last executing test programs: 4.423499314s ago: executing program 0 (id=131): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) 4.034907037s ago: executing program 2 (id=133): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 3.885717332s ago: executing program 0 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.521709334s ago: executing program 0 (id=136): unshare(0x26020480) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') 3.435665691s ago: executing program 1 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000076000d0b04000000fddbdf25030000000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 3.118114759s ago: executing program 4 (id=138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) 3.110464601s ago: executing program 2 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x34, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) 3.056052616s ago: executing program 0 (id=140): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x60) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10000, 0x0) 2.998386791s ago: executing program 3 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = epoll_create(0x3) sendfile(r4, r0, &(0x7f0000000040)=0x8, 0x5) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x6c}}, 0x0) 2.864794493s ago: executing program 1 (id=142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r0, 0x1, 0x0, 0x0, 0x48, 0x5, 0x5, 0xa, 0xb6a3, 0x2, 0x2, 'syz1\x00'}) 2.682458524s ago: executing program 2 (id=143): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x1) socket$kcm(0x2, 0x3, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x8, 0xdc, 0x800003}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.601640508s ago: executing program 4 (id=144): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.44894286s ago: executing program 3 (id=145): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) 2.383486136s ago: executing program 1 (id=146): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 1.992940446s ago: executing program 3 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() gettid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x2009c058) 1.775990826s ago: executing program 0 (id=148): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa420800490000240001efe000006a8606000000"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.720763315s ago: executing program 4 (id=149): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 1.508628007s ago: executing program 2 (id=150): unshare(0x26020480) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') 1.3947721s ago: executing program 3 (id=151): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) syz_emit_ethernet(0xd2, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0xff, @remote, @local, {[], {0x4e21, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f439b3e41e30b79b86ce4845a15e1860659db37703bdfa9592174fe5e8632177", "e1bb17f70a47813be635a3d7d50d06720ee118f5e0ae02229c8788c694a2639ee11c56e9c6a307ec4cbd1dc138681f6f", "86deee7fcfc2dbabec5f97fba79b17894fce6d97abe8336c8bf7d397", {"b8c3100cd7bab104bd910b5ccba6d760", "00000000000000000000002d57971b00"}}}}}}}}, 0x0) 1.32227513s ago: executing program 1 (id=152): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000009d0b7074de39389be7e4c4050dc8cbc6e5771fa4ee8121bcce956bb2bbefcd875be8a04bdf29f6d26dac427a9b5a543cba0afb3ff1294d138b7c87e6474e745041a97af09d9405a6259c698e911b72037bd53309f4d63634ed052bcaeccde9a23e595661d31cd8816c4b9ddfb14c42e2"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.028195395s ago: executing program 4 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x34}}, 0x0) 984.082751ms ago: executing program 2 (id=154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10101, 0x0, 0x0) 977.98858ms ago: executing program 3 (id=155): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44050}, 0x40) 583.86648ms ago: executing program 1 (id=156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40100}}], 0x1, 0x2840) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) epoll_create(0x3) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 500.48883ms ago: executing program 4 (id=157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 387.119631ms ago: executing program 2 (id=158): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x60) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10000, 0x0) 383.952267ms ago: executing program 3 (id=159): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 258.339549ms ago: executing program 0 (id=160): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x0, 0x1) socket$kcm(0x2, 0x3, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x8, 0xdc, 0x800003}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 51.287507ms ago: executing program 4 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 0s ago: executing program 1 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x341, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x6b, 0x0, 0xa, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@generic={0x94, 0xc, "74141141c1e93e03fc23"}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x11, "727c983251ed15de07ec8a9ae94d31"}, {0x6, 0x3, "ee"}, {0x2, 0x2}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 157.552362][ T5777] cgroup: Unknown subsys name 'net' [ 157.700427][ T5777] cgroup: Unknown subsys name 'cpuset' [ 157.721463][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.078581][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.085332][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.193204][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 