_sendmsg+0x15d/0xcb0 [ 209.670459][ T6011] ? __sock_sendmsg+0x330/0x3d0 [ 209.675483][ T6011] ? ____sys_sendmsg+0x893/0xd80 [ 209.680635][ T6011] ? ___sys_sendmsg+0x271/0x3b0 [ 209.685644][ T6011] ? __sys_sendmmsg+0x3bf/0x7c0 [ 209.690680][ T6011] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 209.696644][ T6011] ? ia32_sys_call+0x39e0/0x4310 [ 209.701707][ T6011] ? __do_fast_syscall_32+0xb0/0x150 [ 209.707113][ T6011] ? do_fast_syscall_32+0x38/0x80 [ 209.712256][ T6011] ? do_SYSENTER_32+0x1f/0x30 [ 209.717042][ T6011] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.723706][ T6011] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 209.730234][ T6011] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 209.736498][ T6011] ? kmem_cache_free+0x3ef/0xec0 [ 209.741618][ T6011] ? __kfree_skb+0x20b/0x260 [ 209.746387][ T6011] ? kmsan_get_metadata+0xfb/0x160 [ 209.751658][ T6011] __msan_warning+0x1b/0x30 [ 209.756288][ T6011] pptp_xmit+0xc9a/0x2780 [ 209.760818][ T6011] ? __pfx_pptp_xmit+0x10/0x10 [ 209.765740][ T6011] ppp_input+0x1d9/0xe60 [ 209.770178][ T6011] ? kmsan_get_metadata+0xfb/0x160 [ 209.775468][ T6011] pppoe_rcv_core+0x166/0x6d0 [ 209.780342][ T6011] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 209.785709][ T6011] sk_backlog_rcv+0x13f/0x420 [ 209.790565][ T6011] __release_sock+0x1d3/0x330 [ 209.795436][ T6011] release_sock+0x6b/0x270 [ 209.800020][ T6011] pppoe_sendmsg+0x15d/0xcb0 [ 209.804782][ T6011] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 209.810045][ T6011] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 209.815336][ T6011] __sock_sendmsg+0x330/0x3d0 [ 209.820190][ T6011] ____sys_sendmsg+0x893/0xd80 [ 209.825164][ T6011] ___sys_sendmsg+0x271/0x3b0 [ 209.830087][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 209.836100][ T6011] ? kmsan_get_metadata+0xfb/0x160 [ 209.841393][ T6011] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 209.847355][ T6011] __sys_sendmmsg+0x3bf/0x7c0 [ 209.852228][ T6011] ? do_futex+0x3a1/0x480 [ 209.856723][ T6011] ? kmsan_get_metadata+0xfb/0x160 [ 209.862016][ T6011] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 209.867861][ T6011] ia32_sys_call+0x39e0/0x4310 [ 209.872806][ T6011] __do_fast_syscall_32+0xb0/0x150 [ 209.878058][ T6011] do_fast_syscall_32+0x38/0x80 [ 209.883133][ T6011] do_SYSENTER_32+0x1f/0x30 [ 209.887757][ T6011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.894260][ T6011] RIP: 0023:0xf7fc2539 [ 209.898443][ T6011] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 209.918212][ T6011] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 209.926806][ T6011] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000a00 [ 209.934976][ T6011] RDX: 0000000000000001 RSI: 00000000240080cb RDI: 0000000000000000 [ 209.943101][ T6011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.951252][ T6011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.959318][ T6011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.967404][ T6011] [ 209.970851][ T6011] Kernel Offset: disabled [ 209.975258][ T6011] Rebooting in 86400 seconds..