last executing test programs: 9.131719597s ago: executing program 0 (id=150): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r0, 0x3b208d84, 0xcd3a, 0x0, 0x0) 8.283584138s ago: executing program 0 (id=156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) 8.199178525s ago: executing program 3 (id=157): keyctl$clear(0x3, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000380)='\x00', r0) 7.700075769s ago: executing program 3 (id=159): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) unshare(0x62040600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 7.420318675s ago: executing program 0 (id=161): connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x5, @multicast2}, 0x10) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224000100000000090400000103000000092100"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x9, '5'}, @global=@item_4={0x3, 0x1, 0x0, "fe862411"}]}}, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3], 0x0, 0x1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.417556874s ago: executing program 1 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) pipe(&(0x7f0000000040)) pipe(&(0x7f00000002c0)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x1000806, @mcast2, 0x805}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xc, 0x40, 0x9, 0x12, @remote, @private2, 0x40, 0x40, 0x897, 0x6}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000040000000100000002000005001000000400000001000000010100000f0000000100000004000000ed9f37a2050000000000000c010000000500000000000011050000000300000000307f"], &(0x7f00000002c0)=""/84, 0x5c, 0x54, 0x1, 0x8, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8cec}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffff8, 0x10}, @jmp={0x5, 0x1, 0x5, 0x4, 0x9, 0xfffffffffffffff0, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0xb0, &(0x7f0000000640)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x3, 0x6, 0x3ff}, 0x10, 0x14038, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000740)=[{0x4, 0x1, 0x8, 0xc}, {0x0, 0x2, 0xc, 0x8}, {0x3, 0x3, 0x3, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000c6000000c53afcff0100000085843cbe32660000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x77, &(0x7f0000000100)=""/119, 0x40f00, 0x20, '\x00', r6, @fallback=0xc, r7, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x2, 0x2, 0x81}, 0x10, r8, r9, 0x3, &(0x7f00000009c0)=[r10, r11, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x5, 0x3}, {0x5, 0x2, 0xa, 0x8}, {0x2, 0x9, 0x2, 0x1}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003400000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 4.773919508s ago: executing program 1 (id=168): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.710372279s ago: executing program 4 (id=170): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mremap(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_io_uring_setup(0xec4, &(0x7f00000004c0)={0x0, 0x6dde, 0x0, 0x20000003, 0x65}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000003c0)=0x5) 3.847003198s ago: executing program 1 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbf9e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x45}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x1ff, 0x17, &(0x7f00000000c0)=""/23, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xe, 0xa, 0x4}, 0x10, 0x21e0f, r0, 0x5, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000380)=[{0x1, 0x3, 0x8, 0xa}, {0x4, 0x1, 0x1}, {0x1, 0x3, 0x9, 0x6}, {0x4, 0x5, 0x10, 0x9}, {0x3, 0x4, 0x6, 0x2}], 0x10, 0x8, @void, @value}, 0x94) syz_open_dev$audion(&(0x7f00000004c0), 0x8, 0x200000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 3.742002799s ago: executing program 3 (id=172): syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@empty}, {@private}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xe02}}}}}}, 0x0) 3.572105515s ago: executing program 0 (id=173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) unshare(0x22020600) 3.523705389s ago: executing program 4 (id=174): ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000001400)={0x0, &(0x7f00000000c0)=[&(0x7f0000000200)="8942310ca3185cb37d15c6f369f6af7c858005bb65e8d0b1ceece0d863bc5f5e57a6f632b1b2d0bee4629a5ad6e1"], 0x8000}) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff000000000100081d8d"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.51881545s ago: executing program 1 (id=175): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) 3.114653724s ago: executing program 2 (id=176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0/../file0', [{0x20, 'hash\x00'}]}, 0x1a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000021c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x7, 0x72) 3.063648424s ago: executing program 3 (id=177): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.855730633s ago: executing program 1 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x6c}}, 0x0) 2.754964993s ago: executing program 4 (id=179): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) 2.494637244s ago: executing program 2 (id=180): r0 = io_uring_setup(0x1895, &(0x7f00000002c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.18370085s ago: executing program 3 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.933977913s ago: executing program 1 (id=182): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) unshare(0x62040600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.837918505s ago: executing program 3 (id=183): connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x5, @multicast2}, 0x10) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224000100000000090400000103000000092100"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x9, '5'}, @global=@item_4={0x3, 0x1, 0x0, "fe862411"}]}}, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3], 0x0, 0x1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.214402841s ago: executing program 0 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="363e0f01b8009066b9800000c00f326635004000000f300f01c3360f236366b9e908000066b80098000066ba000000000f300f01c30fc7ad00700f20d86635080000000f22d80f20d86635080000000f22d866b99c03000066b80a00000066ba000000000f30", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.08387699s