168.447890][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.453433][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.457037][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.471172][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.471172][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.482974][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.498952][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.510553][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.529424][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.540287][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.553177][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.562471][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.593686][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.608133][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.620361][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.629684][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.637694][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.647049][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.669772][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.679039][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.688116][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.705946][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.716748][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.728529][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.796863][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.930259][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 170.375711][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 170.418011][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 170.454988][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 170.599064][ T5798] Bluetooth: hci0: command tx timeout [ 170.667368][ T5798] Bluetooth: hci1: command tx timeout [ 170.743366][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 170.744489][ T5798] Bluetooth: hci3: command tx timeout [ 170.906674][ T5798] Bluetooth: hci4: command tx timeout [ 170.982744][ T5798] Bluetooth: hci2: command tx timeout [ 171.054226][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.065773][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.073619][ T5797] bridge_slave_0: entered allmulticast mode [ 171.081948][ T5797] bridge_slave_0: entered promiscuous mode [ 171.105829][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.113544][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.121111][ T5797] bridge_slave_1: entered allmulticast mode [ 171.130373][ T5797] bridge_slave_1: entered promiscuous mode [ 171.242303][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.292571][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.543095][ T5797] team0: Port device team_slave_0 added [ 171.578234][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.585951][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.593531][ T5804] bridge_slave_0: entered allmulticast mode [ 171.601883][ T5804] bridge_slave_0: entered promiscuous mode [ 171.652961][ T5797] team0: Port device team_slave_1 added [ 171.685464][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.693210][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.700613][ T5804] bridge_slave_1: entered allmulticast mode [ 171.709294][ T5804] bridge_slave_1: entered promiscuous mode [ 171.757323][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.765255][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.772823][ T5806] bridge_slave_0: entered allmulticast mode [ 171.780957][ T5806] bridge_slave_0: entered promiscuous mode [ 171.824420][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.832096][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.839615][ T5800] bridge_slave_0: entered allmulticast mode [ 171.848148][ T5800] bridge_slave_0: entered promiscuous mode [ 171.913652][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.921101][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.928847][ T5806] bridge_slave_1: entered allmulticast mode [ 171.937040][ T5806] bridge_slave_1: entered promiscuous mode [ 171.977894][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.987701][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.995450][ T5800] bridge_slave_1: entered allmulticast mode [ 172.003903][ T5800] bridge_slave_1: entered promiscuous mode [ 172.042850][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.050302][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.058054][ T5808] bridge_slave_0: entered allmulticast mode [ 172.066330][ T5808] bridge_slave_0: entered promiscuous mode [ 172.104102][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.111191][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.137534][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.211004][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.309625][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.319011][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.326759][ T5808] bridge_slave_1: entered allmulticast mode [ 172.335066][ T5808] bridge_slave_1: entered promiscuous mode [ 172.347251][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.354416][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.382579][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.403198][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.435616][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.455570][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.528356][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.548314][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.661934][ T5798] Bluetooth: hci0: command tx timeout [ 172.717919][ T5804] team0: Port device team_slave_0 added [ 172.733124][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.751868][ T5801] Bluetooth: hci1: command tx timeout [ 172.778017][ T5806] team0: Port device team_slave_0 added [ 172.819804][ T5804] team0: Port device team_slave_1 added [ 172.825823][ T5801] Bluetooth: hci3: command tx timeout [ 172.848570][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.897367][ T5806] team0: Port device team_slave_1 added [ 172.909354][ T5800] team0: Port device team_slave_0 added [ 172.982779][ T5801] Bluetooth: hci4: command tx timeout [ 172.993936][ T5797] hsr_slave_0: entered promiscuous mode [ 173.002786][ T5797] hsr_slave_1: entered promiscuous mode [ 173.047539][ T5800] team0: Port device team_slave_1 