last executing test programs: 469.944138ms ago: executing program 0 (id=1): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x4, 0x1, 0x34565559, 0x1, 0xb, [{0x7}, {0xd, 0x87}, {0x8000, 0x800b25}, {0x0, 0x3}, {0x5, 0x5}, {0x80000001, 0x1}, {0x1200, 0x1}, {0x8, 0x8}], 0xa, 0xfe, 0x0, 0x0, 0x5}}) 419.122341ms ago: executing program 2 (id=3): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f7ffffffffffffffffff"]}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 47.531686ms ago: executing program 1 (id=2): mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 0s ago: executing program 3 (id=4): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0xd5, "d93c2b0642cb1e2323b9e90c0e711fdea30d8aaf05abc7c89eb253039494828ad7f23c06d17807c5276b3486c49f63952617711b6653a814871c421ad0fd32f3338b63fa1595dda8e1c3f1c8cdf6f3a55e4229662d5e8e16933139da1eab2da102b3463c58f29c49f113165869a8f54651029a260ff44e5ada5d0f0a64143c0d67beb38e9c517c0ca2aa28df5499a6b8ff8cbd1b93b1b169f9de30782f1b62cc3de1954784b9ce5eaa525496db1895fba63357e7304b7f7c18e05b27a28b93f8d46308e8f44c3bfa39a82367ff263394b2610c5e28"}, &(0x7f0000000040)=0xf9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 195.051956][ T5789] cgroup: Unknown subsys name 'net' [ 195.270765][ T5789] cgroup: Unknown subsys name 'cpuset' [ 195.288852][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.848475][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 207.676361][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.696344][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.707468][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.728693][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.740221][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.752790][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.760957][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.773518][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.796022][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.808189][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.852968][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.856102][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.861617][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.879881][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.889892][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.898651][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.908397][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.927723][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.934626][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.944594][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.953485][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.969299][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.975173][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.981546][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.995690][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.489462][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 209.671752][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 209.888168][ T5813] Bluetooth: hci0: command tx timeout [ 209.888220][ T5812] Bluetooth: hci1: command tx timeout [ 210.002859][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 210.035932][ T5813] Bluetooth: hci3: command tx timeout [ 210.041772][ T5813] Bluetooth: hci2: command tx timeout [ 210.123920][ T5813] Bluetooth: hci4: command tx timeout [ 210.587487][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 210.703750][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 210.919508][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.927432][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.935652][ T5805] bridge_slave_0: entered allmulticast mode [ 210.945743][ T5805] bridge_slave_0: entered promiscuous mode [ 211.244771][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.252581][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.262922][ T5808] bridge_slave_0: entered allmulticast mode [ 211.277198][ T5808] bridge_slave_0: entered promiscuous mode [ 211.426114][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.435693][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.443824][ T5809] bridge_slave_0: entered allmulticast mode [ 211.453924][ T5809] bridge_slave_0: entered promiscuous mode [ 211.468299][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.478397][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.486256][ T5805] bridge_slave_1: entered allmulticast mode [ 211.496143][ T5805] bridge_slave_1: entered promiscuous mode [ 211.532091][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.539953][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.548997][ T5808] bridge_slave_1: entered allmulticast mode [ 211.559203][ T5808] bridge_slave_1: entered promiscuous mode [ 211.852105][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.860161][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.868473][ T5809] bridge_slave_1: entered allmulticast mode [ 211.879020][ T5809] bridge_slave_1: entered promiscuous mode [ 211.901766][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.954887][ T5812] Bluetooth: hci0: command tx timeout [ 211.961092][ T5812] Bluetooth: hci1: command tx timeout [ 212.114200][ T5812] Bluetooth: hci2: command tx timeout [ 212.119970][ T5812] Bluetooth: hci3: command tx timeout [ 212.127535][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.148417][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.171513][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.191234][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.201632][ T5812] Bluetooth: hci4: command tx timeout [ 212.378169][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.571683][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.579630][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.589481][ T5810] bridge_slave_0: entered allmulticast mode [ 212.598269][ T5810] bridge_slave_0: entered promiscuous mode [ 212.611411][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.619615][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.630436][ T5811] bridge_slave_0: entered allmulticast mode [ 212.639680][ T5811] bridge_slave_0: entered promiscuous mode [ 212.659162][ T5809] team0: Port device team_slave_0 added [ 212.685242][ T5805] team0: Port device team_slave_0 added [ 