last executing test programs: 10.100382216s ago: executing program 0 (id=12): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 9.250334385s ago: executing program 0 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 9.169135493s ago: executing program 1 (id=16): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)) bind$nfc_llcp(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x44004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x20044000) sendmsg$NFT_BATCH(r5, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, 0x0, 0x20040014) 7.659332377s ago: executing program 0 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x14102}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 7.581820603s ago: executing program 1 (id=19): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) sendto$inet(r1, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 7.294333368s ago: executing program 4 (id=20): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6.333917026s ago: executing program 3 (id=21): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}}, 0x24}}, 0x4080) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x300100, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000080)={r6, 0x3, 0x6, 0x3, &(0x7f0000000380)=[{0xbc3, 0x8d, 0x10d3, 0x776}, {0x4, 0x200, 0x2}, {0x3, 0x80, 0x10, 0x52be}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x0, 0x0, &(0x7f0000000200)}) socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.303861303s ago: executing program 4 (id=22): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @mcast1, 0x1000}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) rt_sigprocmask(0x3, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 6.24975905s ago: executing program 2 (id=23): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 5.386243025s ago: executing program 2 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc9f844e9d96ae5d1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 5.318355195s ago: executing program 3 (id=25): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) 5.023944008s ago: executing program 1 (id=26): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 3.534125017s ago: executing program 2 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x21dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000800) 3.533911498s ago: executing program 3 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x5, r1, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r2, &(0x7f0000001d40)=[{&(0x7f00000002c0)="3985", 0x2}], 0x1) 2.905498792s ago: executing program 1 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x32}, @sack_perm, @window={0x3, 0x3, 0x401}, @sack_perm, @timestamp, @sack_perm, @mss={0x2, 0x3}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 2.463929308s ago: executing program 4 (id=30): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) sendmmsg$inet(r0, &(0x7f0000005840)=[{{&(0x7f0000000780)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002400)=[{&(0x7f0000000880)="20b60e91", 0x4}], 0x1, &(0x7f0000002480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x1, 0x24000044) 2.101488823s ago: executing program 3 (id=31): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140), 0x8) 1.910164107s ago: executing program 0 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000004000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) 1.85805901s ago: executing program 2 (id=33): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) 1.602132571s ago: executing program 4 (id=34): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="c6831ed8838056e08cc5b459bfef3e6fed75d2901ee87b68bbb4a231d4871bc6e77e9245dcb9521274e052fde08c283e42b57cb57e73461c25ac7db970eac952908e2bad01079f62627fcd5eabb19db5738dde27fa95765d09a66d1110d93c0d9e75d48bf907e7c72867f0c90581894e8d01788913b71b98becde4fc5200378b7c6bc5af0e1d3aa69ea60f7264bdfd21af827e2d5ce29efbffa7715a5ca9d96985dbe6debb52c4f8b45ea0", 0xab}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}], 0x1}, 0x0) readv(r1, &(0x7f0000002100)=[{0x0}], 0x1) 1.194745561s ago: executing program 3 (id=35): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}}, 0x24}}, 0x4080) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x300100, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000080)={r6, 0x3, 0x6, 0x3, &(0x7f0000000380)=[{0xbc3, 0x8d, 0x10d3, 0x776}, {0x4, 0x200, 0x2}, {0x3, 0x80, 0x10, 0x52be}]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x0, 0x0, &(0x7f0000000200)}) socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 1.170686104s ago: executing program 1 (id=36): syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12160, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0xa, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/189, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=""/4092, 0x60000}) connect$vsock_stream(r2, 0x0, 0x0) 1.105160936s ago: executing program 2 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000007c00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x24}, 0x94) 958.289546ms ago: executing program 0 (id=38): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x2c}}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 771.954899ms ago: executing program 4 (id=39): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 361.785425ms ago: executing program 2 (id=40): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20004894) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) 309.949309ms ago: executing program 3 (id=41): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 162.133868ms ago: executing program 1 (id=42): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000007000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000962667e87b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 