last executing test programs: 1.704001436s ago: executing program 3 (id=4): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022d00010000000009040000035883b20009058900000000000009058501"], 0x0) 1.442094096s ago: executing program 1 (id=2): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) sendto$inet(r1, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 677.953573ms ago: executing program 2 (id=3): socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 528.843469ms ago: executing program 1 (id=6): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240080cb) 0s ago: executing program 0 (id=1): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x0, 0xfffffffd}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000dc0)}], 0x2, 0x0, 0x0, 0x900}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 194.185681][ T5793] cgroup: Unknown subsys name 'net' [ 194.319166][ T5793] cgroup: Unknown subsys name 'cpuset' [ 194.335042][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 200.869063][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 206.015687][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.029962][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.050736][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.085251][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.097418][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.106073][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.115866][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.124138][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.134222][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.144982][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.170677][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.183690][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.191943][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.196671][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.202098][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.213421][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.232373][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.244121][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.293237][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.311778][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.332652][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.342330][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.392993][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.423569][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.435593][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.211167][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 208.303307][ T49] Bluetooth: hci1: command tx timeout [ 208.309262][ T5815] Bluetooth: hci0: command tx timeout [ 208.380935][ T49] Bluetooth: hci2: command tx timeout [ 208.397581][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.405432][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.413552][ T5814] bridge_slave_0: entered allmulticast mode [ 208.423783][ T5814] bridge_slave_0: entered promiscuous mode [ 208.442347][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 208.451558][ T49] Bluetooth: hci3: command tx timeout [ 208.465631][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.473422][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.481610][ T5814] bridge_slave_1: entered allmulticast mode [ 208.491417][ T5814] bridge_slave_1: entered promiscuous mode [ 208.681802][ T49] Bluetooth: hci4: command tx timeout [ 208.804856][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 208.844840][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.975911][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.985983][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 209.256872][ T5814] team0: Port device team_slave_0 added [ 209.311588][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 209.354136][ T5814] team0: Port device team_slave_1 added [ 209.604080][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.612607][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.639614][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.683273][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.690690][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.717324][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.143050][ T5814] hsr_slave_0: entered promiscuous mode [ 210.152556][ T5814] hsr_slave_1: entered promiscuous mode [ 210.285044][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.292861][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.301861][ T5809] bridge_slave_0: entered allmulticast mode [ 210.311812][ T5809] bridge_slave_0: entered promiscuous mode [ 210.380675][ T49] Bluetooth: hci1: command tx timeout [ 210.381698][ T5815] Bluetooth: hci0: command tx timeout [ 210.456297][ T5815] Bluetooth: hci2: command tx timeout [ 210.494950][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.504384][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.512241][ T5813] bridge_slave_0: entered allmulticast mode [ 210.522300][ T5813] bridge_slave_0: entered promiscuous mode [ 210.528668][ T5815] Bluetooth: hci3: command tx timeout [ 210.535891][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.545051][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.553030][ T5809] bridge_slave_1: entered allmulticast mode [ 210.562581][ T5809] bridge_slave_1: entered promiscuous mode [ 210.668834][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.676435][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.686233][ T5813] bridge_slave_1: entered allmulticast mode [ 210.697403][ T5813] bridge_slave_1: entered promiscuous mode [ 210.758167][ T5815] Bluetooth: hci4: command tx timeout [ 210.784509][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.792123][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.802588][ T5820] bridge_slave_0: entered allmulticast mode [ 210.812599][ T5820] bridge_slave_0: entered promiscuous mode [ 210.960686][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.968615][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.976313][ T5820] bridge_slave_1: entered allmulticast mode [ 210.986207][ T5820] bridge_slave_1: entered promiscuous mode [ 210.996824][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.004607][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.012826][ T5823] bridge_slave_0: entered allmulticast mode [ 