added [ 173.062323][ T5801] Bluetooth: hci2: command tx timeout [ 173.155948][ T5808] team0: Port device team_slave_0 added [ 173.190013][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.197956][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.225421][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.239214][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.246577][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.272979][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.286895][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.294141][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.320419][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.340080][ T5808] team0: Port device team_slave_1 added [ 173.398165][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.405558][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.431782][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.540296][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.547566][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.573965][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.634775][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.641981][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.668576][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.698814][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.706728][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.733270][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.778314][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.785657][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.812021][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.879837][ T5806] hsr_slave_0: entered promiscuous mode [ 173.888226][ T5806] hsr_slave_1: entered promiscuous mode [ 173.896567][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 173.902517][ T5806] Cannot create hsr debugfs directory [ 174.100280][ T5804] hsr_slave_0: entered promiscuous mode [ 174.109960][ T5804] hsr_slave_1: entered promiscuous mode [ 174.118436][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 174.124461][ T5804] Cannot create hsr debugfs directory [ 174.252788][ T5800] hsr_slave_0: entered promiscuous mode [ 174.261344][ T5800] hsr_slave_1: entered promiscuous mode [ 174.271386][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 174.277396][ T5800] Cannot create hsr debugfs directory [ 174.296718][ T5808] hsr_slave_0: entered promiscuous mode [ 174.306308][ T5808] hsr_slave_1: entered promiscuous mode [ 174.314912][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 174.320795][ T5808] Cannot create hsr debugfs directory [ 174.741788][ T5801] Bluetooth: hci0: command tx timeout [ 174.832200][ T5801] Bluetooth: hci1: command tx timeout [ 174.901785][ T5801] Bluetooth: hci3: command tx timeout [ 175.072114][ T5801] Bluetooth: hci4: command tx timeout [ 175.142047][ T5801] Bluetooth: hci2: command tx timeout [ 175.482217][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.531442][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.550068][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.586833][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.643208][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.685885][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.727569][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.746723][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.896350][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.944873][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.967080][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.004858][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.027300][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.077541][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.142696][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.203409][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.299619][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.375268][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.407092][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.438287][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.829217][ T5801] Bluetooth: hci0: command tx timeout [ 176.906149][ T5801] Bluetooth: hci1: command tx timeout [ 176.915967][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.959046][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.981942][ T5801] Bluetooth: hci3: command tx timeout [ 177.104129][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.144568][ T5801] Bluetooth: hci4: command tx timeout [ 177.153676][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.177041][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.214447][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.222110][ T5801] Bluetooth: hci2: command tx timeout [ 177.279204][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.286753][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.333253][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.394238][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.401917][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.417136][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.424544][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.523035][ T1866] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.530381][ T1866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.546137][ T1866] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.553701][ T1866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.573527][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.637533][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.645031][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.723078][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.746385][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.753920][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.768471][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.775964][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.886396][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.103696][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.111119][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.233911][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.241352][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.655341][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.835465][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.998012][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.014539][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.216302][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.357684][ T5797] veth0_vlan: entered promiscuous mode [ 180.463379][ T5797] veth1_vlan: entered promiscuous mode [ 180.581675][ T5808] veth0_vlan: entered promiscuous mode [ 180.628197][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.745867][ T5806] veth0_vlan: entered promiscuous mode [ 180.769604][ T5808] veth1_vlan: entered promiscuous mode [ 180.848657][ T5797] veth0_macvtap: entered promiscuous mode [ 180.927920][ T5806] veth1_vlan: entered promiscuous mode [ 180.942831][ T5797] veth1_macvtap: entered promiscuous mode [ 181.169521][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.218885][ T5808] veth0_macvtap: entered promiscuous mode [ 181.239682][ T5800] veth0_vlan: entered promiscuous mode [ 181.274069][ T5808] veth1_macvtap: entered promiscuous mode [ 181.300092][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.313391][ T5806] veth0_macvtap: entered promiscuous mode [ 181.375867][ T5806] veth1_macvtap: entered promiscuous mode [ 181.446420][ T3689] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.496627][ T5800] veth1_vlan: entered promiscuous mode [ 181.532215][ T3689] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.562711][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.597722][ T3689] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.613440][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.643522][ T4292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.666953][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.715232][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.787951][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.819666][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.867836][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.895363][ T5800] veth0_macvtap: entered promiscuous mode [ 181.906974][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.944914][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.003860][ T5800] veth1_macvtap: entered promiscuous mode [ 182.015794][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.086777][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.135743][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.217201][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.297114][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.398367][ T4336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.419330][ T5804] veth0_vlan: entered promiscuous mode [ 182.493227][ T4336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.529458][ T4336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.583142][ T4336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.640339][ T5804] veth1_vlan: entered promiscuous mode [ 182.970286][ T5804] veth0_macvtap: entered promiscuous mode [ 183.048612][ T5804] veth1_macvtap: entered promiscuous mode [ 183.194581][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.316364][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.378834][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.432278][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.486351][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.524885][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.929670][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.937993][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.111834][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.119842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.155952][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.164901][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.319330][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.328085][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.444422][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.452594][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.561363][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.572256][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.599097][ T5797] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 188.133309][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.141298][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.442321][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.450318][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.487786][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.499437][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.606893][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 188.629814][ T5991] syzkaller1: entered promiscuous mode [ 188.635750][ T5991] syzkaller1: entered allmulticast mode [ 188.780646][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.789009][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.997905][ T5856] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 190.155929][ T30] audit: type=1804 audit(1764925180.836:2): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8" name="/newroot/1/bus/file0" dev="overlay" ino=31 res=1 errno=0 [ 190.198772][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.209551][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.219735][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.311033][ T5856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.320584][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.328971][ T5856] usb 4-1: Product: syz [ 190.337644][ T5856] usb 4-1: Manufacturer: syz [ 190.344079][ T5856] usb 4-1: SerialNumber: syz [ 190.385179][ T5856] hub 4-1:1.0: bad