ago: executing program 2 (id=185): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mmap(&(0x7f00002ee000/0x400000)=nil, 0x400000, 0x2, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsmount(r0, 0x0, 0x0) 1.054436505s ago: executing program 4 (id=186): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x9, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0xfd}, 0x9c) 554.272799ms ago: executing program 4 (id=187): syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@empty}, {@private}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xe02}}}}}}, 0x0) 447.170186ms ago: executing program 2 (id=188): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x148, 0x5802, 0x294, 0x148, 0x294, 0x260, 0x378, 0x378, 0x260, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x100, 0x148, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xf, 0x400, 0x5, '\x00', {0x8}}}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x3, 0x81, '\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 279.976495ms ago: executing program 2 (id=189): ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000001400)={0x0, &(0x7f00000000c0)=[&(0x7f0000000200)="8942310ca3185cb37d15c6f369f6af7c858005bb65e8d0b1ceece0d863bc5f5e57a6f632b1b2d0bee4629a5ad6e190"], 0x8000}) syz_emit_ethernet(0x38, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 92.700584ms ago: executing program 2 (id=190): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0/../file0', [{0x20, 'hash\x00'}]}, 0x1a) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000021c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x7, 0x72) 44.190499ms ago: executing program 0 (id=191): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40}, {0x6, 0x0, 0x0, 0xffffffff}]}) write$ppp(r0, &(0x7f0000000480)='\x00\x00', 0x2) 0s ago: executing program 4 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 173.406783][ T5780] cgroup: Unknown subsys name 'net' [ 173.542781][ T5780] cgroup: Unknown subsys name 'cpuset' [ 173.556569][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 218.153807][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.047400][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.055869][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.179349][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.200636][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.209117][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.218826][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.238564][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.247147][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.248516][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.263671][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.293211][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.294815][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.305330][ T5807] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.316047][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.327336][ T5807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.333231][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.345855][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.351881][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.355095][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.379267][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.398878][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.405717][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.407442][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.416459][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.422850][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.433374][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.445494][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.463246][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.472455][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.489470][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.519773][ T5805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.529298][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.645148][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 224.822121][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 225.292909][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 225.321867][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 225.442436][ T5805] Bluetooth: hci1: command tx timeout [ 225.511180][ T5805] Bluetooth: hci2: command tx timeout [ 225.516821][ T5805] Bluetooth: hci0: command tx timeout [ 225.538388][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 225.671689][ T5805] Bluetooth: hci3: command tx timeout [ 225.677339][ T5805] Bluetooth: hci4: command tx timeout [ 225.942223][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.949911][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.957812][ T5800] bridge_slave_0: entered allmulticast mode [ 225.966801][ T5800] bridge_slave_0: entered promiscuous mode [ 226.087167][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.097536][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.105387][ T5800] bridge_slave_1: entered allmulticast mode [ 226.114125][ T5800] bridge_slave_1: entered promiscuous mode [ 226.130735][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.138528][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.146853][ T5799] bridge_slave_0: entered allmulticast mode [ 226.155789][ T5799] bridge_slave_0: entered promiscuous mode [ 226.271828][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.279492][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.289527][ T5799] bridge_slave_1: entered allmulticast mode [ 226.300702][ T5799] bridge_slave_1: entered promiscuous mode [ 226.311175][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.318829][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.326573][ T5809] bridge_slave_0: entered allmulticast mode [ 226.336705][ T5809] bridge_slave_0: entered promiscuous mode [ 