last executing test programs: 1m22.864704106s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 1m21.740018721s ago: executing program 2 (id=9): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="050000000100", 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) 1m17.769542265s ago: executing program 2 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0xfffffffffffffd82, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000269e429405f0500a836c4010203030902120001270530050904"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc20009}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace(0x10, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) 1m1.733322749s ago: executing program 32 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0xfffffffffffffd82, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000269e429405f0500a836c4010203030902120001270530050904"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc20009}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace(0x10, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) 36.737370217s ago: executing program 1 (id=66): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ff5000/0xb000)=nil, 0xb000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357, 0x0, r3}}, 0x3c) 32.691443712s ago: executing program 1 (id=69): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x500008b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 31.155319357s ago: executing program 1 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 30.594166705s ago: executing program 1 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000001000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.979077363s ago: executing program 1 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 29.250111425s ago: executing program 1 (id=78): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357, 0x0, r2}}, 0x3c) 14.637753109s ago: executing program 4 (id=92): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 10.206808429s ago: executing program 33 (id=78): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357, 0x0, r2}}, 0x3c) 7.421868543s ago: executing program 4 (id=94): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 6.881500489s ago: executing program 0 (id=95): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5603, 0x0) 6.492658654s ago: executing program 4 (id=96): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x4006, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x161480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.254608804s ago: executing program 3 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.053389384s ago: executing program 0 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 5.089751841s ago: executing program 3 (id=99): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) 5.029559146s ago: executing program 0 (id=100): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x40, 0x16, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.933768534s ago: executing program 4 (id=101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x508}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x20e}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.075338177s ago: executing program 3 (id=102): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_plock(0xffffff9c, &(0x7f0000000140), 0x20202, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$can_j1939(r4, &(0x7f0000001540)={&(0x7f0000000240)={0x1d, 0x0, 0x3, {0x2, 0x7e, 0x3}, 0x2}, 0x18, &(0x7f0000001500)={&(0x7f0000001b80)}, 0x1, 0x0, 0x0, 0x40}, 0x240440d0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r5}, 0x10) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x200001c, 0x20010, r4, 0x82000000) syz_clone3(0x0, 0x0) setregid(0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x6, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000001a40)={0x2002, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x9, 0x5d01, 0x7, 0xf, "38d4fc000000000000000000000100"}) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000001580)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xeed}, @device_a, @initial, @device_a, {0x9, 0x4}, "", @void, @value=@ver_80211n={0x0, 0xf, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b}, {@device_b, @device_b, 0x7, "e7ae99da4d4b74"}, {@broadcast, @broadcast, 0xc, "33fb4069706037f13d1d5a5c"}, {@device_a, @device_b, 0xbb, "a515c44036a482d34edf9e099f3739818f9872d00521177d1b45177c0ec48949ded008b779c4f01be7229093e3768fb4eb9262892067b42733797a139f54e68dfeb8019bad6481565a8ded0ec291433dbb3cb7a3dde53dc651d4caa2d37d33f12912928a3c371c2be1de6eebdb2d8b95dfdab598fe1f0141462ac65ea8da1d4dc1c6b4e657bbcd175fc96d34f54daee5a2f4694d0ebada3cab8cb74c7dfb0a1e0c8d31b2171994f138375c77e6afe2d741ea634eb3a6f56fa656a5"}]}, 0x12c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x4048010) 3.754955605s ago: executing program 4 (id=103): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2.649101087s ago: executing program 4 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1.963366763s ago: executing program 0 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYRES16=r0], 0x7) 1.789917478s ago: executing program 3 (id=106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 1.103547197s ago: executing program 0 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000100008500000082000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 749.342246ms ago: executing program 3 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 191.342012ms ago: executing program 0 (id=109): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000200)={0x4006, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x161480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 0s ago: executing program 3 (id=110): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 190.426541][ T5559] cgroup: Unknown subsys name 'net' [ 190.560356][ T5559] cgroup: Unknown subsys name 'cpuset' [ 190.575388][ T5559] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.906880][ T5559] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.694802][ T5578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.710026][ T5578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.722015][ T5578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.744066][ T5578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.758625][ T5578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.836759][ T4878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.848983][ T4878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.862818][ T4878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.889628][ T4878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.904605][ T4878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.013783][ T4878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.027290][ T4878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.038095][ T4878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.054795][ T4878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.067777][ T4878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.208205][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.217785][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.243435][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.268065][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.283176][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.291342][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.302228][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.315967][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.336990][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.357740][ T5578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.821647][ T4878] Bluetooth: hci0: command tx timeout [ 203.980209][ T4878] Bluetooth: hci1: command tx timeout [ 204.140467][ T4878] Bluetooth: hci2: command tx timeout [ 204.230243][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.236910][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.390100][ T4878] Bluetooth: hci3: command tx timeout [ 204.461365][ T4878] Bluetooth: hci4: command tx timeout [ 205.901052][ T4878] Bluetooth: hci0: command tx timeout [ 206.061674][ T4878] Bluetooth: hci1: command tx timeout [ 206.221455][ T4878] Bluetooth: hci2: command tx timeout [ 206.461803][ T4878] Bluetooth: hci3: command tx timeout [ 206.543169][ T4878] Bluetooth: hci4: command tx timeout [ 207.421506][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.432008][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.443706][ T5581] bridge_slave_0: entered allmulticast mode [ 207.453051][ T5581] bridge_slave_0: entered promiscuous mode [ 207.506075][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.514565][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.523954][ T5577] bridge_slave_0: entered allmulticast mode [ 207.535367][ T5577] bridge_slave_0: entered promiscuous mode [ 207.552850][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.562454][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.570193][ T5577] bridge_slave_1: entered allmulticast mode [ 207.582125][ T5577] bridge_slave_1: entered promiscuous mode [ 207.597432][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.606257][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.615769][ T5581] bridge_slave_1: entered allmulticast mode [ 207.626311][ T5581] bridge_slave_1: entered promiscuous mode [ 207.937343][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.945560][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.953694][ T5589] bridge_slave_0: entered allmulticast mode [ 207.962792][ T5589] bridge_slave_0: entered promiscuous mode [ 207.981657][ T4878] Bluetooth: hci0: command tx timeout [ 208.007970][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.016139][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.024272][ T5585] bridge_slave_0: entered allmulticast mode [ 208.033278][ T5585] bridge_slave_0: entered promiscuous mode [ 208.102449][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.110385][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.117946][ T5589] bridge_slave_1: entered allmulticast mode [ 208.127649][ T5589] bridge_slave_1: entered promiscuous mode [ 208.140484][ T4878] Bluetooth: hci1: command tx timeout [ 208.152345][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.162770][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.170824][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.178622][ T5585] bridge_slave_1: entered allmulticast mode [ 208.187722][ T5585] bridge_slave_1: entered promiscuous mode [ 208.233638][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.279186][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.300168][ T4878] Bluetooth: hci2: command tx timeout [ 208.320993][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.328784][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.337075][ T5591] bridge_slave_0: entered allmulticast mode [ 208.345953][ T5591] bridge_slave_0: entered promiscuous mode [ 208.365915][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.455814][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.463825][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.471994][ T5591] bridge_slave_1: entered allmulticast mode [ 208.480850][ T5591] bridge_slave_1: entered promiscuous mode [ 208.526504][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.551455][ T4878] Bluetooth: hci3: command tx timeout [ 208.577315][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.621511][ T4878] Bluetooth: hci4: command tx timeout [ 208.653668][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.678724][ T5577] team0: Port device team_slave_0 added [ 208.693640][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.737801][ T5581] team0: Port device team_slave_0 added [ 208.777912][ T5577] team0: Port device team_slave_1 added [ 208.819336][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.836743][ T5581] team0: Port device team_slave_1 added [ 208.930247][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.973120][ T5589] team0: Port device team_slave_0 added [ 209.014135][ T5585] team0: Port device team_slave_0 added [ 209.083377][ T5589] team0: Port device team_slave_1 added [ 209.091659][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.098781][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.125162][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.145246][ T5585] team0: Port device team_slave_1 added [ 209.179117][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.186564][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.212933][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.253783][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.261456][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.287821][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.333542][ T5591] team0: Port device team_slave_0 added [ 209.343492][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.351109][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.377695][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.471969][ T5591] team0: Port device team_slave_1 added [ 