212.729268][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.737280][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.745397][ T5810] bridge_slave_1: entered allmulticast mode [ 212.754779][ T5810] bridge_slave_1: entered promiscuous mode [ 212.807261][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.815189][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.822921][ T5811] bridge_slave_1: entered allmulticast mode [ 212.832847][ T5811] bridge_slave_1: entered promiscuous mode [ 212.849142][ T5809] team0: Port device team_slave_1 added [ 212.903176][ T5805] team0: Port device team_slave_1 added [ 212.958840][ T5808] team0: Port device team_slave_0 added [ 213.090219][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.108577][ T5808] team0: Port device team_slave_1 added [ 213.128089][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.229724][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.295691][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.308775][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.316590][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.346010][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.361613][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.369302][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.396348][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.411470][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.418961][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.446214][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.578409][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.587176][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.615005][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.685583][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.692912][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.719779][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.801269][ T5811] team0: Port device team_slave_0 added [ 213.820355][ T5811] team0: Port device team_slave_1 added [ 213.847370][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.854829][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.881974][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.901934][ T5810] team0: Port device team_slave_0 added [ 214.010810][ T5810] team0: Port device team_slave_1 added [ 214.040951][ T5812] Bluetooth: hci1: command tx timeout [ 214.046870][ T5813] Bluetooth: hci0: command tx timeout [ 214.187566][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.196579][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.203744][ T5813] Bluetooth: hci3: command tx timeout [ 214.224366][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.229785][ T5812] Bluetooth: hci2: command tx timeout [ 214.284228][ T5813] Bluetooth: hci4: command tx timeout [ 214.345782][ T5809] hsr_slave_0: entered promiscuous mode [ 214.356326][ T5809] hsr_slave_1: entered promiscuous mode [ 214.381941][ T5805] hsr_slave_0: entered promiscuous mode [ 214.393582][ T5805] hsr_slave_1: entered promiscuous mode [ 214.402650][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 214.408825][ T5805] Cannot create hsr debugfs directory [ 214.456248][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.463738][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.491521][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.507108][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.516396][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.544490][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.561408][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.569021][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.596212][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.767093][ T5808] hsr_slave_0: entered promiscuous mode [ 214.777967][ T5808] hsr_slave_1: entered promiscuous mode [ 214.786333][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 214.792537][ T5808] Cannot create hsr debugfs directory [ 214.998360][ T5811] hsr_slave_0: entered promiscuous mode [ 215.011765][ T5811] hsr_slave_1: entered promiscuous mode [ 215.020405][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 215.026542][ T5811] Cannot create hsr debugfs directory [ 215.317302][ T5810] hsr_slave_0: entered promiscuous mode [ 215.327529][ T5810] hsr_slave_1: entered promiscuous mode [ 215.336975][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 215.342994][ T5810] Cannot create hsr debugfs directory [ 216.114374][ T5813] Bluetooth: hci0: command tx timeout [ 216.120195][ T5813] Bluetooth: hci1: command tx timeout [ 216.274183][ T5813] Bluetooth: hci3: command tx timeout [ 216.280033][ T5813] Bluetooth: hci2: command tx timeout [ 216.353923][ T5813] Bluetooth: hci4: command tx timeout [ 216.479136][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.537207][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.578218][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.696719][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.011022][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.075016][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.107004][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.132849][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.161025][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.207334][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.230575][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.338152][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.410971][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.490817][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.575204][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.670832][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.926422][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.987416][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.096750][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.130517][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.500615][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.817682][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.880790][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.926416][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.934325][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.092762][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.100817][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.249320][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.291047][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.328111][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.411864][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.419741][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.519668][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.527459][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.596974][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.709421][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.717559][ T4023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.756177][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.833517][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.841197][ T4023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.930485][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.938414][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.032040][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.043366][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.074865][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.112594][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.120553][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.437456][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.469168][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.495879][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.651074][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.658961][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.759581][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.767372][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.216048][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.498812][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.789567][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.864753][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.209020][ T5809] veth0_vlan: entered promiscuous mode [ 223.372453][ T5809] veth1_vlan: entered promiscuous mode [ 223.512821][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.525819][ T5810] veth0_vlan: entered promiscuous mode [ 223.584332][ T5808] veth0_vlan: entered promiscuous mode [ 223.662297][ T5810] veth1_vlan: entered promiscuous mode [ 223.807195][ T5808] veth1_vlan: entered promiscuous mode [ 223.876741][ T5809] veth0_macvtap: entered promiscuous mode [ 224.017793][ T5809] veth1_macvtap: entered promiscuous mode [ 224.179004][ T5811] veth0_vlan: entered promiscuous mode [ 224.265976][ T5810] veth0_macvtap: entered promiscuous mode [ 224.333307][ T5808] veth0_macvtap: entered promiscuous mode [ 224.361701][ T5810] veth1_macvtap: entered promiscuous mode [ 224.398308][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.412551][ T5808] veth1_macvtap: entered promiscuous mode [ 224.429310][ T5811] veth1_vlan: entered promiscuous mode [ 224.530146][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.690329][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.699820][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.709891][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.719541][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.792255][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.847643][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.933166][ T5811] veth0_macvtap: entered promiscuous mode [ 224.963895][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.991876][ T5811] veth1_macvtap: entered promiscuous mode [ 225.047729][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.094815][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.105084][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.114563][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.123842][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.211503][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.222694][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.233723][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.242825][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.402372][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.516786][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.633072][ T5805] veth0_vlan: entered promiscuous mode [ 225.679835][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.691889][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.701441][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.710684][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.888962][ T5805] veth1_vlan: entered promiscuous mode [ 226.317320][ T5805] veth0_macvtap: entered promiscuous mode [ 226.391558][ T5805] veth1_macvtap: entered promiscuous mode [ 226.634464][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.722216][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.808038][ T5805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.817751][ T5805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.827139][ T5805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.838068][ T5805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.824892][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.831844][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.464295][ T4600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.472755][ T4600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.695085][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.704424][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.745160][ T4023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.753615][ T4023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.011864][ T4166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.021324][ T4166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.191594][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.200099][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.344320][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 233.374279][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.382785][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.542463][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.551867][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.587743][ T4600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.596089][ T4600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.115959][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.856904][ T6002] ===================================================== [ 