226.363376][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.375284][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.383172][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.391077][ T5809] bridge_slave_1: entered allmulticast mode [ 226.399762][ T5809] bridge_slave_1: entered promiscuous mode [ 226.532714][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.689994][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.742738][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.761965][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.835346][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.881188][ T5800] team0: Port device team_slave_0 added [ 226.912669][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.920381][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.929775][ T5796] bridge_slave_0: entered allmulticast mode [ 226.937723][ T5796] bridge_slave_0: entered promiscuous mode [ 226.978485][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.986933][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.994876][ T5796] bridge_slave_1: entered allmulticast mode [ 227.003786][ T5796] bridge_slave_1: entered promiscuous mode [ 227.048604][ T5800] team0: Port device team_slave_1 added [ 227.065131][ T5799] team0: Port device team_slave_0 added [ 227.228560][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.236782][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.245245][ T5811] bridge_slave_0: entered allmulticast mode [ 227.255235][ T5811] bridge_slave_0: entered promiscuous mode [ 227.375774][ T5799] team0: Port device team_slave_1 added [ 227.396854][ T5809] team0: Port device team_slave_0 added [ 227.436475][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.444807][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.457557][ T5811] bridge_slave_1: entered allmulticast mode [ 227.466470][ T5811] bridge_slave_1: entered promiscuous mode [ 227.511281][ T5805] Bluetooth: hci1: command tx timeout [ 227.571128][ T5809] team0: Port device team_slave_1 added [ 227.579419][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.587416][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.613716][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.621327][ T5805] Bluetooth: hci0: command tx timeout [ 227.626260][ T5797] Bluetooth: hci2: command tx timeout [ 227.634179][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.642656][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.669177][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.722759][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.742428][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.753220][ T5797] Bluetooth: hci4: command tx timeout [ 227.758831][ T5797] Bluetooth: hci3: command tx timeout [ 227.934175][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.942397][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.969220][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.011733][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.018897][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.045538][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.066515][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.083647][ T5796] team0: Port device team_slave_0 added [ 228.092512][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.099657][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.126204][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.196736][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.204090][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.230463][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.256231][ T5800] hsr_slave_0: entered promiscuous mode [ 228.266927][ T5800] hsr_slave_1: entered promiscuous mode [ 228.284743][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.300558][ T5796] team0: Port device team_slave_1 added [ 228.504246][ T5799] hsr_slave_0: entered promiscuous mode [ 228.517193][ T5799] hsr_slave_1: entered promiscuous mode [ 228.525614][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.533492][ T5799] Cannot create hsr debugfs directory [ 228.677514][ T5811] team0: Port device team_slave_0 added [ 228.719441][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.726772][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.754363][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.778886][ T5809] hsr_slave_0: entered promiscuous mode [ 228.789332][ T5809] hsr_slave_1: entered promiscuous mode [ 228.798464][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.806303][ T5809] Cannot create hsr debugfs directory [ 228.851111][ T5811] team0: Port device team_slave_1 added [ 228.871178][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.878344][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.904798][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.208349][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.215637][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.241947][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.346470][ T5796] hsr_slave_0: entered promiscuous mode [ 229.356686][ T5796] hsr_slave_1: entered promiscuous mode [ 229.364802][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.372744][ T5796] Cannot create hsr debugfs directory [ 229.380744][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.388080][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.414479][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.601261][ T5805] Bluetooth: hci1: command tx timeout [ 229.687217][ T5805] Bluetooth: hci0: command tx timeout [ 229.687270][ T5797] Bluetooth: hci2: command tx timeout [ 229.831247][ T5805] Bluetooth: hci3: command tx timeout [ 229.836899][ T5805] Bluetooth: hci4: command tx timeout [ 229.983523][ T5811] hsr_slave_0: entered promiscuous mode [ 229.993952][ T5811] hsr_slave_1: entered promiscuous mode [ 230.003103][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.010779][ T5811] Cannot create hsr debugfs directory [ 