209.499364][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.506980][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.533296][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.552250][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.559392][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.585950][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.631559][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.638714][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.665392][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.682739][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.690521][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.716793][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.760503][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.767651][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.793942][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.911086][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.918169][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.944536][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.030049][ T5577] hsr_slave_0: entered promiscuous mode [ 210.040902][ T5577] hsr_slave_1: entered promiscuous mode [ 210.060021][ T4878] Bluetooth: hci0: command tx timeout [ 210.100125][ T5581] hsr_slave_0: entered promiscuous mode [ 210.109013][ T5581] hsr_slave_1: entered promiscuous mode [ 210.117696][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 210.123729][ T5581] Cannot create hsr debugfs directory [ 210.220052][ T4878] Bluetooth: hci1: command tx timeout [ 210.376466][ T5585] hsr_slave_0: entered promiscuous mode [ 210.380579][ T4878] Bluetooth: hci2: command tx timeout [ 210.390180][ T5585] hsr_slave_1: entered promiscuous mode [ 210.398107][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 210.404274][ T5585] Cannot create hsr debugfs directory [ 210.426614][ T5589] hsr_slave_0: entered promiscuous mode [ 210.435604][ T5589] hsr_slave_1: entered promiscuous mode [ 210.444139][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 210.450107][ T5589] Cannot create hsr debugfs directory [ 210.543427][ T5591] hsr_slave_0: entered promiscuous mode [ 210.553001][ T5591] hsr_slave_1: entered promiscuous mode [ 210.561392][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 210.567266][ T5591] Cannot create hsr debugfs directory [ 210.620723][ T4878] Bluetooth: hci3: command tx timeout [ 210.701453][ T4878] Bluetooth: hci4: command tx timeout [ 211.932841][ T5581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.962835][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.976244][ T5581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.000434][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.010408][ T5581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.034302][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.063292][ T5581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.083159][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.186240][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.224593][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.241102][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.260298][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.283702][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.307471][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.340187][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.362272][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.601021][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.625255][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.636223][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.661389][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.695346][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.717592][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.756505][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.778473][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.968038][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.997589][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.008110][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.029592][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.073120][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.094620][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.130960][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.153097][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.415417][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.442396][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.455308][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.483496][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.538347][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.563065][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.593628][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.617625][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.767220][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.002842][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.038217][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.158181][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.165905][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.232801][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.240384][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.265854][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.428015][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.435548][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.498095][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.505616][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.543419][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.715203][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.814615][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.948779][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.988368][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.006639][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.014314][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.142493][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.150141][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.168199][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.175866][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.293996][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.301717][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.407216][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.538533][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.546248][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.763189][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.770721][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.248059][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.779586][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.795987][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.842688][ T5577] veth0_vlan: entered promiscuous mode [ 220.024374][ T5577] veth1_vlan: entered promiscuous mode [ 220.234935][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.497172][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.508255][ T5577] veth0_macvtap: entered promiscuous mode [ 220.601510][ T5577] veth1_macvtap: entered promiscuous mode [ 220.623495][ T5585] veth0_vlan: entered promiscuous mode [ 220.804749][ T5585] veth1_vlan: entered promiscuous mode [ 220.848415][ T5581] veth0_vlan: entered promiscuous mode [ 220.917798][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.975138][ T5591] veth0_vlan: entered promiscuous mode [ 221.017891][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.087987][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.143934][ T5581] veth1_vlan: entered promiscuous mode [ 221.169011][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.178851][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.217946][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.248377][ T5591] veth1_vlan: entered promiscuous mode [ 221.434463][ T5589] veth0_vlan: entered promiscuous mode [ 221.551708][ T5585] veth0_macvtap: entered promiscuous mode [ 221.611423][ T5589] veth1_vlan: entered promiscuous mode [ 221.658217][ T5585] veth1_macvtap: entered promiscuous mode [ 221.786222][ T5581] veth0_macvtap: entered promiscuous mode [ 221.947301][ T5581] veth1_macvtap: entered promiscuous mode [ 221.994819][ T5591] veth0_macvtap: entered promiscuous mode [ 222.038235][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.106835][ T5591] veth1_macvtap: entered promiscuous mode [ 222.150151][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.306752][ T137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.318399][ T137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.360435][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.377169][ T137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.398161][ T137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.492759][ T5589] veth0_macvtap: entered promiscuous mode [ 222.544646][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.597546][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.653064][ T5589] veth1_macvtap: entered promiscuous mode [ 222.758016][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.798000][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.836833][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.911642][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.922880][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.961918][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.991680][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.099249][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.144141][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.305914][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.455808][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.627846][ T156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.655976][ T156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.699223][ T156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.756141][ T156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.255107][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.299564][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.592581][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.653317][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.117321][ T5577] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.514222][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.570872][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.898620][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.935321][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.339426][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.394657][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.775663][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.828805][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.223384][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.258735][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.791752][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.838807][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.770428][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.483438][ T5860] binder: Binderfs stats mode cannot be changed during a remount [ 233.739113][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.291841][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.370683][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.841656][ T5871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 235.852497][ T5871] block device autoloading is deprecated and will be removed. [ 238.420813][ T5874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11'. [ 238.800566][ T5689] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 239.679134][ T5689] usb 3-1: config 39 interface 0 has no altsetting 0 [ 239.732002][ T5689] usb 3-1: config 39 interface 0 has no altsetting 0 [ 239.759043][ T5689] usb 3-1: config 39 interface 0 has no altsetting 0 [ 239.819261][ T5689] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 239.870238][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.906411][ T5689] usb 3-1: Product: syz [ 239.927521][ T5689] usb 3-1: Manufacturer: syz [ 239.963918][ T5689] usb 3-1: SerialNumber: syz [ 241.066008][ T5689] mdc800 3-1:39.0: probe fails -> wrong Number of Configuration [ 241.128003][ T5689] usb 3-1: USB disconnect, device number 2 [ 251.134475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 254.350839][ T5578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.364921][ T5578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.380030][ T5578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.408369][ T5578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.431449][ T5578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.975023][ T5932] fuse: Unknown parameter 'user_id00000000000000000000' [ 255.192113][ T5689] kernel read not supported for file /19/net/nfsfs (pid: 5689 comm: kworker/1:6) [ 256.460179][ T4878] Bluetooth: hci5: command tx timeout [ 257.436634][ T137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.799350][ T137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.006365][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 258.063706][ T137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.348109][ T137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.540209][ T4878] Bluetooth: hci5: command tx timeout [ 259.949913][ T5979] fuse: Unknown parameter 'user_id00000000000000000000' [ 261.329603][ T4878] Bluetooth: hci5: command tx timeout [ 264.369473][ T4878] Bluetooth: hci5: command tx timeout [ 265.680192][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.687177][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.429191][ T137] bridge_slave_1: left allmulticast mode [ 266.454954][ T137] bridge_slave_1: left promiscuous mode [ 266.482016][ T137] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.558006][ T5995] capability: warning: `syz.4.51' uses deprecated v2 capabilities in a way that may be insecure [ 266.573004][ T137] bridge_slave_0: left allmulticast mode [ 266.595419][ T137] bridge_slave_0: left promiscuous mode [ 266.624813][ T137] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.350441][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 267.548671][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 267.589881][ T30] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 267.627929][ T30] usb 1-1: config 0 has no interface number 0 [ 267.672942][ T30] usb 1-1: config 0 interface 12 has no altsetting 0 [ 267.708064][ T30] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 267.750362][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.787230][ T30] usb 1-1: Product: syz [ 267.803151][ T30] usb 1-1: Manufacturer: syz [ 267.831787][ T30] usb 1-1: SerialNumber: syz [ 267.884288][ T30] usb 1-1: config 0 descriptor?? [ 268.365143][ T137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.488384][ T137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.608658][ T137] bond0 (unregistering): Released all slaves [ 268.877232][ T30] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 268.935748][ T30] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 268.955073][ T5578] Bluetooth: Wrong link type (-71) [ 269.030438][ T30] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 269.077159][ T6020] fuse: Unknown parameter 'user_id00000000000000000000' [ 269.085004][ T30] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 269.221461][ T30] usb 1-1: USB disconnect, device number 2 [ 271.275861][ T137] hsr_slave_0: left promiscuous mode [ 271.686433][ T137] hsr_slave_1: left promiscuous mode [ 272.107468][ T6039] capability: warning: `syz.3.64' uses 32-bit capabilities (legacy support in use) [ 272.573028][ T6037] program syz.3.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.930162][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.064503][ T137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.281704][ T137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.383477][ T137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.131391][ T137] veth1_macvtap: left promiscuous mode [ 278.736512][ T137] veth0_macvtap: left promiscuous mode [ 278.786848][ T137] veth1_vlan: left promiscuous mode [ 278.943137][ T137] veth0_vlan: left promiscuous mode [ 282.644004][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 283.804452][ T137] team0 (unregistering): Port device team_slave_1 removed [ 283.944967][ T137] team0 (unregistering): Port device team_slave_0 removed [ 285.147776][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 292.958494][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.992925][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.030303][ T5925] bridge_slave_0: entered allmulticast mode [ 293.085407][ T5925] bridge_slave_0: entered promiscuous mode [ 293.186153][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.243318][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.281328][ T5925] bridge_slave_1: entered allmulticast mode [ 293.363343][ T5925] bridge_slave_1: entered promiscuous mode [ 293.902650][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.368160][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.693603][ T5925] team0: Port device team_slave_0 added [ 294.832596][ T5925] team0: Port device team_slave_1 added [ 295.357842][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.444624][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.584322][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.688268][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.746625][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.853971][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.648294][ T5925] hsr_slave_0: entered promiscuous mode [ 296.695307][ T5925] hsr_slave_1: entered promiscuous mode [ 296.743249][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 296.749325][ T5925] Cannot create hsr debugfs directory [ 297.352460][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 306.601648][ T5925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 306.739946][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.815768][ T5925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 306.922061][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.982212][ T5925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.130467][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.213425][ T5925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.402146][ T5925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.888615][ T4878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.901583][ T4878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.912466][ T4878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.943651][ T4878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.968509][ T4878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.074048][ T5689] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 309.331223][ T5689] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 309.384960][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.427406][ T5689] usb 1-1: Product: syz [ 309.451645][ T5689] usb 1-1: Manufacturer: syz [ 309.479362][ T5689] usb 1-1: SerialNumber: syz [ 309.663491][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.929078][ T6209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.020041][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.071897][ T4878] Bluetooth: hci2: command tx timeout [ 310.284112][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.288270][ T5689] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 310.292580][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.407244][ T5689] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 310.489522][ T5689] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 310.573546][ T5689] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 