211.022567][ T5823] bridge_slave_0: entered promiscuous mode [ 211.084216][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.152611][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.160597][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.168461][ T5823] bridge_slave_1: entered allmulticast mode [ 211.178169][ T5823] bridge_slave_1: entered promiscuous mode [ 211.199447][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.219910][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.333360][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.493523][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.590840][ T5809] team0: Port device team_slave_0 added [ 211.631376][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.652975][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.682635][ T5813] team0: Port device team_slave_0 added [ 211.698387][ T5809] team0: Port device team_slave_1 added [ 211.713068][ T5813] team0: Port device team_slave_1 added [ 211.825672][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.118742][ T5820] team0: Port device team_slave_0 added [ 212.187716][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.196727][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.223956][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.239254][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.246424][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.273333][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.295431][ T5820] team0: Port device team_slave_1 added [ 212.305559][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.314569][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.341412][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.379882][ T5823] team0: Port device team_slave_0 added [ 212.399609][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.406786][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.433586][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.449839][ T5815] Bluetooth: hci0: command tx timeout [ 212.450283][ T49] Bluetooth: hci1: command tx timeout [ 212.518852][ T49] Bluetooth: hci2: command tx timeout [ 212.585794][ T5823] team0: Port device team_slave_1 added [ 212.595984][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.603336][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.615346][ T49] Bluetooth: hci3: command tx timeout [ 212.629592][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.703373][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.710881][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.737822][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.848384][ T49] Bluetooth: hci4: command tx timeout [ 212.946262][ T5813] hsr_slave_0: entered promiscuous mode [ 212.958626][ T5813] hsr_slave_1: entered promiscuous mode [ 212.967481][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 212.974928][ T5813] Cannot create hsr debugfs directory [ 213.026584][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.034135][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.061234][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.081902][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.089466][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.115866][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.247646][ T5809] hsr_slave_0: entered promiscuous mode [ 213.259292][ T5809] hsr_slave_1: entered promiscuous mode [ 213.269643][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 213.275699][ T5809] Cannot create hsr debugfs directory [ 213.468446][ T5820] hsr_slave_0: entered promiscuous mode [ 213.479452][ T5820] hsr_slave_1: entered promiscuous mode [ 213.488559][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 213.494488][ T5820] Cannot create hsr debugfs directory [ 213.709711][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.793460][ T5823] hsr_slave_0: entered promiscuous mode [ 213.803735][ T5823] hsr_slave_1: entered promiscuous mode [ 213.812882][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 213.819012][ T5823] Cannot create hsr debugfs directory [ 213.904057][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.029929][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.056497][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.518309][ T49] Bluetooth: hci0: command tx timeout [ 214.528619][ T49] Bluetooth: hci1: command tx timeout [ 214.608328][ T49] Bluetooth: hci2: command tx timeout [ 214.690524][ T49] Bluetooth: hci3: command tx timeout [ 214.918536][ T49] Bluetooth: hci4: command tx timeout [ 215.206798][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.282147][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.304383][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.327778][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.490476][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.655926][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.693081][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.721605][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.744982][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.771291][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.796244][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.865511][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.198184][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.240850][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.282184][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.368910][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.390721][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.482199][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.623757][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.631513][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.729140][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.736784][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.063680][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.346613][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.394002][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.493855][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.501563][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.606244][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.613970][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.678281][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.761835][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.769540][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.826147][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.926501][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.934363][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.096276][ T5813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.107359][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.303514][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.320601][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.358732][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.495322][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.570570][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.578538][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.597572][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.605365][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.736384][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.744203][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.895582][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.903460][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.286022][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.298419][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.755074][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.462084][ T5814] veth0_vlan: entered promiscuous mode [ 220.504705][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.637653][ T5814] veth1_vlan: entered promiscuous mode [ 220.895748][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.095834][ T5814] veth0_macvtap: entered promiscuous mode [ 221.196549][ T5814] veth1_macvtap: entered promiscuous mode [ 221.234952][ T5813] veth0_vlan: entered promiscuous mode [ 221.337489][ T5813] veth1_vlan: entered promiscuous mode [ 221.451401][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.561793][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.593184][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.815616][ T84] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.834898][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.870661][ T5813] veth0_macvtap: entered promiscuous mode [ 221.900269][ T84] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.966233][ T84] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.994367][ T5813] veth1_macvtap: entered promiscuous mode [ 222.011594][ T84] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.266349][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.445218][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.453292][ T5809] veth0_vlan: entered promiscuous mode [ 222.522477][ T84] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.574303][ T84] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.620285][ T5809] veth1_vlan: entered promiscuous mode [ 222.652935][ T84] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.683618][ T5823] veth0_vlan: entered promiscuous mode [ 222.733049][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.817362][ T5823] veth1_vlan: entered promiscuous mode [ 223.032471][ T5809] veth0_macvtap: entered promiscuous mode [ 223.137009][ T5809] veth1_macvtap: entered promiscuous mode [ 223.285454][ T5823] veth0_macvtap: entered promiscuous mode [ 223.363094][ T5823] veth1_macvtap: entered promiscuous mode [ 223.402729][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.529427][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.592498][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.692705][ T4660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.753638][ T4660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.788805][ T4660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.818686][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.883288][ T1318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.949222][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.999520][ T4486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.066735][ T4486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.143228][ T4486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.648903][ T5820] veth0_vlan: entered promiscuous mode [ 224.792433][ T5820] veth1_vlan: entered promiscuous mode [ 225.141540][ T5820] veth0_macvtap: entered promiscuous mode [ 225.205381][ T5820] veth1_macvtap: entered promiscuous mode [ 225.377160][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.497239][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.607175][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.684194][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.746560][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.779474][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.254227][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.262573][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.551778][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.560654][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.779509][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.787567][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.989718][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.003352][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.060571][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 231.449077][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.457123][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.781768][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.793018][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.982139][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.992044][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.004337][ T5863] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 232.212202][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.223094][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 232.233498][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 232.244930][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.258373][ T5863] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 232.268081][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.432455][ T5863] usb 4-1: config 0 descriptor?? [ 232.454502][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.463294][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.668481][ T11] usb 4-1: USB disconnect, device number 2 [ 232.928920][ T6002] ===================================================== [ 232.936195][ T6002] BUG: KMSAN: uninit-value in pptp_xmit+0xc9a/0x2780 [ 232.943548][ T6002] pptp_xmit+0xc9a/0x2780 [ 232.948274][ T6002] ppp_input+0x1d9/0xe60 [ 232.952730][ T6002] pppoe_rcv_core+0x166/0x6d0 [ 232.957652][ T6002] sk_backlog_rcv+0x13f/0x420 [ 232.962724][ T6002] __release_sock+0x1d3/0x330 [ 232.967763][ T6002] release_sock+0x6b/0x270 [ 232.972593][ T6002] pppoe_sendmsg+0x15d/0xcb0 [ 232.977519][ T6002] __sock_sendmsg+0x330/0x3d0 [ 232.982612][ T6002] ____sys_sendmsg+0x893/0xd80 [ 232.987677][ T6002] ___sys_sendmsg+0x271/0x3b0 [ 232.992739][ T6002] __sys_sendmmsg+0x2d9/0x7c0 [ 232.997775][ T6002] __x64_sys_sendmmsg+0xc6/0x150 [ 233.003125][ T6002] x64_sys_call+0x21de/0x3e20 [ 233.008209][ T6002] do_syscall_64+0xd9/0x210 [ 233.012892][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.019228][ T6002] [ 233.021654][ T6002] Uninit was created at: [ 233.026324][ T6002] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 233.033287][ T6002] kmalloc_reserve+0x22f/0x4b0 [ 233.038442][ T6002] pskb_expand_head+0x1fc/0x1610 [ 233.043633][ T6002] skb_realloc_headroom+0x152/0x2d0 [ 233.049254][ T6002] pptp_xmit+0xa0d/0x2780 [ 233.053869][ T6002] ppp_input+0x1d9/0xe60 [ 233.058607][ T6002] pppoe_rcv_core+0x166/0x6d0 [ 233.063505][ T6002] sk_backlog_rcv+0x13f/0x420 [ 233.068574][ T6002] __release_sock+0x1d3/0x330 [ 233.073519][ T6002] release_sock+0x6b/0x270 [ 233.078314][ T6002] pppoe_sendmsg+0x15d/0xcb0 [ 233.083165][ T6002] __sock_sendmsg+0x330/0x3d0 [ 233.088239][ T6002] ____sys_sendmsg+0x893/0xd80 [ 233.093344][ T6002] ___sys_sendmsg+0x271/0x3b0 [ 233.098537][ T6002] __sys_sendmmsg+0x2d9/0x7c0 [ 233.103464][ T6002] __x64_sys_sendmmsg+0xc6/0x150 [ 233.108821][ T6002] x64_sys_call+0x21de/0x3e20 [ 233.113751][ T6002] do_syscall_64+0xd9/0x210 [ 233.118622][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.124747][ T6002] [ 233.127288][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz.1.6 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(none) [ 233.139148][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.149570][ T6002] ===================================================== [ 233.156801][ T6002] Disabling lock debugging due to kernel taint [ 233.163472][ T6002] Kernel panic - not syncing: kmsan.panic set ... [ 233.170092][ T6002] CPU: 1 UID: 0 PID: 6002 Comm: syz.1.6 Tainted: G B 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(none) [ 233.183460][ T6002] Tainted: [B]=BAD_PAGE [ 233.187836][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.198076][ T6002] Call Trace: [ 233.201587][ T6002] [ 233.204635][ T6002] __dump_stack+0x26/0x30 [ 233.209168][ T6002] dump_stack_lvl+0x53/0x270 [ 233.213953][ T6002] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.219969][ T6002] dump_stack+0x1e/0x25 [ 233.224459][ T6002] vpanic+0x361/0xbc0 [ 233.228675][ T6002] panic+0x15d/0x160 [ 233.232834][ T6002] kmsan_report+0x31c/0x320 [ 233.237537][ T6002] ? __msan_warning+0x1b/0x30 [ 233.242380][ T6002] ? pptp_xmit+0xc9a/0x2780 [ 233.247102][ T6002] ? ppp_input+0x1d9/0xe60 [ 233.251712][ T6002] ? pppoe_rcv_core+0x166/0x6d0 [ 233.256838][ T6002] ? sk_backlog_rcv+0x13f/0x420 [ 233.261869][ T6002] ? __release_sock+0x1d3/0x330 [ 233.267201][ T6002] ? release_sock+0x6b/0x270 [ 233.272007][ T6002] ? pppoe_sendmsg+0x15d/0xcb0 [ 233.277203][ T6002] ? __sock_sendmsg+0x330/0x3d0 [ 233.282217][ T6002] ? ____sys_sendmsg+0x893/0xd80 [ 233.287357][ T6002] ? ___sys_sendmsg+0x271/0x3b0 [ 233.292401][ T6002] ? __sys_sendmmsg+0x2d9/0x7c0 [ 233.297452][ T6002] ? __x64_sys_sendmmsg+0xc6/0x150 [ 233.302761][ T6002] ? x64_sys_call+0x21de/0x3e20 [ 233.307819][ T6002] ? do_syscall_64+0xd9/0x210 [ 233.312721][ T6002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.319062][ T6002] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 233.325642][ T6002] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 233.331987][ T6002] ? kmem_cache_free+0x3ef/0xec0 [ 233.337140][ T6002] ? __kfree_skb+0x20b/0x260 [ 233.342054][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 233.347448][ T6002] __msan_warning+0x1b/0x30 [ 233.352113][ T6002] pptp_xmit+0xc9a/0x2780 [ 233.356697][ T6002] ? __pfx_pptp_xmit+0x10/0x10 [ 233.361657][ T6002] ppp_input+0x1d9/0xe60 [ 233.366120][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 233.371430][ T6002] pppoe_rcv_core+0x166/0x6d0 [ 233.376618][ T6002] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 233.382027][ T6002] sk_backlog_rcv+0x13f/0x420 [ 233.386931][ T6002] __release_sock+0x1d3/0x330 [ 233.391883][ T6002] release_sock+0x6b/0x270 [ 233.396501][ T6002] pppoe_sendmsg+0x15d/0xcb0 [ 233.401435][ T6002] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 233.406840][ T6002] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 233.412257][ T6002] __sock_sendmsg+0x330/0x3d0 [ 233.417115][ T6002] ____sys_sendmsg+0x893/0xd80 [ 233.422480][ T6002] ___sys_sendmsg+0x271/0x3b0 [ 233.427685][ T6002] ? __rcu_read_unlock+0x6d/0xd0 [ 233.432822][ T6002] ? __fget_files+0x3b4/0x4a0 [ 233.437707][ T6002] ? __fget_files+0x3b9/0x4a0 [ 233.442600][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 233.447916][ T6002] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 233.453947][ T6002] __sys_sendmmsg+0x2d9/0x7c0 [ 233.458867][ T6002] ? do_futex+0x416/0x480 [ 233.463392][ T6002] ? kmsan_get_metadata+0xfb/0x160 [ 233.468717][ T6002] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 233.475314][ T6002] __x64_sys_sendmmsg+0xc6/0x150 [ 233.480665][ T6002] x64_sys_call+0x21de/0x3e20 [ 233.485558][ T6002] do_syscall_64+0xd9/0x210 [ 233.490208][ T6002] ? irqentry_exit+0x16/0x60 [ 233.495077][ T6002] ? clear_bhb_loop+0x40/0x90 [ 233.499921][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.506005][ T6002] RIP: 0033:0x7f6e9118eb69 [ 233.510653][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.530722][ T6002] RSP: 002b:00007f6e920cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 233.539361][ T6002] RAX: ffffffffffffffda RBX: 00007f6e913b5fa0 RCX: 00007f6e9118eb69 [ 233.547492][ T6002] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000007 [ 233.555604][ T6002] RBP: 00007f6e91211df1 R08: 0000000000000000 R09: 0000000000000000 [ 233.563791][ T6002] R10: 00000000240080cb R11: 0000000000000246 R12: 0000000000000000 [ 233.571896][ T6002] R13: 0000000000000000 R14: 00007f6e913b5fa0 R15: 00007ffec486aeb8 [ 233.580101][ T6002] [ 233.583595][ T6002] Kernel Offset: disabled [ 233.588701][ T6002] Rebooting in 86400 seconds..