last executing test programs: 2.389829693s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x33}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.753503102s ago: executing program 0 (id=6): setns(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 956.567433ms ago: executing program 0 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_TUPDATE={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0xd}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_LIMIT={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0xffff}, @TCA_PIE_BYTEMODE={0xffffffffffffffa5}]}}]}, 0x60}}, 0x0) 863.512046ms ago: executing program 1 (id=2): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c000180f5ff0040fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 322.113524ms ago: executing program 1 (id=8): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)="5cdd30", 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000340)={0x0, 0x7735, 0x8, 0x201, 0x352}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 241.685745ms ago: executing program 0 (id=9): socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x41, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='vegas', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=4): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 146.742642][ T5755] cgroup: Unknown subsys name 'net' [ 146.895270][ T5755] cgroup: Unknown subsys name 'cpuset' [ 146.916421][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 152.339137][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 157.899747][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.909266][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.929182][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.930863][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.949387][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.960800][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.987450][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.999115][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.012859][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.024242][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.067273][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.087761][ T5071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.097508][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.101616][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.110237][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.114428][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.122498][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.138232][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.145978][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.153094][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.157028][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.170554][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.179755][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.228367][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.240706][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.179441][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 159.540179][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 159.833098][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 159.921782][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.929600][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.937606][ T5775] bridge_slave_0: entered allmulticast mode [ 159.947049][ T5775] bridge_slave_0: entered promiscuous mode [ 159.962042][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.969830][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.978535][ T5775] bridge_slave_1: entered allmulticast mode [ 159.988852][ T5775] bridge_slave_1: entered promiscuous mode [ 160.007088][ T5778] Bluetooth: hci0: command tx timeout [ 160.087110][ T5778] Bluetooth: hci1: command tx timeout [ 160.127727][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 160.176995][ T5778] Bluetooth: hci3: command tx timeout [ 160.220225][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 160.264560][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.285240][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.327192][ T5778] Bluetooth: hci2: command tx timeout [ 160.327247][ T5780] Bluetooth: hci4: command tx timeout [ 160.576522][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.584489][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.593500][ T5783] bridge_slave_0: entered allmulticast mode [ 160.604894][ T5783] bridge_slave_0: entered promiscuous mode [ 160.637280][ T5775] team0: Port device team_slave_0 added [ 160.680644][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.688797][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.696302][ T5783] bridge_slave_1: entered allmulticast mode [ 160.707996][ T5783] bridge_slave_1: entered promiscuous mode [ 160.728431][ T5775] team0: Port device team_slave_1 added [ 160.827086][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.847285][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.854762][ T5776] bridge_slave_0: entered allmulticast mode [ 160.876353][ T5776] bridge_slave_0: entered promiscuous mode [ 160.947887][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.955506][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.964604][ T5776] bridge_slave_1: entered allmulticast mode [ 160.974652][ T5776] bridge_slave_1: entered promiscuous mode [ 161.028357][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.040056][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.048630][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.074819][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.161250][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.172569][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.179878][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.206113][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.255505][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.334085][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.341620][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.349294][ T5785] bridge_slave_0: entered allmulticast mode [ 161.357419][ T5785] bridge_slave_0: entered promiscuous mode [ 