descriptor, ignoring hub [ 190.390018][ T6011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.392187][ T5856] hub 4-1:1.0: probe with driver hub failed with error -5 [ 190.400975][ T6011] block device autoloading is deprecated and will be removed. [ 190.627664][ T5856] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 190.973264][ T5855] usb 4-1: USB disconnect, device number 2 [ 191.017998][ T5855] usblp0: removed [ 191.404416][ T5855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 191.594883][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 191.605230][ T5855] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 191.615240][ T5855] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.791667][ T5855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 191.801114][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.809527][ T5855] usb 4-1: Product: syz [ 191.816631][ T5855] usb 4-1: Manufacturer: syz [ 191.825509][ T5855] usb 4-1: SerialNumber: syz [ 191.927532][ T5855] hub 4-1:1.0: bad descriptor, ignoring hub [ 191.934001][ T5855] hub 4-1:1.0: probe with driver hub failed with error -5 [ 192.058114][ T6032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.159168][ T5855] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 192.246294][ T5855] usb 4-1: USB disconnect, device number 3 [ 192.289490][ T5855] usblp0: removed [ 194.152569][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'. [ 194.199473][ T6055] usb usb8: usbfs: process 6055 (syz.4.27) did not claim interface 0 before use [ 194.355877][ T6061] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.396402][ T6060] process 'syz.3.28' launched './file0' with NULL argv: empty string added [ 195.426582][ T30] audit: type=1326 audit(1764925186.116:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6065 comm="syz.3.32" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22539 code=0x0 [ 196.834198][ T6073] orangefs: client-core tried to read wrong size [ 198.070466][ T6091] Bluetooth: MGMT ver 1.23 [ 201.097051][ T6119] syz.2.52 (6119) used greatest stack depth: 2232 bytes left [ 201.953806][ T5855] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.971193][ T6133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.165072][ T5855] usb 4-1: config 0 has no interfaces? [ 202.170833][ T5855] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 202.180707][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.274929][ T5855] usb 4-1: config 0 descriptor?? [ 202.686253][ T5856] usb 4-1: USB disconnect, device number 4 [ 203.174119][ T6153] netlink: 'syz.0.62': attribute type 4 has an invalid length. [ 203.199887][ T6152] batman_adv: batadv0: Adding interface: dummy0 [ 203.206642][ T6152] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.233649][ T6152] batman_adv: batadv0: Interface activated: dummy0 [ 203.266162][ T6154] batadv0: mtu less than device minimum [ 203.274262][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.287479][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.300291][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.313169][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.325950][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.338814][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.351915][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.364699][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.377644][ T6154] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.007543][ T6167] tipc: Started in network mode [ 204.012834][ T6167] tipc: Node identity 84e, cluster identity 4711 [ 204.019440][ T6167] tipc: Node number set to 2126 [ 204.220758][ T6170] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.227646][ T6172] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 204.784653][ T6182] input: syz0 as /devices/virtual/input/input5 [ 205.642784][ T30] audit: type=1800 audit(1764925196.336:4): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.77" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 206.214988][ T6213] loop6: detected capacity change from 0 to 524279808 [ 206.363946][ T6212] kvm: pic: non byte read [ 206.396886][ T6212] kvm: pic: level sensitive irq not supported [ 206.397250][ T6212] kvm: pic: non byte read [ 206.436597][ T6212] kvm: pic: non byte read [ 206.443359][ T6212] kvm: pic: level sensitive irq not supported [ 206.443634][ T6212] kvm: pic: non byte read [ 206.532421][ T5856] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 206.702158][ T6220] capability: warning: `syz.3.88' uses 32-bit capabilities (legacy support in use) [ 206.712334][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 206.739718][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.746923][ T5856] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 206.756564][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.831841][ T5856] usb 5-1: config 0 descriptor?? [ 206.902162][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.912353][ T5855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.918619][ T5855] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 207.304305][ T5856] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 207.520199][ T5856] usb 5-1: USB disconnect, device number 2 [ 208.857145][ T6252] tipc: Started in network mode [ 208.873024][ T6252] tipc: Node identity b68386571e72, cluster identity 4711 [ 208.882835][ T6252] tipc: Enabled bearer , priority 0 [ 209.035527][ T6247] tipc: Resetting bearer [ 209.062707][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.077030][ T5855] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 209.083462][ T5855] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 209.300671][ T6247] tipc: Disabling bearer [ 210.651849][ T800] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 210.901708][ T800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.912559][ T800] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.924005][ T800] usb 3-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 210.934274][ T800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.959660][ T800] usb 3-1: config 0 descriptor?? [ 211.123261][ T30] audit: type=1326 audit(1764925201.786:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.3.102" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f22539 code=0x0 [ 211.234394][ T5801] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.253241][ T800] usb 3-1: USB disconnect, device number 2 [ 211.268224][ T5855] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 211.275071][ T5855] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 211.351195][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 212.439055][ T6299] program syz.0.