234.864577][ T6002] BUG: KMSAN: uninit-value in pptp_xmit+0xc34/0x2720 [ 234.871726][ T6002] pptp_xmit+0xc34/0x2720 [ 234.876539][ T6002] ppp_input+0x1d6/0xe60 [ 234.881056][ T6002] pppoe_rcv_core+0x1e8/0x760 [ 234.886157][ T6002] sk_backlog_rcv+0x13f/0x420 [ 234.891229][ T6002] __release_sock+0x1d3/0x330 [ 234.896314][ T6002] release_sock+0x6b/0x270 [ 234.901376][ T6002] pppoe_sendmsg+0x15d/0xcb0 [ 234.906594][ T6002] __sock_sendmsg+0x333/0x3d0 [ 234.911659][ T6002] ____sys_sendmsg+0x893/0xd80 [ 234.916963][ T6002] ___sys_sendmsg+0x271/0x3b0 [ 234.921978][ T6002] __sys_sendmmsg+0x2d9/0x7c0 [ 234.927041][ T6002] __x64_sys_sendmmsg+0xc6/0x150 [ 234.932242][ T6002] x64_sys_call+0x21de/0x3e20 [ 234.937401][ T6002] do_syscall_64+0xd9/0x210 [ 234.942240][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.948532][ T6002] [ 234.951003][ T6002] Uninit was created at: [ 234.955714][ T6002] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 234.962654][ T6002] kmalloc_reserve+0x22f/0x4b0 [ 234.968013][ T6002] pskb_expand_head+0x1fc/0x1610 [ 234.973350][ T6002] skb_realloc_headroom+0x152/0x2d0 [ 234.978912][ T6002] pptp_xmit+0x9d4/0x2720 [ 234.983652][ T6002] ppp_input+0x1d6/0xe60 [ 234.988160][ T6002] pppoe_rcv_core+0x1e8/0x760 [ 234.993427][ T6002] sk_backlog_rcv+0x13f/0x420 [ 234.998421][ T6002] __release_sock+0x1d3/0x330 [ 235.003494][ T6002] release_sock+0x6b/0x270 [ 235.008293][ T6002] pppoe_sendmsg+0x15d/0xcb0 [ 235.013377][ T6002] __sock_sendmsg+0x333/0x3d0 [ 235.018336][ T6002] ____sys_sendmsg+0x893/0xd80 [ 235.023579][ T6002] ___sys_sendmsg+0x271/0x3b0 [ 235.028606][ T6002] __sys_sendmmsg+0x2d9/0x7c0 [ 235.033687][ T6002] __x64_sys_sendmmsg+0xc6/0x150 [ 235.038906][ T6002] x64_sys_call+0x21de/0x3e20 [ 235.044049][ T6002] do_syscall_64+0xd9/0x210 [ 235.048839][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.055215][ T6002] [ 235.057830][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.2 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(none) [ 235.069721][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.080343][ T6002] ===================================================== [ 235.087626][ T6002] Disabling lock debugging due to kernel taint [ 235.094359][ T6002] Kernel panic - not syncing: kmsan.panic set ... [ 235.101003][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.1.2 Tainted: G B 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(none) [ 235.114526][ T6002] Tainted: [B]=BAD_PAGE [ 235.118942][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.129492][ T6002] Call Trace: [ 235.132974][ T6002] [ 235.136170][ T6002] __dump_stack+0x26/0x30 [ 235.140885][ T6002] dump_stack_lvl+0x53/0x270 [ 235.145771][ T6002] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.151976][ T6002] dump_stack+0x1e/0x25 [ 235.156517][ T6002] panic+0x4bd/0xd50 [ 235.160855][ T6002] kmsan_report+0x31c/0x320 [ 235.165641][ T6002] ? __msan_warning+0x1b/0x30 [ 235.170709][ T6002] ? pptp_xmit+0xc34/0x2720 [ 235.175556][ T6002] ? ppp_input+0x1d6/0xe60 [ 235.180255][ T6002] ? pppoe_rcv_core+0x1e8/0x760 [ 235.185381][ T6002] ? sk_backlog_rcv+0x13f/0x420 [ 235.190527][ T6002] ? __release_sock+0x1d3/0x330 [ 235.195659][ T6002] ? release_sock+0x6b/0x270 [ 235.200603][ T6002] ? pppoe_sendmsg+0x15d/0xcb0 [ 235.205845][ T6002] ? __sock_sendmsg+0x333/0x3d0 [ 235.210995][ T6002] ? ____sys_sendmsg+0x893/0xd80 [ 235.216291][ T6002] ? ___sys_sendmsg+0x271/0x3b0 [ 235.221411][ T6002] ? __sys_sendmmsg+0x2d9/0x7c0 [ 235.226614][ T6002] ? __x64_sys_sendmmsg+0xc6/0x150 [ 235.232096][ T6002] ? x64_sys_call+0x21de/0x3e20 [ 235.237261][ T6002] ? do_syscall_64+0xd9/0x210 [ 235.242204][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.248731][ T6002] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 235.255433][ T6002] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 235.261938][ T6002] ? kmem_cache_free+0x3ef/0xec0 [ 235.267361][ T6002] ? __kfree_skb+0x20b/0x260 [ 235.272248][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 235.277667][ T6002] __msan_warning+0x1b/0x30 [ 235.282437][ T6002] pptp_xmit+0xc34/0x2720 [ 235.287225][ T6002] ? __pfx_pptp_xmit+0x10/0x10 [ 235.292423][ T6002] ppp_input+0x1d6/0xe60 [ 235.296969][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 235.302396][ T6002] pppoe_rcv_core+0x1e8/0x760 [ 235.307384][ T6002] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 235.313055][ T6002] sk_backlog_rcv+0x13f/0x420 [ 235.318588][ T6002] __release_sock+0x1d3/0x330 [ 235.323595][ T6002] release_sock+0x6b/0x270 [ 235.328353][ T6002] pppoe_sendmsg+0x15d/0xcb0 [ 235.333286][ T6002] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 235.338694][ T6002] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 235.344123][ T6002] __sock_sendmsg+0x333/0x3d0 [ 235.349112][ T6002] ____sys_sendmsg+0x893/0xd80 [ 235.354195][ T6002] ___sys_sendmsg+0x271/0x3b0 [ 235.359169][ T6002] ? __rcu_read_unlock+0x6d/0xd0 [ 235.364543][ T6002] ? __fget_files+0x3b4/0x4a0 [ 235.369522][ T6002] ? __fget_files+0x3b9/0x4a0 [ 235.374674][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 235.380097][ T6002] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 235.386299][ T6002] __sys_sendmmsg+0x2d9/0x7c0 [ 235.391262][ T6002] ? do_futex+0x416/0x480 [ 235.396140][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 235.401600][ T6002] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 235.408306][ T6002] __x64_sys_sendmmsg+0xc6/0x150 [ 235.413627][ T6002] x64_sys_call+0x21de/0x3e20 [ 235.418614][ T6002] do_syscall_64+0xd9/0x210 [ 235.423460][ T6002] ? irqentry_exit+0x16/0x60 [ 235.428382][ T6002] ? clear_bhb_loop+0x40/0x90 [ 235.433424][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.439590][ T6002] RIP: 0033:0x7ff8fab8e9a9 [ 235.444231][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.464295][ T6002] RSP: 002b:00007ff8fba27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 235.472988][ T6002] RAX: ffffffffffffffda RBX: 00007ff8fadb5fa0 RCX: 00007ff8fab8e9a9 [ 235.481260][ T6002] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000004 [ 235.489423][ T6002] RBP: 00007ff8fac10d69 R08: 0000000000000000 R09: 0000000000000000 [ 235.498545][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.506889][ T6002] R13: 0000000000000000 R14: 00007ff8fadb5fa0 R15: 00007fff2a6e26e8 [ 235.515092][ T6002] [ 235.518769][ T6002] Kernel Offset: disabled [ 235.523246][ T6002] Rebooting in 86400 seconds..