161.374825][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.384410][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.391968][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.399613][ T5786] bridge_slave_0: entered allmulticast mode [ 161.408357][ T5786] bridge_slave_0: entered promiscuous mode [ 161.452554][ T5783] team0: Port device team_slave_0 added [ 161.458915][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.466329][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.474153][ T5785] bridge_slave_1: entered allmulticast mode [ 161.482763][ T5785] bridge_slave_1: entered promiscuous mode [ 161.514073][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.521839][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.529438][ T5786] bridge_slave_1: entered allmulticast mode [ 161.537902][ T5786] bridge_slave_1: entered promiscuous mode [ 161.556758][ T5783] team0: Port device team_slave_1 added [ 161.791915][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.811114][ T5776] team0: Port device team_slave_0 added [ 161.866925][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.874004][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.900329][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.919462][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.957716][ T5776] team0: Port device team_slave_1 added [ 161.970741][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.992721][ T5775] hsr_slave_0: entered promiscuous mode [ 162.001007][ T5775] hsr_slave_1: entered promiscuous mode [ 162.012109][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.019233][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.045808][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.087051][ T5778] Bluetooth: hci0: command tx timeout [ 162.112207][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.167140][ T5778] Bluetooth: hci1: command tx timeout [ 162.176469][ T5785] team0: Port device team_slave_0 added [ 162.239633][ T5786] team0: Port device team_slave_0 added [ 162.247344][ T5778] Bluetooth: hci3: command tx timeout [ 162.256672][ T5785] team0: Port device team_slave_1 added [ 162.265080][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.272191][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.298403][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.361327][ T5786] team0: Port device team_slave_1 added [ 162.392294][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.399409][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.407136][ T5778] Bluetooth: hci2: command tx timeout [ 162.426169][ T5780] Bluetooth: hci4: command tx timeout [ 162.437077][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.623244][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.630819][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.657622][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.673881][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.681166][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.707513][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.745475][ T5783] hsr_slave_0: entered promiscuous mode [ 162.753830][ T5783] hsr_slave_1: entered promiscuous mode [ 162.761745][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 162.767622][ T5783] Cannot create hsr debugfs directory [ 162.775609][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.782806][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.809393][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.825683][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.833755][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.860020][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.036210][ T5776] hsr_slave_0: entered promiscuous mode [ 163.046451][ T5776] hsr_slave_1: entered promiscuous mode [ 163.055835][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 163.062377][ T5776] Cannot create hsr debugfs directory [ 163.366202][ T5785] hsr_slave_0: entered promiscuous mode [ 163.375889][ T5785] hsr_slave_1: entered promiscuous mode [ 163.383901][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 163.389908][ T5785] Cannot create hsr debugfs directory [ 163.461548][ T5786] hsr_slave_0: entered promiscuous mode [ 163.469731][ T5786] hsr_slave_1: entered promiscuous mode [ 163.477686][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 163.483538][ T5786] Cannot create hsr debugfs directory [ 164.167055][ T5780] Bluetooth: hci0: command tx timeout [ 164.247026][ T5780] Bluetooth: hci1: command tx timeout [ 164.327104][ T5780] Bluetooth: hci3: command tx timeout [ 164.480044][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.487118][ T5780] Bluetooth: hci2: command tx timeout [ 164.497256][ T5780] Bluetooth: hci4: command tx timeout [ 164.508960][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.547329][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.579978][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.669587][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.722108][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.741485][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.785153][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.961950][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.010510][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.031736][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.068288][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.314233][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.345163][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.375473][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.420758][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.525871][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.716724][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.765393][ T5785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.789788][ T5785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.824765][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.832282][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.853687][ T5785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.908412][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.918658][ T5785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.951643][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.959122][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.191273][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.228504][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.235859][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.248232][ T5780] Bluetooth: hci0: command tx timeout [ 166.312215][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.327662][ T5780] Bluetooth: hci1: command tx timeout [ 166.351723][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.359068][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.417140][ T5780] Bluetooth: hci3: command tx timeout [ 166.508847][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.577368][ T5780] Bluetooth: hci4: command tx timeout [ 166.582924][ T5780] Bluetooth: hci2: command tx timeout [ 166.632342][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.639870][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.731851][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.739386][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.858118][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.094244][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.133556][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.196488][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.204014][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.279138][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.286560][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.375246][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.464866][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.472393][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.586648][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.594196][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.656634][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.195322][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.409579][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.441966][ T5775] veth0_vlan: entered promiscuous mode [ 168.573538][ T5775] veth1_vlan: entered promiscuous mode [ 168.916714][ T5783] veth0_vlan: entered promiscuous mode [ 168.983142][ T5775] veth0_macvtap: entered promiscuous mode [ 169.044460][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.064859][ T5786] veth0_vlan: entered promiscuous mode [ 169.075456][ T5775] veth1_macvtap: entered promiscuous mode [ 169.153982][ T5783] veth1_vlan: entered promiscuous mode [ 169.228830][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.239186][ T5786] veth1_vlan: entered promiscuous mode [ 169.271632][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.332381][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.431473][ T163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.444836][ T163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.492465][ T163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.521124][ T163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.681647][ T5783] veth0_macvtap: entered promiscuous mode [ 169.758196][ T5783] veth1_macvtap: entered promiscuous mode [ 169.875751][ T5776] veth0_vlan: entered promiscuous mode [ 170.021341][ T5786] veth0_macvtap: entered promiscuous mode [ 170.066648][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.110839][ T5786] veth1_macvtap: entered promiscuous mode [ 170.139520][ T5776] veth1_vlan: entered promiscuous mode [ 170.201621][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.284493][ T163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.299256][ T163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.348077][ T163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.358351][ T163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.437089][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.535097][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.634215][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.675502][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.738513][ T5776] veth0_macvtap: entered promiscuous mode [ 170.750230][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.764121][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.831301][ T5776] veth1_macvtap: entered promiscuous mode [ 170.975528][ T5785] veth0_vlan: entered promiscuous mode [ 171.094455][ T5785] veth1_vlan: entered promiscuous mode [ 171.145118][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.224341][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.347396][ T1330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.356441][ T1330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.429282][ T1330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.452946][ T163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.723881][ T5785] veth0_macvtap: entered promiscuous mode [ 171.822146][ T5785] veth1_macvtap: entered promiscuous mode [ 172.060229][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.130649][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.277089][ T4760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.326153][ T4760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.360918][ T4760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.398039][ T4760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.224504][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.287142][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.512305][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.538543][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.969612][ T5775] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 175.887730][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.895723][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.202230][ T5954] pimreg: entered allmulticast mode [ 176.229129][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.256623][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.302342][ T5952] pimreg: left allmulticast mode [ 176.625292][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.681953][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.856273][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 176.961351][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 177.045916][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.072950][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.358831][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.437276][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.817850][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.880176][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.075496][ T5976] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 178.108460][ T5976] ===================================================== [ 178.115775][ T5976] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 178.123964][ T5976] dvbdmx_release_ts_feed+0x198/0x290 [ 178.134483][ T5976] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 178.142067][ T5976] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 178.148074][ T5976] dvb_demux_do_ioctl+0x9a3/0xc80 [ 178.153280][ T5976] dvb_usercopy+0x263/0x500 [ 178.158085][ T5976] dvb_demux_ioctl+0x46/0x70 [ 178.162839][ T5976] __se_sys_ioctl+0x23c/0x400 [ 178.168288][ T5976] __x64_sys_ioctl+0x97/0xe0 [ 178.173036][ T5976] x64_sys_call+0x1975/0x3ea0 [ 178.178000][ T5976] do_syscall_64+0x134/0xf80 [ 178.182766][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.188986][ T5976] [ 178.191376][ T5976] Uninit was created at: [ 178.195826][ T5976] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 178.202115][ T5976] alloc_pages_mpol+0x328/0x860 [ 178.207369][ T5976] alloc_pages_noprof+0x101/0x280 [ 178.212560][ T5976] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 178.218821][ T5976] __vmalloc_noprof+0x128/0x1f0 [ 178.223813][ T5976] vmalloc_array_noprof+0x48/0x80 [ 178.233991][ T5976] dvb_dmx_init+0x121/0x930 [ 178.240275][ T5976] vidtv_bridge_probe+0x1b1f/0x2690 [ 178.245634][ T5976] platform_probe+0x213/0x370 [ 178.253207][ T5976] really_probe+0x4d5/0xe40 [ 178.261777][ T5976] __driver_probe_device+0x25e/0x370 [ 178.267442][ T5976] driver_probe_device+0x70/0x8f0 [ 178.272642][ T5976] __driver_attach+0x859/0xad0 [ 178.277680][ T5976] bus_for_each_dev+0x33b/0x580 [ 178.282670][ T5976] driver_attach+0x51/0x70 [ 178.287506][ T5976] bus_add_driver+0x54f/0xdb0 [ 178.292328][ T5976] driver_register+0x42e/0x6a0 [ 178.297422][ T5976] __platform_driver_register+0x65/0x80 [ 178.303128][ T5976] vidtv_bridge_init+0x73/0x100 [ 178.308300][ T5976] do_one_initcall+0x237/0xbb0 [ 178.313237][ T5976] do_initcall_level+0x157/0x350 [ 178.318505][ T5976] do_initcalls+0x176/0x310 [ 178.323184][ T5976] do_basic_setup+0x1d/0x30 [ 178.361502][ T5976] kernel_init_freeable+0x213/0x460 [ 178.372769][ T5976] kernel_init+0x2f/0x5e0 [ 178.378806][ T5976] ret_from_fork+0x20f/0x910 [ 178.383561][ T5976] ret_from_fork_asm+0x1a/0x30 [ 178.388625][ T5976] [ 178.391056][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 178.400377][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.411769][ T5976] ===================================================== [ 178.419653][ T5976] Disabling lock debugging due to kernel taint [ 178.428605][ T5976] Kernel panic - not syncing: kmsan.panic set ... [ 178.435150][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.3.4 Tainted: G B syzkaller #0 PREEMPT(full) [ 178.445916][ T5976] Tainted: [B]=BAD_PAGE [ 178.450152][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.460329][ T5976] Call Trace: [ 178.463687][ T5976] [ 178.466691][ T5976] __dump_stack+0x26/0x30 [ 178.471186][ T5976] dump_stack_lvl+0x50/0x1c0 [ 178.475938][ T5976] ? dump_stack+0x12/0x25 [ 178.480428][ T5976] dump_stack+0x1e/0x25 [ 178.484735][ T5976] vpanic+0x7b4/0x1430 [ 178.488993][ T5976] panic+0x15d/0x160 [ 178.493106][ T5976] kmsan_report+0x31a/0x320 [ 178.497793][ T5976] ? __msan_warning+0x1b/0x30 [ 178.502629][ T5976] ? dvbdmx_release_ts_feed+0x198/0x290 [ 178.508372][ T5976] ? dvb_dmxdev_filter_start+0x1187/0x1af0 [ 178.514370][ T5976] ? dvb_dmxdev_pes_filter_set+0x810/0x860 [ 178.520359][ T5976] ? dvb_demux_do_ioctl+0x9a3/0xc80 [ 178.525744][ T5976] ? dvb_usercopy+0x263/0x500 [ 178.530575][ T5976] ? dvb_demux_ioctl+0x46/0x70 [ 178.535513][ T5976] ? __se_sys_ioctl+0x23c/0x400 [ 178.540517][ T5976] ? __x64_sys_ioctl+0x97/0xe0 [ 178.545470][ T5976] ? x64_sys_call+0x1975/0x3ea0 [ 178.550488][ T5976] ? do_syscall_64+0x134/0xf80 [ 178.555431][ T5976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.561663][ T5976] ? kmsan_get_metadata+0xf1/0x160 [ 178.566957][ T5976] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 178.573449][ T5976] ? kmsan_get_metadata+0xf1/0x160 [ 178.578741][ T5976] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 178.584726][ T5976] ? preempt_schedule_common+0x5b/0x80 [ 178.590342][ T5976] ? preempt_schedule+0x30/0x40 [ 178.595335][ T5976] ? preempt_schedule_thunk+0x16/0x30 [ 178.600843][ T5976] ? _raw_spin_unlock_irq+0x47/0x50 [ 178.606194][ T5976] ? kmsan_get_metadata+0x146/0x160 [ 178.611562][ T5976] __msan_warning+0x1b/0x30 [ 178.616208][ T5976] dvbdmx_release_ts_feed+0x198/0x290 [ 178.621774][ T5976] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 178.627598][ T5976] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 178.633675][ T5976] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 178.639480][ T5976] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 178.645721][ T5976] dvb_demux_do_ioctl+0x9a3/0xc80 [ 178.650916][ T5976] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 178.656636][ T5976] dvb_usercopy+0x263/0x500 [ 178.661277][ T5976] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 178.667015][ T5976] ? kmsan_get_metadata+0xf1/0x160 [ 178.672295][ T5976] dvb_demux_ioctl+0x46/0x70 [ 178.677041][ T5976] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 178.682490][ T5976] __se_sys_ioctl+0x23c/0x400 [ 178.687324][ T5976] __x64_sys_ioctl+0x97/0xe0 [ 178.692065][ T5976] x64_sys_call+0x1975/0x3ea0 [ 178.696904][ T5976] do_syscall_64+0x134/0xf80 [ 178.701661][ T5976] ? clear_bhb_loop+0x50/0xa0 [ 178.706476][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.712524][ T5976] RIP: 0033:0x7f52f9d9bf79 [ 178.717036][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.736774][ T5976] RSP: 002b:00007f52fac55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.745351][ T5976] RAX: ffffffffffffffda RBX: 00007f52fa015fa0 RCX: 00007f52f9d9bf79 [ 178.753435][ T5976] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 178.761502][ T5976] RBP: 00007f52f9e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 178.769563][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.777621][ T5976] R13: 00007f52fa016038 R14: 00007f52fa015fa0 R15: 00007ffe7aa8d9e8 [ 178.785727][ T5976] [ 178.789192][ T5976] Kernel Offset: disabled [ 178.793567][ T5976] Rebooting in 86400 seconds..