230.354220][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.402494][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.430564][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.469985][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.646021][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.669568][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.744702][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.762564][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.929814][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.972309][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.019109][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.046129][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.236072][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.299765][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.328267][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.373227][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.395756][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.428132][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.448556][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.497321][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.672426][ T5805] Bluetooth: hci1: command tx timeout [ 231.753303][ T5805] Bluetooth: hci0: command tx timeout [ 231.758969][ T5805] Bluetooth: hci2: command tx timeout [ 231.846244][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.899754][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.911443][ T5797] Bluetooth: hci3: command tx timeout [ 231.917085][ T5797] Bluetooth: hci4: command tx timeout [ 232.002155][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.009845][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.181699][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.189366][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.388772][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.667758][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.739707][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.800050][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.807816][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.931136][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.938778][ T5059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.987745][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.023175][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.045814][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.140128][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.147864][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.228705][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.269353][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.277149][ T5059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.346231][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.384230][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.449078][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.456868][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.480275][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.488031][ T5059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.507783][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.515657][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.694896][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.702681][ T5059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.812026][ T5811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.823116][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.990008][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.004808][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.457142][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.053518][ T5800] veth0_vlan: entered promiscuous mode [ 235.185609][ T5800] veth1_vlan: entered promiscuous mode [ 235.545019][ T5800] veth0_macvtap: entered promiscuous mode [ 235.583642][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.626372][ T5800] veth1_macvtap: entered promiscuous mode [ 235.674752][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.864804][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.964907][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.033185][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.082280][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.092613][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.101863][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.111044][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.348084][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.384689][ T5811] veth0_vlan: entered promiscuous mode [ 236.530073][ T5811] veth1_vlan: entered promiscuous mode [ 236.643065][ T5809] veth0_vlan: entered promiscuous mode [ 236.818625][ T5809] veth1_vlan: entered promiscuous mode [ 236.831883][ T5811] veth0_macvtap: entered promiscuous mode [ 236.938788][ T5796] veth0_vlan: entered promiscuous mode [ 236.975493][ T5811] veth1_macvtap: entered promiscuous mode [ 237.121921][ T5796] veth1_vlan: entered promiscuous mode [ 237.150644][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.161831][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.176616][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.281220][ T5809] veth0_macvtap: entered promiscuous mode [ 237.377105][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.387875][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.404653][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.425073][ T5809] veth1_macvtap: entered promiscuous mode [ 237.510301][ T5796] veth0_macvtap: entered promiscuous mode [ 237.574908][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.584138][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.595336][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.604481][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.664888][ T5796] veth1_macvtap: entered promiscuous mode [ 