last executing test programs: 5.830280177s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5.252898522s ago: executing program 1 (id=6): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") setxattr$incfs_id(0x0, 0x0, &(0x7f00000001c0)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = semget(0x3, 0x0, 0x608) semctl$GETZCNT(r3, 0x1, 0xf, 0x0) 3.848251335s ago: executing program 3 (id=4): r0 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='sysfs\x00', &(0x7f0000000040)='\x00', 0x0) 3.280426961s ago: executing program 3 (id=7): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000054) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) 1.934087386s ago: executing program 1 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 310.147567ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x320, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xd496c71746da16b1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 158.022365ms ago: executing program 1 (id=9): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0xffffff00, 0x3, &(0x7f0000000080)=0x3}) userfaultfd(0x80001) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x5, 0x8000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 45.702654ms ago: executing program 3 (id=10): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) openat$audio1(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 154.869547][ T5561] cgroup: Unknown subsys name 'net' [ 154.994450][ T5561] cgroup: Unknown subsys name 'cpuset' [ 155.008145][ T5561] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.569604][ T5561] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.718539][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.733909][ T5585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.743227][ T5585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.752313][ T5585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.763209][ T5588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.792771][ T5588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.814009][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.814173][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.832914][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.839301][ T5592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.844911][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.858223][ T5581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.868771][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.892401][ T4875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.922579][ T4875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.933423][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.948265][ T5588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.969625][ T5585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.983806][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.995582][ T5585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.007150][ T5588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.017461][ T5585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.028571][ T5588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.067612][ T5590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.088805][ T5588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.986508][ T5588] Bluetooth: hci0: command tx timeout [ 166.987938][ T48] Bluetooth: hci1: command tx timeout [ 167.066335][ T48] Bluetooth: hci3: command tx timeout [ 167.067891][ T5588] Bluetooth: hci2: command tx timeout [ 167.156289][ T5588] Bluetooth: hci4: command tx timeout [ 168.938399][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.948399][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.956212][ T5587] bridge_slave_0: entered allmulticast mode [ 168.964543][ T5587] bridge_slave_0: entered promiscuous mode [ 169.014332][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.027359][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.045335][ T5587] bridge_slave_1: entered allmulticast mode [ 169.065332][ T5588] Bluetooth: hci1: command tx timeout [ 169.068553][ T5587] bridge_slave_1: entered promiscuous mode [ 169.071118][ T48] Bluetooth: hci0: command tx timeout [ 169.146544][ T48] Bluetooth: hci3: command tx timeout [ 169.154889][ T48] Bluetooth: hci2: command tx timeout [ 169.225360][ T48] Bluetooth: hci4: command tx timeout [ 169.343551][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.353398][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.361050][ T5596] bridge_slave_0: entered allmulticast mode [ 169.369568][ T5596] bridge_slave_0: entered promiscuous mode [ 169.389198][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.399323][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.407235][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.415067][ T5580] bridge_slave_0: entered allmulticast mode [ 169.423243][ T5580] bridge_slave_0: entered promiscuous mode [ 169.465090][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.473271][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.482279][ T5596] bridge_slave_1: entered allmulticast mode [ 169.492241][ T5596] bridge_slave_1: entered promiscuous mode [ 169.512766][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.548513][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.556433][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.563986][ T5580] bridge_slave_1: entered allmulticast mode [ 169.573018][ T5580] bridge_slave_1: entered promiscuous mode [ 169.694211][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.701794][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.709650][ T5586] bridge_slave_0: entered allmulticast mode [ 169.717753][ T5586] bridge_slave_0: entered promiscuous mode [ 169.759299][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.776018][ T5587] team0: Port device team_slave_0 added [ 169.804364][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.812365][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.820100][ T5586] bridge_slave_1: entered allmulticast mode [ 169.828505][ T5586] bridge_slave_1: entered promiscuous mode [ 169.867023][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.881787][ T5587] team0: Port device team_slave_1 added [ 169.895179][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.929192][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.937156][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.944928][ T5579] bridge_slave_0: entered allmulticast mode [ 169.953293][ T5579] bridge_slave_0: entered promiscuous mode [ 