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.101881][ T800] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 213.290366][ T800] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 213.299092][ T800] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.309468][ T800] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.382201][ T5855] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 213.382877][ T5801] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.388526][ T5855] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 213.408382][ T800] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.417914][ T800] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.426972][ T800] usb 3-1: Product: syz [ 213.431229][ T800] usb 3-1: Manufacturer: syz [ 213.436056][ T800] usb 3-1: SerialNumber: syz [ 213.556346][ T800] usb 3-1: config 0 descriptor?? [ 213.603108][ T800] hub 3-1:0.0: bad descriptor, ignoring hub [ 213.609300][ T800] hub 3-1:0.0: probe with driver hub failed with error -5 [ 213.627953][ T800] usb 3-1: selecting invalid altsetting 0 [ 213.685312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 214.303808][ T5853] usb 3-1: USB disconnect, device number 3 [ 214.545711][ T5853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 214.725716][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 214.748941][ T5853] usb 3-1: config 0 has no interfaces? [ 214.812806][ T5853] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 214.824750][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.833226][ T5853] usb 3-1: Product: syz [ 214.837579][ T5853] usb 3-1: Manufacturer: syz [ 214.842504][ T5853] usb 3-1: SerialNumber: syz [ 214.925248][ T5853] usb 3-1: config 0 descriptor?? [ 215.045083][ T6336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 215.051816][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.060531][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 215.165829][ T800] usb 3-1: USB disconnect, device number 4 [ 215.234554][ T6337] vhci_hcd: connection closed [ 215.236787][ T14] vhci_hcd: stop threads [ 215.246639][ T14] vhci_hcd: release socket [ 215.251255][ T14] vhci_hcd: disconnect device [ 215.252318][ T5543] vhci_hcd: vhci_device speed not set [ 215.262664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 215.271049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 215.543565][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout [ 215.547217][ T5855] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 215.556097][ T5855] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 216.550442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 216.592447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 216.602189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 216.610827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.382933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.423943][ T6389] tipc: Started in network mode [ 219.429057][ T6389] tipc: Node identity 9a25072d787, cluster identity 4711 [ 219.437465][ T6389] tipc: Enabled bearer , priority 0 [ 219.624412][ T6394] syzkaller0: entered promiscuous mode [ 219.630077][ T6394] syzkaller0: entered allmulticast mode [ 219.638717][ T6394] tipc: Resetting bearer [ 219.821094][ T6387] tipc: Resetting bearer [ 219.948607][ T6399] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 219.959986][ T6387] tipc: Disabling bearer [ 220.131760][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 221.444161][ T6432] syz.1.146 uses obsolete (PF_INET,SOCK_PACKET) [ 222.282669][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 222.324986][ T6444] tipc: Started in network mode [ 222.330104][ T6444] tipc: Node identity 1667be772aaa, cluster identity 4711 [ 222.338444][ T6444] tipc: Enabled bearer , priority 0 [ 222.643292][ T6444] syzkaller0: entered promiscuous mode [ 222.648967][ T6444] syzkaller0: entered allmulticast mode [ 222.658989][ T6444] tipc: Resetting bearer [ 222.753621][ T6442] tipc: Resetting bearer [ 222.890182][ T6442] tipc: Disabling bearer [ 223.959687][ T6483] syzkaller0: entered promiscuous mode [ 223.965533][ T6483] syzkaller0: entered allmulticast mode [ 224.040589][ T5444] ===================================================== [ 224.048759][ T5444] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 224.056431][ T5444] _copy_to_iter+0xef3/0x33f0 [ 224.061244][ T5444] __skb_datagram_iter+0x196/0x12c0 [ 224.066852][ T5444] skb_copy_datagram_iter+0x5b/0x1e0 [ 224.072472][ T5444] netlink_recvmsg+0x4bb/0xfe0 [ 224.077368][ T5444] sock_recvmsg+0x2df/0x390 [ 224.082132][ T5444] ____sys_recvmsg+0x193/0x610 [ 224.087061][ T5444] ___sys_recvmsg+0x20b/0x850 [ 224.092041][ T5444] __x64_sys_recvmsg+0x20e/0x3d0 [ 224.097157][ T5444] x64_sys_call+0x38b7/0x3e70 [ 224.102207][ T5444] do_syscall_64+0xd9/0xf80 [ 224.106881][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.114504][ T5444] [ 224.116908][ T5444] Uninit was stored to memory at: [ 224.122734][ T5444] pskb_expand_head+0x310/0x15d0 [ 224.127854][ T5444] netlink_trim+0x3a3/0x450 [ 224.132693][ T5444] netlink_broadcast_filtered+0x80/0x28f0 [ 224.138605][ T5444] nlmsg_notify+0x15b/0x2f0 [ 224.143467][ T5444] rtnl_notify+0xba/0x100 [ 224.147978][ T5444] wireless_nlevent_process+0xfe/0x290 [ 224.153819][ T5444] process_scheduled_works+0xb91/0x1d80 [ 224.159564][ T5444] worker_thread+0xedf/0x1590 [ 224.164491][ T5444] kthread+0xd5c/0xf00 [ 224.168747][ T5444] ret_from_fork+0x208/0x710 [ 224.173683][ T5444] ret_from_fork_asm+0x1a/0x30 [ 224.178623][ T5444] [ 224.181020][ T5444] Uninit was stored to memory at: [ 224.186448][ T5444] wireless_send_event+0x652/0x1540 [ 224.191968][ T5444] ioctl_standard_iw_point+0x12b0/0x13f0 [ 224.197759][ T5444] compat_standard_call+0x188/0x4c0 [ 224.203207][ T5444] wext_ioctl_dispatch+0x192/0x7a0 [ 224.208500][ T5444] compat_wext_handle_ioctl+0x1a1/0x300 [ 224.214813][ T5444] compat_sock_ioctl+0x20c/0xff0 [ 224.219886][ T5444] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 224.225765][ T5444] ia32_sys_call+0x25d9/0x4340 [ 224.230653][ T5444] __do_fast_syscall_32+0x155/0x310 [ 224.236245][ T5444] do_fast_syscall_32+0x38/0x80 [ 224.241323][ T5444] do_SYSENTER_32+0x1f/0x30 [ 224.246244][ T5444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.252886][ T5444] [ 224.255274][ T5444] Local variable iwp created at: [ 224.260277][ T5444] compat_standard_call+0x4a/0x4c0 [ 224.267602][ T5444] wext_ioctl_dispatch+0x192/0x7a0 [ 224.274244][ T5444] [ 224.276655][ T5444] Bytes 60-63 of 64 are uninitialized [ 224.282439][ T5444] Memory access of size 64 starts at ffff88811c9c0840 [ 224.289319][ T5444] Data copied to user address 00007fffa4a44ff0 [ 224.295730][ T5444] [ 224.298176][ T5444] CPU: 0 UID: 101 PID: 5444 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(none) [ 224.309331][ T5444] Tainted: [L]=SOFTLOCKUP [ 224.313866][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.324241][ T5444] ===================================================== [ 224.331255][ T5444] Disabling lock debugging due to kernel taint [ 224.337843][ T5444] Kernel panic - not syncing: kmsan.panic set ... [ 224.344379][ T5444] CPU: 0 UID: 101 PID: 5444 Comm: dhcpcd Tainted: G B L syzkaller #0 PREEMPT(none) [ 224.355230][ T5444] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 224.360946][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.371126][ T5444] Call Trace: [ 224.374482][ T5444] [ 224.377474][ T5444] __dump_stack+0x26/0x30 [ 224.381938][ T5444] dump_stack_lvl+0x53/0x270 [ 224.386659][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.392617][ T5444] dump_stack+0x1e/0x25 [ 224.396920][ T5444] vpanic+0x435/0xd30 [ 224.401054][ T5444] panic+0x15d/0x160 [ 224.405125][ T5444] kmsan_report+0x31c/0x320 [ 224.409772][ T5444] ? kmsan_internal_check_memory+0x1e1/0x230 [ 224.415877][ T5444] ? kmsan_copy_to_user+0xf1/0x190 [ 224.421114][ T5444] ? _copy_to_iter+0xef3/0x33f0 [ 224.426076][ T5444] ? __skb_datagram_iter+0x196/0x12c0 [ 224.431597][ T5444] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 224.437203][ T5444] ? netlink_recvmsg+0x4bb/0xfe0 [ 224.442253][ T5444] ? sock_recvmsg+0x2df/0x390 [ 224.447058][ T5444] ? ____sys_recvmsg+0x193/0x610 [ 224.452137][ T5444] ? ___sys_recvmsg+0x20b/0x850 [ 224.457147][ T5444] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 224.462409][ T5444] ? x64_sys_call+0x38b7/0x3e70 [ 224.467400][ T5444] ? do_syscall_64+0xd9/0xf80 [ 224.472221][ T5444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.478423][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.484397][ T5444] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 224.490249][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.495507][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.501478][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.506736][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.512692][ T5444] ? __dequeue_entity+0x2249/0x2510 [ 224.518031][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.523291][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.529257][ T5444] kmsan_internal_check_memory+0x1e1/0x230 [ 224.535220][ T5444] kmsan_copy_to_user+0xf1/0x190 [ 224.540298][ T5444] _copy_to_iter+0xef3/0x33f0 [ 224.545104][ T5444] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 224.551585][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.556853][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.562825][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.568091][ T5444] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 224.574581][ T5444] __skb_datagram_iter+0x196/0x12c0 [ 224.579935][ T5444] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 224.585748][ T5444] skb_copy_datagram_iter+0x5b/0x1e0 [ 224.591181][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.597166][ T5444] netlink_recvmsg+0x4bb/0xfe0 [ 224.602086][ T5444] ? aa_sock_msg_perm+0x284/0x2e0 [ 224.607285][ T5444] ? __pfx_netlink_recvmsg+0x10/0x10 [ 224.612716][ T5444] sock_recvmsg+0x2df/0x390 [ 224.617362][ T5444] ____sys_recvmsg+0x193/0x610 [ 224.622278][ T5444] ? __pfx_should_fail_ex+0x10/0x10 [ 224.627609][ T5444] ? stack_depot_save_flags+0x35/0x790 [ 224.633234][ T5444] ___sys_recvmsg+0x20b/0x850 [ 224.638104][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.644151][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.649408][ T5444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 224.655373][ T5444] __x64_sys_recvmsg+0x20e/0x3d0 [ 224.660478][ T5444] ? kmsan_get_metadata+0xfb/0x160 [ 224.665745][ T5444] x64_sys_call+0x38b7/0x3e70 [ 224.670571][ T5444] do_syscall_64+0xd9/0xf80 [ 224.675228][ T5444] ? clear_bhb_loop+0x40/0x90 [ 224.680037][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.686062][ T5444] RIP: 0033:0x7f33d6355407 [ 224.690570][ T5444] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 224.710314][ T5444] RSP: 002b:00007fffa4a44ee0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 224.718864][ T5444] RAX: ffffffffffffffda RBX: 00007f33d62cb740 RCX: 00007f33d6355407 [ 224.726968][ T5444] RDX: 0000000000000040 RSI: 00007fffa4a44f60 RDI: 0000000000000009 [ 224.735025][ T5444] RBP: 0000560fab120aa0 R08: 0000000000000000 R09: 0000000000000000 [ 224.743084][ T5444] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 224.751136][ T5444] R13: 00007fffa4a490c0 R14: 0000000000000000 R15: 00007fffa4a490b0 [ 224.759232][ T5444] [ 224.762702][ T5444] Kernel Offset: disabled [ 224.767074][ T5444] Rebooting in 86400 seconds..