237.688350][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.699143][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.711357][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.722151][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.737009][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.878603][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.890809][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.902855][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.914605][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.924737][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.935512][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.950426][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.019225][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.031359][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.041731][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.052503][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.067138][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.258400][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.267651][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.276929][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.287551][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.329398][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.341516][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.352631][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.363377][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.373574][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.384369][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.399799][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.530634][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.539994][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.549236][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.558533][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.659626][ T5799] veth0_vlan: entered promiscuous mode [ 238.759658][ T5799] veth1_vlan: entered promiscuous mode [ 239.120373][ T5799] veth0_macvtap: entered promiscuous mode [ 239.181981][ T5799] veth1_macvtap: entered promiscuous mode [ 239.394545][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.405425][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.415778][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.426629][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.436895][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.447770][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.458485][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.469319][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.484368][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.712331][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.725198][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.735425][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.746204][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.758720][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.772262][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.782482][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.793266][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.807950][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.948127][ T5799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.959003][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.969635][ T5799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.979038][ T5799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.921890][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.929944][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.999480][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.008157][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.264055][ T5800] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 244.259484][ T5059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.267779][ T5059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.518862][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.527083][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.805684][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 244.906586][ T4769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.914805][ T4769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.933565][ T3861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.942280][ T3861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.023699][ T10] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 245.033224][ T10] usb 4-1: config 0 has no interface number 0 [ 245.039592][ T10] usb 4-1: config 0 interface 29 has no altsetting 0 [ 245.127266][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 245.136842][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.145318][ T10] usb 4-1: Product: syz [ 245.149728][ T10] usb 4-1: Manufacturer: syz [ 245.154871][ T10] usb 4-1: SerialNumber: syz [ 245.306178][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.314434][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.405471][ T10] usb 4-1: config 0 descriptor?? [ 245.634148][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.642474][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.669215][ T10] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 245.881724][ T10] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 245.888890][ T10] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 245.896273][ T10] peak_usb 4-1:0.29 can0: sending command failure: -22 [ 245.966390][ T29] audit: type=1326 audit(1731657725.261:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.115053][ T29] audit: type=1326 audit(1731657725.321:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.140206][ T29] audit: type=1326 audit(1731657725.321:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.163873][ T29] audit: type=1326 audit(1731657725.331:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.186241][ T29] audit: type=1326 audit(1731657725.341:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.208631][ T29] audit: type=1326 audit(1731657725.341:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.233883][ T29] audit: type=1326 audit(1731657725.341:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb80fd7e719 code=0x7ffc0000 [ 246.260329][ T10] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -22 [ 246.381601][ T10] usb 4-1: USB disconnect, device number 2 [ 