170.061664][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.095043][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.102825][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.110474][ T5579] bridge_slave_1: entered allmulticast mode [ 170.118775][ T5579] bridge_slave_1: entered promiscuous mode [ 170.201080][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.240550][ T5596] team0: Port device team_slave_0 added [ 170.248588][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.256063][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.282294][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.326205][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.367152][ T5596] team0: Port device team_slave_1 added [ 170.375010][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.382407][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.408669][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.427041][ T5580] team0: Port device team_slave_0 added [ 170.461841][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.514036][ T5580] team0: Port device team_slave_1 added [ 170.548968][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.584084][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.592643][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.619471][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.659291][ T5586] team0: Port device team_slave_0 added [ 170.693439][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.700949][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.727389][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.769248][ T5586] team0: Port device team_slave_1 added [ 170.851506][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.858763][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.885004][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.926329][ T5579] team0: Port device team_slave_0 added [ 170.959986][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.967437][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.993969][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.035585][ T5579] team0: Port device team_slave_1 added [ 171.055183][ T5587] hsr_slave_0: entered promiscuous mode [ 171.063450][ T5587] hsr_slave_1: entered promiscuous mode [ 171.089857][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.097141][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.123646][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.145352][ T48] Bluetooth: hci0: command tx timeout [ 171.151013][ T5588] Bluetooth: hci1: command tx timeout [ 171.191576][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.198842][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.225160][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.226814][ T48] Bluetooth: hci2: command tx timeout [ 171.235947][ T5588] Bluetooth: hci3: command tx timeout [ 171.302928][ T5596] hsr_slave_0: entered promiscuous mode [ 171.310396][ T48] Bluetooth: hci4: command tx timeout [ 171.313284][ T5596] hsr_slave_1: entered promiscuous mode [ 171.324362][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 171.330339][ T5596] Cannot create hsr debugfs directory [ 171.358826][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.366016][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.392429][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.469385][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.476646][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.504060][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.730852][ T5580] hsr_slave_0: entered promiscuous mode [ 171.739246][ T5580] hsr_slave_1: entered promiscuous mode [ 171.747183][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 171.752995][ T5580] Cannot create hsr debugfs directory [ 171.799846][ T5586] hsr_slave_0: entered promiscuous mode [ 171.808392][ T5586] hsr_slave_1: entered promiscuous mode [ 171.816314][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 171.822151][ T5586] Cannot create hsr debugfs directory [ 171.982388][ T5579] hsr_slave_0: entered promiscuous mode [ 171.991861][ T5579] hsr_slave_1: entered promiscuous mode [ 172.000164][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 172.006100][ T5579] Cannot create hsr debugfs directory [ 173.025873][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.053320][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.067727][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.085591][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.096439][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.113943][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.137829][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.155475][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.227704][ T48] Bluetooth: hci0: command tx timeout [ 173.227787][ T5588] Bluetooth: hci1: command tx timeout [ 173.252588][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.279937][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.290202][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.306423][ T5588] Bluetooth: hci3: command tx timeout [ 173.307494][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.312032][ T5588] Bluetooth: hci2: command tx timeout [ 173.325885][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.348564][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.375723][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.393797][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.401616][ T5588] Bluetooth: hci4: command tx timeout [ 173.554939][ T5580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.573341][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.583035][ T5580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.605598][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.616220][ T5580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.633657][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.665994][ T5580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.683909][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.852991][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.872313][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.899486][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.915021][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.960855][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.980460][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.012757][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.032043][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.226022][ T5579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.244013][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.278708][ T5579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.297963][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.320570][ T5579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.339144][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.371376][ T5579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.391731][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.596365][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.819217][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.833509][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.918384][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.925788][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.960100][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.020012][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.027433][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.057733][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.119899][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.154124][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.190576][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.197942][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.212507][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.219866][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.311707][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.319098][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.332865][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.340233][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.399050][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.460789][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.508185][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.515579][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.612001][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.619363][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.649493][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.733868][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.741246][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.859627][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.867255][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.522852][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.249872][ T5587] veth0_vlan: entered promiscuous mode [ 179.323573][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.448233][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.492205][ T5587] veth1_vlan: entered promiscuous mode [ 179.592315][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.617584][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.984513][ T5587] veth0_macvtap: entered promiscuous mode [ 180.049989][ T5580] veth0_vlan: entered promiscuous mode [ 180.112714][ T5587] veth1_macvtap: entered promiscuous mode [ 180.159507][ T5580] veth1_vlan: entered promiscuous mode [ 180.202904][ T5596] veth0_vlan: entered promiscuous mode [ 180.364485][ T5586] veth0_vlan: entered promiscuous mode [ 180.375925][ T5596] veth1_vlan: entered promiscuous mode [ 180.420543][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.503066][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.522559][ T5586] veth1_vlan: entered promiscuous mode [ 180.631971][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.653248][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.703123][ T5580] veth0_macvtap: entered promiscuous mode [ 180.717111][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.729157][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.831743][ T5580] veth1_macvtap: entered promiscuous mode [ 180.877815][ T5596] veth0_macvtap: entered promiscuous mode [ 180.992741][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.006932][ T5596] veth1_macvtap: entered promiscuous mode [ 181.028783][ T5579] veth0_vlan: entered promiscuous mode [ 181.138696][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.161428][ T5586] veth0_macvtap: entered promiscuous mode [ 181.267983][ T5579] veth1_vlan: entered promiscuous mode [ 181.288891][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.298371][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.333392][ T5586] veth1_macvtap: entered promiscuous mode [ 181.359663][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.383420][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.406337][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.497747][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.629271][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.687962][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.714087][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.751116][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.760677][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.778231][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.955075][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.985368][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.033739][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.059872][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.120438][ T5579] veth0_macvtap: entered promiscuous mode [ 182.208941][ T5579] veth1_macvtap: entered promiscuous mode [ 182.560324][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.698915][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.845021][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.888648][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.968046][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.005485][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.113222][ T3354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.152724][ T3354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.460442][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.493334][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.878380][ T5587] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.902473][ T5842] loop1: detected capacity change from 0 to 128 [ 186.927772][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.956196][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.423669][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.470297][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.262152][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.335931][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.652428][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.712089][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.858760][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.858849][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.995633][ T5856] Zero length message leads to an empty skb [ 190.104506][ T5857] mmap: syz.3.7 (5857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.872794][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.956771][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.963978][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.998189][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.146089][ T5864] loop0: detected capacity change from 0 to 64 [ 192.210229][ T5866] ===================================================== [ 192.217949][ T5866] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 192.226643][ T5866] mptcp_established_options+0x112f/0x3530 [ 192.232784][ T5866] tcp_established_options+0x312/0xcc0 [ 192.238571][ T5866] __tcp_transmit_skb+0x5dc/0x5fe0 [ 192.243869][ T5866] __tcp_send_ack+0x967/0xad0 [ 192.248730][ T5866] tcp_send_ack+0x3d/0x60 [ 192.253203][ T5866] mptcp_subflow_shutdown+0x164/0x690 [ 192.262305][ T5866] mptcp_check_send_data_fin+0x31b/0x3d0 [ 192.269185][ T5866] __mptcp_close+0x860/0x1360 [ 192.276970][ T5866] mptcp_close+0x42/0x260 [ 192.281480][ T5866] inet_release+0x1ee/0x2a0 [ 192.286206][ T5866] sock_close+0xd6/0x2f0 [ 192.290532][ T5866] __fput+0x60e/0x1010 [ 192.294755][ T5866] ____fput+0x25/0x30 [ 192.298805][ T5866] task_work_run+0x208/0x2b0 [ 192.303506][ T5866] exit_to_user_mode_loop+0x505/0x2420 [ 192.309136][ T5866] do_syscall_64+0x261/0x3c0 [ 192.313827][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.320736][ T5866] [ 192.323207][ T5866] Local variable opts created at: [ 192.328421][ T5866] __tcp_transmit_skb+0x4d/0x5fe0 [ 192.333518][ T5866] __tcp_send_ack+0x967/0xad0 [ 192.338424][ T5866] [ 192.340862][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(lazy) [ 192.350477][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.363418][ T5866] ===================================================== [ 192.371405][ T5866] Disabling lock debugging due to kernel taint [ 192.431041][ T5866] Kernel panic - not syncing: kmsan.panic set ... [ 192.437615][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.3.10 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 192.448467][ T5866] Tainted: [B]=BAD_PAGE [ 192.452695][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.462869][ T5866] Call Trace: [ 192.466236][ T5866] [ 192.469243][ T5866] __dump_stack+0x26/0x30 [ 192.473750][ T5866] dump_stack_lvl+0x50/0x1c0 [ 192.478507][ T5866] ? dump_stack+0x12/0x25 [ 192.482943][ T5866] dump_stack+0x1e/0x25 [ 192.487200][ T5866] vpanic+0x7b4/0x1430 [ 192.491474][ T5866] panic+0x15d/0x160 [ 192.495593][ T5866] kmsan_report+0x31a/0x320 [ 192.500292][ T5866] ? __msan_warning+0x1b/0x30 [ 192.505146][ T5866] ? mptcp_established_options+0x112f/0x3530 [ 192.511330][ T5866] ? tcp_established_options+0x312/0xcc0 [ 192.517127][ T5866] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 192.522556][ T5866] ? __tcp_send_ack+0x967/0xad0 [ 192.527505][ T5866] ? tcp_send_ack+0x3d/0x60 [ 192.532206][ T5866] ? mptcp_subflow_shutdown+0x164/0x690 [ 192.537961][ T5866] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 192.543954][ T5866] ? __mptcp_close+0x860/0x1360 [ 192.548917][ T5866] ? mptcp_close+0x42/0x260 [ 192.553492][ T5866] ? inet_release+0x1ee/0x2a0 [ 192.558268][ T5866] ? sock_close+0xd6/0x2f0 [ 192.562759][ T5866] ? __fput+0x60e/0x1010 [ 192.567117][ T5866] ? ____fput+0x25/0x30 [ 192.571415][ T5866] ? task_work_run+0x208/0x2b0 [ 192.576322][ T5866] ? exit_to_user_mode_loop+0x505/0x2420 [ 192.582068][ T5866] ? do_syscall_64+0x261/0x3c0 [ 192.586942][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.593533][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.599690][ T5866] ? kmsan_get_metadata+0xf1/0x160 [ 192.604940][ T5866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 192.610871][ T5866] ? mptcp_established_options+0xa1/0x3530 [ 192.616784][ T5866] ? filter_irq_stacks+0x49/0x190 [ 192.621911][ T5866] ? stack_depot_save_flags+0x35/0x790 [ 192.627463][ T5866] ? kmsan_get_metadata+0xf1/0x160 [ 192.632777][ T5866] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 192.639307][ T5866] ? kmsan_get_metadata+0xf1/0x160 [ 192.644634][ T5866] __msan_warning+0x1b/0x30 [ 192.649335][ T5866] mptcp_established_options+0x112f/0x3530 [ 192.655415][ T5866] tcp_established_options+0x312/0xcc0 [ 192.661059][ T5866] __tcp_transmit_skb+0x5dc/0x5fe0 [ 192.666369][ T5866] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 192.672739][ T5866] ? kmsan_get_metadata+0xf1/0x160 [ 192.678052][ T5866] ? kmsan_get_metadata+0xf1/0x160 [ 192.683367][ T5866] ? kmsan_get_metadata+0xf1/0x160 [ 192.688675][ T5866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 192.694698][ T5866] ? __alloc_skb+0xb7d/0x1190 [ 192.699586][ T5866] __tcp_send_ack+0x967/0xad0 [ 192.704458][ T5866] tcp_send_ack+0x3d/0x60 [ 192.708987][ T5866] mptcp_subflow_shutdown+0x164/0x690 [ 192.714558][ T5866] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 192.720572][ T5866] mptcp_check_send_data_fin+0x31b/0x3d0 [ 192.726398][ T5866] __mptcp_close+0x860/0x1360 [ 192.731263][ T5866] ? __pfx_mptcp_close+0x10/0x10 [ 192.736331][ T5866] mptcp_close+0x42/0x260 [ 192.740795][ T5866] ? __pfx_mptcp_close+0x10/0x10 [ 192.745860][ T5866] inet_release+0x1ee/0x2a0 [ 192.750544][ T5866] ? __pfx_inet_release+0x10/0x10 [ 192.755742][ T5866] sock_close+0xd6/0x2f0 [ 192.760118][ T5866] ? __pfx_sock_close+0x10/0x10 [ 192.765090][ T5866] __fput+0x60e/0x1010 [ 192.769320][ T5866] ? __pfx_____fput+0x10/0x10 [ 192.774147][ T5866] ____fput+0x25/0x30 [ 192.778278][ T5866] task_work_run+0x208/0x2b0 [ 192.783017][ T5866] exit_to_user_mode_loop+0x505/0x2420 [ 192.788657][ T5866] ? __x64_sys_close_range+0x97/0xe0 [ 192.794086][ T5866] do_syscall_64+0x261/0x3c0 [ 192.798852][ T5866] ? clear_bhb_loop+0x50/0xa0 [ 192.803669][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.809712][ T5866] RIP: 0033:0x7f6f8719ce59 [ 192.814236][ T5866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.833982][ T5866] RSP: 002b:00007f6f880e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 192.842545][ T5866] RAX: 0000000000000000 RBX: 00007f6f87415fa0 RCX: 00007f6f8719ce59 [ 192.850624][ T5866] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 192.858692][ T5866] RBP: 00007f6f87232d6f R08: 0000000000000000 R09: 0000000000000000 [ 192.866760][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.874828][ T5866] R13: 00007f6f87416038 R14: 00007f6f87415fa0 R15: 00007fff0230df58 [ 192.882953][ T5866] [ 192.886242][ T5866] Kernel Offset: disabled [ 192.890615][ T5866] Rebooting in 86400 seconds..