310.626245][ T5689] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 310.678432][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.686441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.787077][ T5689] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 310.961297][ T5689] usb 1-1: USB disconnect, device number 3 [ 311.902071][ T4878] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 312.141399][ T4878] Bluetooth: hci2: command tx timeout [ 313.631006][ T137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.970706][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 314.174812][ T137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.213740][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 314.221629][ T4878] Bluetooth: hci2: command tx timeout [ 314.267747][ T11] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 314.302585][ C1] ===================================================== [ 314.309868][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 314.318726][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 314.325208][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 314.332402][ C1] __sysvec_call_function_single+0x48/0x350 [ 314.338539][ C1] sysvec_call_function_single+0x7c/0x90 [ 314.344403][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 314.350567][ C1] sched_core_balance+0x87/0x1f80 [ 314.355820][ C1] finish_task_switch+0x64a/0xbc0 [ 314.361030][ C1] __schedule+0x2930/0x8750 [ 314.365742][ C1] schedule_idle+0x5a/0x90 [ 314.370351][ C1] do_idle+0x9fa/0xa10 [ 314.374605][ C1] cpu_startup_entry+0x5f/0x80 [ 314.379573][ C1] start_secondary+0xcc/0xd0 [ 314.384372][ C1] common_startup_64+0x13e/0x147 [ 314.389529][ C1] [ 314.391951][ C1] Local variable cycles.i created at: [ 314.397436][ C1] clockevents_program_event+0x178/0x830 [ 314.403253][ C1] tick_program_event+0xfb/0x190 [ 314.408379][ C1] [ 314.410851][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(lazy) [ 314.419971][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.430183][ C1] ===================================================== [ 314.437235][ C1] Disabling lock debugging due to kernel taint [ 314.443539][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 314.450086][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 314.460790][ C1] Tainted: [B]=BAD_PAGE [ 314.465039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.475244][ C1] Call Trace: [ 314.478627][ C1] [ 314.481578][ C1] __dump_stack+0x26/0x30 [ 314.486092][ C1] dump_stack_lvl+0x50/0x1c0 [ 314.490863][ C1] ? dump_stack+0x12/0x25 [ 314.495368][ C1] dump_stack+0x1e/0x25 [ 314.499681][ C1] vpanic+0x7b4/0x1430 [ 314.503971][ C1] panic+0x15d/0x160 [ 314.508114][ C1] kmsan_report+0x31a/0x320 [ 314.512825][ C1] ? __msan_warning+0x1b/0x30 [ 314.517690][ C1] ? __flush_smp_call_function_queue+0x343/0x1810 [ 314.524336][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 314.531693][ C1] ? __sysvec_call_function_single+0x48/0x350 [ 314.537977][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 314.544015][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 314.550362][ C1] ? sched_core_balance+0x87/0x1f80 [ 314.555711][ C1] ? finish_task_switch+0x64a/0xbc0 [ 314.561079][ C1] ? __schedule+0x2930/0x8750 [ 314.565948][ C1] ? schedule_idle+0x5a/0x90 [ 314.570724][ C1] ? do_idle+0x9fa/0xa10 [ 314.575139][ C1] ? cpu_startup_entry+0x5f/0x80 [ 314.580256][ C1] ? start_secondary+0xcc/0xd0 [ 314.585210][ C1] ? common_startup_64+0x13e/0x147 [ 314.590529][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.595857][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 314.602403][ C1] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 314.608680][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.614002][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.620035][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.625409][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 314.631979][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.637331][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.643360][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.648692][ C1] __msan_warning+0x1b/0x30 [ 314.653394][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 314.659881][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.665241][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 314.672398][ C1] __sysvec_call_function_single+0x48/0x350 [ 314.678503][ C1] sysvec_call_function_single+0x7c/0x90 [ 314.684346][ C1] [ 314.687370][ C1] [ 314.690416][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 314.696610][ C1] RIP: 0010:sched_core_balance+0x87/0x1f80 [ 314.702612][ C1] Code: 17 41 ad 13 e8 da e1 21 00 48 89 9d 20 ff ff ff 4c 89 6d a0 e9 14 1d 00 00 48 8d 7b 48 e8 91 c5 48 0f fb 48 8b 85 f0 fe ff ff <48> 8d 3c c5 50 a7 41 92 48 8b 45 98 85 c0 8b 4d cc 0f 44 c8 89 8d [ 314.722402][ C1] RSP: 0018:ffff888100757a30 EFLAGS: 00000282 [ 314.728673][ C1] RAX: 0000000000000001 RBX: ffff88813fca3308 RCX: 0000000000000001 [ 314.736798][ C1] RDX: 0000000015604028 RSI: 0000000000000001 RDI: ffffffff95604028 [ 314.744916][ C1] RBP: ffff888100757ba0 R08: ffffea000000000f R09: 0000000000000000 [ 314.753047][ C1] R10: ffff888237cb2028 R11: ffffffff81b2feb0 R12: 0000000000000000 [ 314.761193][ C1] R13: ffff888100722d58 R14: ffff88813fd8e198 R15: ffff88813fda32c0 [ 314.769342][ C1] ? __pfx_sched_core_balance+0x10/0x10 [ 314.775119][ C1] ? psi_group_change+0xf62/0x13f0 [ 314.780429][ C1] ? sched_clock_cpu+0x59/0xa70 [ 314.785466][ C1] ? kmsan_get_metadata+0x70/0x160 [ 314.790813][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.796147][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.801488][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.807555][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.813623][ C1] finish_task_switch+0x64a/0xbc0 [ 314.818833][ C1] ? __pfx_sched_core_balance+0x10/0x10 [ 314.824561][ C1] __schedule+0x2930/0x8750 [ 314.829292][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.835369][ C1] ? ct_nmi_exit+0x64/0xa0 [ 314.839978][ C1] ? ct_irq_exit+0xd/0x20 [ 314.844481][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 314.849828][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.855883][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.861946][ C1] schedule_idle+0x5a/0x90 [ 314.866571][ C1] do_idle+0x9fa/0xa10 [ 314.870877][ C1] cpu_startup_entry+0x5f/0x80 [ 314.875824][ C1] ? __pfx_setup_secondary_APIC_clock+0x10/0x10 [ 314.882313][ C1] start_secondary+0xcc/0xd0 [ 314.887094][ C1] common_startup_64+0x13e/0x147 [ 314.892271][ C1] [ 314.896039][ C1] Kernel Offset: disabled [ 314.900438][ C1] Rebooting in 86400 seconds..