247.296678][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.304810][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.365850][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.473111][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.481436][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.053678][ T6004] kvm: emulating exchange as write [ 248.095804][ T6011] hsr0: entered allmulticast mode [ 248.101244][ T6011] hsr_slave_0: entered allmulticast mode [ 248.107215][ T6011] hsr_slave_1: entered allmulticast mode [ 249.130309][ T6024] loop1: detected capacity change from 0 to 7 [ 249.141543][ T6024] Dev loop1: unable to read RDB block 7 [ 249.147598][ T6024] loop1: unable to read partition table [ 249.155292][ T6024] loop1: partition table beyond EOD, truncated [ 249.161875][ T6024] loop_reread_partitions: partition scan of loop1 (被xڬdƤݡ [ 249.161875][ T6024] ) failed (rc=-5) [ 249.389216][ T6027] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 249.418740][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.428780][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.453914][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.461800][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.470437][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.478245][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.503295][ T6027] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 251.344620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 251.832538][ T6057] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 251.973799][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.983557][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.008364][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.016215][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.024973][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.032823][ T6057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.050352][ T6057] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 252.072296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 252.080823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 252.269027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 253.318809][ T6065] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 253.393898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 253.612693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 253.646386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.657053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.762676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 253.802558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 253.803317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 255.687562][ T6089] netlink: 'syz.0.42': attribute type 10 has an invalid length. [ 255.877048][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.885616][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.181987][ T5427] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 259.471456][ T5427] usb 3-1: Using ep0 maxpacket: 8 [ 259.526897][ T5427] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.545100][ T5427] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 259.556096][ T5427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.733511][ T5427] usb 3-1: config 0 descriptor?? [ 259.786153][ T5427] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 260.345895][ T6149] netlink: 'syz.0.61': attribute type 10 has an invalid length. [ 261.410282][ T6163] hsr0: entered allmulticast mode [ 261.416098][ T6163] hsr_slave_0: entered allmulticast mode [ 261.422523][ T6163] hsr_slave_1: entered allmulticast mode [ 261.461187][ T5427] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 261.661282][ T5427] usb 2-1: Using ep0 maxpacket: 8 [ 261.673596][ T5427] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 261.683053][ T5427] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.698114][ T5427] usb 2-1: config 0 has no interface number 0 [ 261.706100][ T5427] usb 2-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 261.711553][ T6167] Zero length message leads to an empty skb [ 261.717269][ T5427] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.736407][ T5427] usb 2-1: config 0 interface 52 has no altsetting 0 [ 261.870026][ T5427] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 261.880042][ T5427] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 261.893177][ T5427] usb 2-1: Manufacturer: syz [ 261.984340][ T5427] usb 2-1: config 0 descriptor?? [ 262.371395][ T5427] usb 2-1: Can not set alternate setting to 1, error: -71 [ 262.378830][ T5427] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 262.422990][ T5427] usb 2-1: USB disconnect, device number 2 [ 262.680549][ T5856] usb 3-1: USB disconnect, device number 2 [ 262.961219][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 263.270426][ T10] usb 1-1: config 0 has no interfaces? [ 263.288033][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 263.297512][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.305962][ T10] usb 1-1: Product: syz [ 263.310367][ T10] usb 1-1: Manufacturer: syz [ 263.315327][ T10] usb 1-1: SerialNumber: syz [ 263.331666][ T10] usb 1-1: config 0 descriptor?? [ 263.682459][ T6173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.321739][ T5856] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 264.624889][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 264.674052][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.685295][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.698801][ T5856] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 264.708373][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.784386][ T5856] usb 2-1: config 0 descriptor?? [ 264.802101][ T5856] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 264.991660][ T6173] sctp: failed to load transform for md5: -2 [ 265.321982][ T6189] sctp: failed to load transform for md5: -2 [ 266.962911][ T6211] hsr0: entered allmulticast mode [ 266.968175][ T6211] hsr_slave_0: entered allmulticast mode [ 266.974353][ T6211] hsr_slave_1: entered allmulticast mode [ 269.771175][ T10] usb 1-1: USB disconnect, device number 2 [ 270.276040][ T5856] usb 2-1: USB disconnect, device number 3 [ 276.192719][ T6316] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 276.200622][ T6316] netlink: 96 bytes leftover after parsing attributes in process `syz.0.122'. [ 276.819166][ T6314] delete_channel: no stack [ 277.001823][ T6329] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 277.161958][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.172018][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.190720][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.198332][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.206546][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.214138][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.227980][ T6329] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 278.165214][ T6346] loop2: detected capacity change from 0 to 7 [ 278.192265][ T6346] Dev loop2: unable to read RDB block 7 [ 278.198234][ T6346] loop2: unable to read partition table [ 278.227277][ T6346] loop2: partition table beyond EOD, truncated [ 278.233910][ T6346] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 279.221617][ T6359] hsr0: entered allmulticast mode [ 279.226910][ T6359] hsr_slave_0: entered allmulticast mode [ 279.232864][ T6359] hsr_slave_1: entered allmulticast mode [ 279.716666][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.725318][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.806661][ T6366] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 280.495040][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.501986][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.864376][ T6372] loop2: detected capacity change from 0 to 7 [ 280.914548][ T6372] Dev loop2: unable to read RDB block 7 [ 280.920558][ T6372] loop2: AHDI p1 p3 p4 [ 280.925366][ T6372] loop2: partition table partially beyond EOD, truncated [ 280.939417][ T6372] loop2: p1 start 2048 is beyond EOD, truncated [ 280.947533][ T6372] loop2: p3 size 16779293 extends beyond EOD, truncated [ 281.538456][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 282.288316][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.298083][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.318596][ T6392] netlink: 'syz.4.153': attribute type 10 has an invalid length. [ 282.331415][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.339142][ T6392] bridge0: port 2(bridge_slave_1) entered listening state [ 282.347819][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.355675][ T6392] bridge0: port 1(bridge_slave_0) entered listening state [ 282.378353][ T6392] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 282.396079][ T6394] hsr0: entered allmulticast mode [ 282.402800][ T6394] hsr_slave_0: entered allmulticast mode [ 282.409878][ T6394] hsr_slave_1: entered allmulticast mode [ 283.136040][ T6408] loop2: detected capacity change from 0 to 7 [ 283.205004][ T6243] Dev loop2: unable to read RDB block 7 [ 283.210966][ T6243] loop2: AHDI p1 p3 p4 [ 283.215325][ T6243] loop2: partition table partially beyond EOD, truncated [ 283.223611][ T6243] loop2: p1 start 2048 is beyond EOD, truncated [ 283.230067][ T6243] loop2: p3 size 16779293 extends beyond EOD, truncated [ 283.466326][ T6408] Dev loop2: unable to read RDB block 7 [ 283.473289][ T6408] loop2: AHDI p1 p3 p4 [ 283.477679][ T6408] loop2: partition table partially beyond EOD, truncated [ 283.486291][ T6408] loop2: p1 start 2048 is beyond EOD, truncated [ 283.493097][ T6408] loop2: p3 size 16779293 extends beyond EOD, truncated [ 283.918916][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 284.092659][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 284.102446][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 284.154850][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.165532][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.179015][ T10] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 284.188823][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.407638][ T10] usb 1-1: config 0 descriptor?? [ 284.450075][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 284.471906][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 284.572873][ T6420] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.932970][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.942948][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.017016][ T6442] netlink: 'syz.1.168': attribute type 10 has an invalid length. [ 286.029832][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.037711][ T6442] bridge0: port 2(bridge_slave_1) entered listening state [ 286.046360][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.054190][ T6442] bridge0: port 1(bridge_slave_0) entered listening state [ 286.078266][ T6442] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 286.869205][ T6447] netlink: 'syz.1.171': attribute type 7 has an invalid length. [ 286.882205][ T5427] usb 1-1: USB disconnect, device number 3 [ 287.217995][ T6454] loop2: detected capacity change from 0 to 7 [ 287.273061][ T6454] Dev loop2: unable to read RDB block 7 [ 287.279047][ T6454] loop2: AHDI p1 p3 p4 [ 287.286904][ T6454] loop2: partition table partially beyond EOD, truncated [ 287.298543][ T6454] loop2: p1 start 2048 is beyond EOD, truncated [ 287.307450][ T6454] loop2: p3 size 16779293 extends beyond EOD, truncated [ 287.603913][ T6243] udevd[6243]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 288.941408][ T5427] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 289.113769][ T5427] usb 4-1: Using ep0 maxpacket: 8 [ 289.151410][ T5427] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.162770][ T5427] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.177765][ T5427] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 289.187166][ T5427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.426666][ T5427] usb 4-1: config 0 descriptor?? [ 289.500081][ T5427] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 290.206980][ T6492] loop2: detected capacity change from 0 to 7 [ 290.271191][ T6492] Dev loop2: unable to read RDB block 7 [ 290.277230][ T6492] loop2: unable to read partition table [ 290.290989][ T6492] loop2: partition table beyond EOD, truncated [ 290.297570][ T6492] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 