23.211156ms ago: executing program 0 (id=43): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x21dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000800) 0s ago: executing program 4 (id=44): socket$inet6_icmp(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) kernel console output (not intermixed with test programs): [ 146.329202][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.349296][ T5227] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 147.800253][ T5311] ssh-keygen (5311) used greatest stack depth: 1448 bytes left Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. syzkaller login: [ 194.098782][ T5553] cgroup: Unknown subsys name 'net' [ 194.235221][ T5553] cgroup: Unknown subsys name 'cpuset' [ 194.250049][ T5553] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.276811][ T5553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 206.399072][ T5572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.411208][ T5572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.421350][ T5572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.441996][ T5572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.462256][ T5572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.498879][ T5578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.516031][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.550100][ T5578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.554776][ T5586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.559816][ T5578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.572917][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.581529][ T5588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.584053][ T5586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.594130][ T5588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.605812][ T5586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.606007][ T5588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.619677][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.623644][ T5588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.637222][ T5588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.638944][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.648480][ T5588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.673946][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.689921][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.708092][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.727138][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.540779][ T5582] Bluetooth: hci0: command tx timeout [ 208.701069][ T5582] Bluetooth: hci2: command tx timeout [ 208.782215][ T5582] Bluetooth: hci4: command tx timeout [ 208.783511][ T48] Bluetooth: hci3: command tx timeout [ 208.787922][ T5581] Bluetooth: hci1: command tx timeout [ 209.910838][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.921039][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.620912][ T5581] Bluetooth: hci0: command tx timeout [ 210.780861][ T5581] Bluetooth: hci2: command tx timeout [ 210.864987][ T5581] Bluetooth: hci3: command tx timeout [ 210.865141][ T5582] Bluetooth: hci1: command tx timeout [ 210.870884][ T48] Bluetooth: hci4: command tx timeout [ 212.287577][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.311085][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.320903][ T5571] bridge_slave_0: entered allmulticast mode [ 212.344972][ T5571] bridge_slave_0: entered promiscuous mode [ 212.442845][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.453208][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.462530][ T5571] bridge_slave_1: entered allmulticast mode [ 212.473895][ T5571] bridge_slave_1: entered promiscuous mode [ 212.489796][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.498972][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.507852][ T5585] bridge_slave_0: entered allmulticast mode [ 212.519735][ T5585] bridge_slave_0: entered promiscuous mode [ 212.654937][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.663362][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.674387][ T5585] bridge_slave_1: entered allmulticast mode [ 212.683659][ T5585] bridge_slave_1: entered promiscuous mode [ 212.701254][ T5581] Bluetooth: hci0: command tx timeout [ 212.860917][ T5581] Bluetooth: hci2: command tx timeout [ 212.941653][ T5581] Bluetooth: hci3: command tx timeout [ 212.947535][ T48] Bluetooth: hci1: command tx timeout [ 212.947624][ T5582] Bluetooth: hci4: command tx timeout [ 212.982146][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.990012][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.999550][ T5577] bridge_slave_0: entered allmulticast mode [ 213.008766][ T5577] bridge_slave_0: entered promiscuous mode [ 213.056041][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.103590][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.113528][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.121837][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.129361][ T5577] bridge_slave_1: entered allmulticast mode [ 213.138641][ T5577] bridge_slave_1: entered promiscuous mode [ 213.150025][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.158190][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.166281][ T5575] bridge_slave_0: entered allmulticast mode [ 213.175036][ T5575] bridge_slave_0: entered promiscuous mode [ 213.195831][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.243407][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.307358][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.315135][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.323444][ T5575] bridge_slave_1: entered allmulticast mode [ 213.332552][ T5575] bridge_slave_1: entered promiscuous mode [ 213.373803][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.381578][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.389234][ T5576] bridge_slave_0: entered allmulticast mode [ 213.399106][ T5576] bridge_slave_0: entered promiscuous mode [ 213.527710][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.535909][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.543772][ T5576] bridge_slave_1: entered allmulticast mode [ 213.552770][ T5576] bridge_slave_1: entered promiscuous mode [ 213.571560][ T5585] team0: Port device team_slave_0 added [ 213.588137][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.633893][ T5571] team0: Port device team_slave_0 added [ 213.686316][ T5585] team0: Port device team_slave_1 added [ 213.700161][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.746074][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.764380][ T5571] team0: Port device team_slave_1 added [ 213.862115][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.908991][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.955510][ T5577] team0: Port device team_slave_0 added [ 214.029693][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.042372][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.049528][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.076265][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.099031][ T5577] team0: Port device team_slave_1 added [ 214.133534][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.141105][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.168028][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.212028][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.219224][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.246038][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.293386][ T5575] team0: Port device team_slave_0 added [ 214.301883][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.309010][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.335371][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.429925][ T5575] team0: Port device team_slave_1 added [ 214.460375][ T5576] team0: Port device team_slave_0 added [ 214.474368][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.481746][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.508458][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.564060][ T5576] team0: Port device team_slave_1 added [ 214.576541][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.583744][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.610302][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.656332][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.663603][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.689999][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.780933][ T5582] Bluetooth: hci0: command tx timeout [ 214.823773][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.831003][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.857620][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.940897][ T5582] Bluetooth: hci2: command tx timeout [ 214.978492][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.985688][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.012368][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.023413][ T5582] Bluetooth: hci1: command tx timeout [ 215.023488][ T48] Bluetooth: hci3: command tx timeout [ 215.034760][ T48] Bluetooth: hci4: command tx timeout [ 215.049081][ T5585] hsr_slave_0: entered promiscuous mode [ 215.058350][ T5585] hsr_slave_1: entered promiscuous mode [ 215.086951][ T5571] hsr_slave_0: entered promiscuous mode [ 215.095928][ T5571] hsr_slave_1: entered promiscuous mode [ 215.105067][ T5571] debugfs: 'hsr0' already exists in 'hsr' [ 215.111120][ T5571] Cannot create hsr debugfs directory [ 215.124591][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.132208][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.158650][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.386660][ T5577] hsr_slave_0: entered promiscuous mode [ 215.395800][ T5577] hsr_slave_1: entered promiscuous mode [ 215.404328][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 215.410225][ T5577] Cannot create hsr debugfs directory [ 215.537839][ T5575] hsr_slave_0: entered promiscuous mode [ 215.547180][ T5575] hsr_slave_1: entered promiscuous mode [ 215.555826][ T5575] debugfs: 'hsr0' already exists in 'hsr' [ 215.561781][ T5575] Cannot create hsr debugfs directory [ 215.678200][ T5576] hsr_slave_0: entered promiscuous mode [ 215.687233][ T5576] hsr_slave_1: entered promiscuous mode [ 215.695760][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 215.701731][ T5576] Cannot create hsr debugfs directory [ 217.043523][ T5571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.072820][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.086340][ T5571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.105873][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.118508][ T5571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.138043][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.165209][ T5571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.185310][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.295936][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.337612][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.348707][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.369080][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.396728][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.419124][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.448767][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.468102][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.642514][ T5577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.664493][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.676155][ T5577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.696288][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.706797][ T5577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.730447][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.762664][ T5577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.780333][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.075886][ T5575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.096784][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.125155][ T5575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.148728][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.190248][ T5575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.214276][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.267704][ T5575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.292682][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.649251][ T5576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.670343][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.703770][ T5576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.730110][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.764507][ T5576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.789329][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.823116][ T5576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.851159][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.956326][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.216915][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.299118][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.363197][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.453162][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.460729][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.503528][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.598409][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.606097][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.625408][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.633158][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.736192][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.760196][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.767793][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.855674][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.863100][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.995438][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.002897][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.108559][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.288003][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.331710][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.468943][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.476393][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.555906][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.563536][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.676440][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.925134][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.932836][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.205515][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.213303][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.821030][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.968321][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.122250][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.525838][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.863192][ T5571] veth0_vlan: entered promiscuous mode [ 225.933780][ T5585] veth0_vlan: entered promiscuous mode [ 226.001967][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.137860][ T5571] veth1_vlan: entered promiscuous mode [ 226.202157][ T5585] veth1_vlan: entered promiscuous mode [ 226.246117][ T5577] veth0_vlan: entered promiscuous mode [ 226.445490][ T5575] veth0_vlan: entered promiscuous mode [ 226.512540][ T5577] veth1_vlan: entered promiscuous mode [ 226.609465][ T5575] veth1_vlan: entered promiscuous mode [ 226.868726][ T5585] veth0_macvtap: entered promiscuous mode [ 226.956202][ T5571] veth0_macvtap: entered promiscuous mode [ 226.977476][ T5585] veth1_macvtap: entered promiscuous mode [ 227.054058][ T5571] veth1_macvtap: entered promiscuous mode [ 227.081527][ T5577] veth0_macvtap: entered promiscuous mode [ 227.178754][ T5577] veth1_macvtap: entered promiscuous mode [ 227.268270][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.301779][ T5575] veth0_macvtap: entered promiscuous mode [ 227.346018][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.359771][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.444994][ T5575] veth1_macvtap: entered promiscuous mode [ 227.472193][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.508596][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.538612][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.547962][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.594819][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.604500][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.714506][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.728016][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.738928][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.798354][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.818509][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.937968][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.970962][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.033865][ T5576] veth0_vlan: entered promiscuous mode [ 228.067302][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.092495][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.174286][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.328467][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.413684][ T5576] veth1_vlan: entered promiscuous mode [ 228.527212][ T1110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.566966][ T1110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.633977][ T1110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.667921][ T1110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.237549][ T5576] veth0_macvtap: entered promiscuous mode [ 229.322620][ T5576] veth1_macvtap: entered promiscuous mode [ 229.577771][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.788437][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.998525][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.033274][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.067916][ T96] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.108702][ T96] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.118818][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.150277][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.381303][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.410756][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.578291][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.617266][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.808791][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.843060][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.000722][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.033262][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.200231][ T5585] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 236.285491][ T5697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.319167][ T5697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.716672][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.763269][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.251176][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.301164][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.436609][ T5838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 237.489422][ T5838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 238.025702][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.075911][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.212091][ T5840] 8021q: VLANs not supported on vcan0 [ 238.257856][ T5843] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 238.770394][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.850372][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.026758][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 239.067642][ T5851] bond0: option lp_interval: invalid value (0) [ 239.130770][ T5851] bond0: option lp_interval: allowed values 1 - 2147483647 [ 239.914323][ T5858] trusted_key: syz.2.11 sent an empty control message without MSG_MORE. [ 240.459894][ T5864] hsr0: entered promiscuous mode [ 240.744462][ T5864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 240.833103][ T5677] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 241.059162][ T5677] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 241.108015][ T5870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 241.141549][ T5677] usb 4-1: config 0 has no interface number 0 [ 241.178895][ T5677] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 241.189705][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.198266][ T5677] usb 4-1: Product: syz [ 241.203553][ T5677] usb 4-1: Manufacturer: syz [ 241.208455][ T5677] usb 4-1: SerialNumber: syz [ 241.227346][ T5861] hsr0: left promiscuous mode [ 241.235481][ T5677] usb 4-1: config 0 descriptor?? [ 241.524012][ T5677] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 241.645207][ T5677] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 241.712076][ T5677] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 241.782320][ T5677] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 241.932030][ T5677] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 242.072812][ T5677] usb 4-1: USB disconnect, device number 2 [ 242.208717][ T5677] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 242.264263][ T5677] keyspan 4-1:0.133: device disconnected [ 249.868001][ T5944] ===================================================== [ 249.875594][ T5944] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 249.883230][ T5944] batadv_get_vid+0x2ce/0x3b0 [ 249.888196][ T5944] batadv_interface_tx+0x2e8/0x1dc0 [ 249.893821][ T5944] dev_hard_start_xmit+0x22f/0xa80 [ 249.899336][ T5944] __dev_queue_xmit+0x2990/0x5a00 [ 249.904712][ T5944] __bpf_redirect+0x162e/0x1760 [ 249.909798][ T5944] bpf_clone_redirect+0x4a6/0x6c0 [ 249.915180][ T5944] ___bpf_prog_run+0x13e8/0xea90 [ 249.920393][ T5944] __bpf_prog_run32+0xc2/0xf0 [ 249.925401][ T5944] bpf_test_run+0x846/0xdf0 [ 249.930138][ T5944] bpf_prog_test_run_skb+0x2988/0x35f0 [ 249.935972][ T5944] bpf_prog_test_run+0x5bb/0x9f0 [ 249.941278][ T5944] __sys_bpf+0x925/0xee0 [ 249.945744][ T5944] __x64_sys_bpf+0xa4/0xf0 [ 249.950380][ T5944] x64_sys_call+0x13d0/0x3ea0 [ 249.955415][ T5944] do_syscall_64+0x134/0xf80 [ 249.960228][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.966503][ T5944] [ 249.968925][ T5944] Uninit was created at: [ 249.973576][ T5944] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 249.979837][ T5944] pskb_expand_head+0x2f3/0x1a40 [ 249.985157][ T5944] skb_ensure_writable+0x44e/0x510 [ 249.990735][ T5944] bpf_clone_redirect+0x301/0x6c0 [ 249.996037][ T5944] ___bpf_prog_run+0x13e8/0xea90 [ 250.001498][ T5944] __bpf_prog_run32+0xc2/0xf0 [ 250.006412][ T5944] bpf_test_run+0x846/0xdf0 [ 250.011355][ T5944] bpf_prog_test_run_skb+0x2988/0x35f0 [ 250.017146][ T5944] bpf_prog_test_run+0x5bb/0x9f0 [ 250.022515][ T5944] __sys_bpf+0x925/0xee0 [ 250.026980][ T5944] __x64_sys_bpf+0xa4/0xf0 [ 250.031779][ T5944] x64_sys_call+0x13d0/0x3ea0 [ 250.036689][ T5944] do_syscall_64+0x134/0xf80 [ 250.041701][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.047830][ T5944] [ 250.050272][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT(full) [ 250.059825][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.070259][ T5944] ===================================================== [ 250.077425][ T5944] Disabling lock debugging due to kernel taint [ 250.083892][ T5944] Kernel panic - not syncing: kmsan.panic set ... [ 250.090556][ T5944] CPU: 0 UID: 0 PID: 5944 Comm: syz.3.41 Tainted: G B syzkaller #0 PREEMPT(full) [ 250.101477][ T5944] Tainted: [B]=BAD_PAGE [ 250.105755][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.116007][ T5944] Call Trace: [ 250.119425][ T5944] [ 250.122483][ T5944] __dump_stack+0x26/0x30 [ 250.127033][ T5944] dump_stack_lvl+0x50/0x1c0 [ 250.131845][ T5944] ? dump_stack+0x12/0x25 [ 250.136402][ T5944] dump_stack+0x1e/0x25 [ 250.140763][ T5944] vpanic+0x7b4/0x1430 [ 250.145080][ T5944] panic+0x15d/0x160 [ 250.149244][ T5944] kmsan_report+0x31a/0x320 [ 250.153971][ T5944] ? __msan_warning+0x1b/0x30 [ 250.158852][ T5944] ? batadv_get_vid+0x2ce/0x3b0 [ 250.163894][ T5944] ? batadv_interface_tx+0x2e8/0x1dc0 [ 250.169476][ T5944] ? dev_hard_start_xmit+0x22f/0xa80 [ 250.174976][ T5944] ? __dev_queue_xmit+0x2990/0x5a00 [ 250.180403][ T5944] ? __bpf_redirect+0x162e/0x1760 [ 250.185655][ T5944] ? bpf_clone_redirect+0x4a6/0x6c0 [ 250.191092][ T5944] ? ___bpf_prog_run+0x13e8/0xea90 [ 250.196430][ T5944] ? __bpf_prog_run32+0xc2/0xf0 [ 250.201498][ T5944] ? bpf_test_run+0x846/0xdf0 [ 250.206482][ T5944] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 250.212352][ T5944] ? bpf_prog_test_run+0x5bb/0x9f0 [ 250.217691][ T5944] ? __sys_bpf+0x925/0xee0 [ 250.222321][ T5944] ? __x64_sys_bpf+0xa4/0xf0 [ 250.227109][ T5944] ? x64_sys_call+0x13d0/0x3ea0 [ 250.232178][ T5944] ? do_syscall_64+0x134/0xf80 [ 250.237154][ T5944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.243435][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.248771][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.254114][ T5944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.260165][ T5944] ? __pfx_batadv_interface_tx+0x1/0x10 [ 250.265936][ T5944] ? filter_irq_stacks+0x49/0x190 [ 250.271146][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.276490][ T5944] __msan_warning+0x1b/0x30 [ 250.281193][ T5944] batadv_get_vid+0x2ce/0x3b0 [ 250.286061][ T5944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.292128][ T5944] batadv_interface_tx+0x2e8/0x1dc0 [ 250.297540][ T5944] ? kmsan_report+0x2a0/0x320 [ 250.302460][ T5944] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.309086][ T5944] ? __pfx_batadv_interface_tx+0x10/0x10 [ 250.314956][ T5944] dev_hard_start_xmit+0x22f/0xa80 [ 250.320321][ T5944] __dev_queue_xmit+0x2990/0x5a00 [ 250.325550][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.330913][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.336284][ T5944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.342331][ T5944] ? __dev_queue_xmit+0x2d4/0x5a00 [ 250.347646][ T5944] ? pskb_expand_head+0x164b/0x1a40 [ 250.353138][ T5944] __bpf_redirect+0x162e/0x1760 [ 250.358217][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.363573][ T5944] bpf_clone_redirect+0x4a6/0x6c0 [ 250.368920][ T5944] ___bpf_prog_run+0x13e8/0xea90 [ 250.374164][ T5944] __bpf_prog_run32+0xc2/0xf0 [ 250.379065][ T5944] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.385655][ T5944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.391717][ T5944] ? __pfx___bpf_prog_run32+0x10/0x10 [ 250.397332][ T5944] ? __pfx___bpf_prog_run32+0x10/0x10 [ 250.403023][ T5944] bpf_test_run+0x846/0xdf0 [ 250.407784][ T5944] ? csum_partial+0x424/0x480 [ 250.412653][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.418022][ T5944] ? bpf_test_run+0x2f4/0xdf0 [ 250.422970][ T5944] bpf_prog_test_run_skb+0x2988/0x35f0 [ 250.428674][ T5944] ? futex_unqueue+0x22d/0x2c0 [ 250.433683][ T5944] ? kmsan_get_metadata+0xf1/0x160 [ 250.439029][ T5944] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.445094][ T5944] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.451693][ T5944] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 250.457739][ T5944] bpf_prog_test_run+0x5bb/0x9f0 [ 250.462939][ T5944] __sys_bpf+0x925/0xee0 [ 250.467458][ T5944] __x64_sys_bpf+0xa4/0xf0 [ 250.472185][ T5944] x64_sys_call+0x13d0/0x3ea0 [ 250.477085][ T5944] do_syscall_64+0x134/0xf80 [ 250.481929][ T5944] ? clear_bhb_loop+0x50/0xa0 [ 250.486833][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.492936][ T5944] RIP: 0033:0x7f4586b9ce59 [ 250.497509][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.517319][ T5944] RSP: 002b:00007f4584df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.525928][ T5944] RAX: ffffffffffffffda RBX: 00007f4586e15fa0 RCX: 00007f4586b9ce59 [ 250.534068][ T5944] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 250.542204][ T5944] RBP: 00007f4586c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 250.550319][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.558420][ T5944] R13: 00007f4586e16038 R14: 00007f4586e15fa0 R15: 00007fffc9392ca8 [ 250.566600][ T5944] [ 250.569926][ T5944] Kernel Offset: disabled [ 250.574327][ T5944] Rebooting in 86400 seconds..