290.506502][ T6497] ===================================================== [ 290.513937][ T6497] BUG: KMSAN: uninit-value in ___bpf_prog_run+0x94d5/0xe0f0 [ 290.521615][ T6497] ___bpf_prog_run+0x94d5/0xe0f0 [ 290.526857][ T6497] __bpf_prog_run32+0xc2/0xf0 [ 290.531868][ T6497] __ppp_xmit_process+0x501/0x2840 [ 290.537209][ T6497] ppp_xmit_process+0x100/0x2b0 [ 290.542361][ T6497] ppp_write+0x71d/0x910 [ 290.546766][ T6497] vfs_write+0x48a/0x1540 [ 290.551395][ T6497] ksys_write+0x24f/0x4c0 [ 290.555929][ T6497] __x64_sys_write+0x93/0xe0 [ 290.560808][ T6497] x64_sys_call+0x306a/0x3ba0 [ 290.565807][ T6497] do_syscall_64+0xcd/0x1e0 [ 290.570524][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.576746][ T6497] [ 290.579165][ T6497] Uninit was stored to memory at: [ 290.584570][ T6497] ___bpf_prog_run+0x98e7/0xe0f0 [ 290.589723][ T6497] __bpf_prog_run32+0xc2/0xf0 [ 290.594728][ T6497] __ppp_xmit_process+0x501/0x2840 [ 290.600055][ T6497] ppp_xmit_process+0x100/0x2b0 [ 290.605196][ T6497] ppp_write+0x71d/0x910 [ 290.609605][ T6497] vfs_write+0x48a/0x1540 [ 290.614249][ T6497] ksys_write+0x24f/0x4c0 [ 290.618777][ T6497] __x64_sys_write+0x93/0xe0 [ 290.623679][ T6497] x64_sys_call+0x306a/0x3ba0 [ 290.628568][ T6497] do_syscall_64+0xcd/0x1e0 [ 290.633417][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.639515][ T6497] [ 290.642048][ T6497] Uninit was created at: [ 290.646554][ T6497] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 290.652853][ T6497] kmalloc_reserve+0x13d/0x4a0 [ 290.657820][ T6497] __alloc_skb+0x363/0x7b0 [ 290.662589][ T6497] ppp_write+0xdf/0x910 [ 290.666905][ T6497] vfs_write+0x48a/0x1540 [ 290.671531][ T6497] ksys_write+0x24f/0x4c0 [ 290.676049][ T6497] __x64_sys_write+0x93/0xe0 [ 290.680968][ T6497] x64_sys_call+0x306a/0x3ba0 [ 290.685860][ T6497] do_syscall_64+0xcd/0x1e0 [ 290.690579][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.696802][ T6497] [ 290.699256][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.0.191 Not tainted 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 290.710161][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 290.720482][ T6497] ===================================================== [ 290.727623][ T6497] Disabling lock debugging due to kernel taint [ 290.734017][ T6497] Kernel panic - not syncing: kmsan.panic set ... [ 290.740573][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.0.191 Tainted: G B 6.12.0-rc7-syzkaller-00125-gcfaaa7d010d1 #0 [ 290.752857][ T6497] Tainted: [B]=BAD_PAGE [ 290.757121][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 290.767350][ T6497] Call Trace: [ 290.770767][ T6497] [ 290.773807][ T6497] dump_stack_lvl+0x216/0x2d0 [ 290.778701][ T6497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.784684][ T6497] dump_stack+0x1e/0x30 [ 290.789033][ T6497] panic+0x4e2/0xcf0 [ 290.793151][ T6497] ? kmsan_get_metadata+0xa1/0x1c0 [ 290.798442][ T6497] kmsan_report+0x2c7/0x2d0 [ 290.803109][ T6497] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 290.809126][ T6497] ? __msan_warning+0x95/0x120 [ 290.814084][ T6497] ? ___bpf_prog_run+0x94d5/0xe0f0 [ 290.819401][ T6497] ? __bpf_prog_run32+0xc2/0xf0 [ 290.824470][ T6497] ? __ppp_xmit_process+0x501/0x2840 [ 290.829980][ T6497] ? ppp_xmit_process+0x100/0x2b0 [ 290.835185][ T6497] ? ppp_write+0x71d/0x910 [ 290.839767][ T6497] ? vfs_write+0x48a/0x1540 [ 290.844457][ T6497] ? ksys_write+0x24f/0x4c0 [ 290.849144][ T6497] ? __x64_sys_write+0x93/0xe0 [ 290.854111][ T6497] ? x64_sys_call+0x306a/0x3ba0 [ 290.859169][ T6497] ? do_syscall_64+0xcd/0x1e0 [ 290.864054][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.870317][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.876589][ T6497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.882574][ T6497] ? bpf_skb_load_helper_32+0x40/0x1d0 [ 290.888216][ T6497] ? filter_irq_stacks+0x60/0x1a0 [ 290.893470][ T6497] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.898837][ T6497] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 290.905384][ T6497] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.910749][ T6497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.916731][ T6497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.922709][ T6497] __msan_warning+0x95/0x120 [ 290.927503][ T6497] ___bpf_prog_run+0x94d5/0xe0f0 [ 290.932672][ T6497] __bpf_prog_run32+0xc2/0xf0 [ 290.937550][ T6497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.943536][ T6497] ? __pfx___bpf_prog_run32+0x10/0x10 [ 290.949115][ T6497] __ppp_xmit_process+0x501/0x2840 [ 290.954470][ T6497] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.959841][ T6497] ppp_xmit_process+0x100/0x2b0 [ 290.964857][ T6497] ? ppp_xmit_process+0x2d/0x2b0 [ 290.969963][ T6497] ppp_write+0x71d/0x910 [ 290.974377][ T6497] ? __pfx_ppp_write+0x10/0x10 [ 290.979306][ T6497] vfs_write+0x48a/0x1540 [ 290.983819][ T6497] ? kmsan_get_metadata+0x13e/0x1c0 [ 290.989178][ T6497] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 290.995715][ T6497] ? kmsan_get_metadata+0x13e/0x1c0 [ 291.001074][ T6497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 291.007056][ T6497] ksys_write+0x24f/0x4c0 [ 291.011572][ T6497] __x64_sys_write+0x93/0xe0 [ 291.016343][ T6497] x64_sys_call+0x306a/0x3ba0 [ 291.021216][ T6497] do_syscall_64+0xcd/0x1e0 [ 291.025928][ T6497] ? clear_bhb_loop+0x25/0x80 [ 291.030784][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.036874][ T6497] RIP: 0033:0x7fd3afd7e719 [ 291.041441][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.061232][ T6497] RSP: 002b:00007fd3b0aac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.069820][ T6497] RAX: ffffffffffffffda RBX: 00007fd3aff35f80 RCX: 00007fd3afd7e719 [ 291.077940][ T6497] RDX: 0000000000000002 RSI: 0000000020000480 RDI: 0000000000000003 [ 291.086047][ T6497] RBP: 00007fd3afdf175e R08: 0000000000000000 R09: 0000000000000000 [ 291.094153][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.102255][ T6497] R13: 0000000000000000 R14: 00007fd3aff35f80 R15: 00007ffdc721a178 [ 291.110385][ T6497] [ 291.113778][ T6497] Kernel Offset: disabled [ 291.118169][ T6497] Rebooting in 86400 seconds..