last executing test programs: 622.710946ms ago: executing program 2 (id=3): syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="04"], 0xd) 0s ago: executing program 2 (id=6): socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. [ 157.754977][ T5557] cgroup: Unknown subsys name 'net' [ 157.883447][ T5557] cgroup: Unknown subsys name 'cpuset' [ 157.898778][ T5557] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.525273][ T5557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 167.637650][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.648813][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.658051][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.689401][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.699956][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.731217][ T5580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.740293][ T5580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.749929][ T5580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.762775][ T5580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.773911][ T5580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.832048][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.843422][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.873331][ T4870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.886466][ T4870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.897536][ T4870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.907359][ T4870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.917055][ T5592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.920515][ T4870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.935726][ T4870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.948051][ T5592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.948384][ T4870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.975798][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.987363][ T5592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.000187][ T5580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.011731][ T5580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.815078][ T5580] Bluetooth: hci1: command tx timeout [ 169.815120][ T5586] Bluetooth: hci0: command tx timeout [ 170.045824][ T5580] Bluetooth: hci4: command tx timeout [ 170.045955][ T5586] Bluetooth: hci2: command tx timeout [ 170.051498][ T48] Bluetooth: hci3: command tx timeout [ 171.884898][ T48] Bluetooth: hci1: command tx timeout [ 171.890608][ T5580] Bluetooth: hci0: command tx timeout [ 171.986024][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.995063][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.015124][ T5575] bridge_slave_0: entered allmulticast mode [ 172.028004][ T5575] bridge_slave_0: entered promiscuous mode [ 172.076813][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.095114][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.104352][ T5575] bridge_slave_1: entered allmulticast mode [ 172.128733][ T48] Bluetooth: hci3: command tx timeout [ 172.134658][ T5580] Bluetooth: hci2: command tx timeout [ 172.134946][ T5586] Bluetooth: hci4: command tx timeout [ 172.142643][ T5575] bridge_slave_1: entered promiscuous mode [ 172.348633][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.517216][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.528317][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.536246][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.543681][ T5582] bridge_slave_0: entered allmulticast mode [ 172.553208][ T5582] bridge_slave_0: entered promiscuous mode [ 172.618891][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.630572][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.639036][ T5583] bridge_slave_0: entered allmulticast mode [ 172.649021][ T5583] bridge_slave_0: entered promiscuous mode [ 172.689052][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.696825][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.704315][ T5582] bridge_slave_1: entered allmulticast mode [ 172.716452][ T5582] bridge_slave_1: entered promiscuous mode [ 172.726465][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.733908][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.742206][ T5589] bridge_slave_0: entered allmulticast mode [ 172.750416][ T5589] bridge_slave_0: entered promiscuous mode [ 172.761183][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.769105][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.777008][ T5583] bridge_slave_1: entered allmulticast mode [ 172.785566][ T5583] bridge_slave_1: entered promiscuous mode [ 172.862524][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.870591][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.878547][ T5589] bridge_slave_1: entered allmulticast mode [ 172.886965][ T5589] bridge_slave_1: entered promiscuous mode [ 172.948310][ T5575] team0: Port device team_slave_0 added [ 173.029946][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.046609][ T5575] team0: Port device team_slave_1 added [ 173.059928][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.112561][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.130702][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.139781][ T5579] bridge_slave_0: entered allmulticast mode [ 173.151750][ T5579] bridge_slave_0: entered promiscuous mode [ 173.176613][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.248603][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.266180][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.276980][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.285237][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.293029][ T5579] bridge_slave_1: entered allmulticast mode [ 173.301924][ T5579] bridge_slave_1: entered promiscuous mode [ 173.388767][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.449878][ T5583] team0: Port device team_slave_0 added [ 173.458555][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.466154][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.493073][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.581125][ T5583] team0: Port device team_slave_1 added [ 173.589380][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.596870][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.623460][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.647660][ T5582] team0: Port device team_slave_0 added [ 173.660571][ T5589] team0: Port device team_slave_0 added [ 173.673350][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.727010][ T5582] team0: Port device team_slave_1 added [ 173.739466][ T5589] team0: Port device team_slave_1 added [ 173.752424][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.855540][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.862776][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.889818][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.907036][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.914133][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.941031][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.964918][ T5586] Bluetooth: hci1: command tx timeout [ 173.964988][ T5580] Bluetooth: hci0: command tx timeout [ 174.082948][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.090448][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.117670][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.132562][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.139935][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.166715][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.185569][ T5579] team0: Port device team_slave_0 added [ 174.205170][ T5580] Bluetooth: hci3: command tx timeout [ 174.210956][ T48] Bluetooth: hci4: command tx timeout [ 174.217515][ T5586] Bluetooth: hci2: command tx timeout [ 174.227231][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.234358][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.262469][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.277567][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.284969][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.311950][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.329289][ T5579] team0: Port device team_slave_1 added [ 174.349472][ T5575] hsr_slave_0: entered promiscuous mode [ 174.358163][ T5575] hsr_slave_1: entered promiscuous mode [ 174.480316][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.487676][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.513884][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.582975][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.590303][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.617359][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.642106][ T5583] hsr_slave_0: entered promiscuous mode [ 174.650572][ T5583] hsr_slave_1: entered promiscuous mode [ 174.658662][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 174.664666][ T5583] Cannot create hsr debugfs directory [ 174.852361][ T5582] hsr_slave_0: entered promiscuous mode [ 174.861415][ T5582] hsr_slave_1: entered promiscuous mode [ 174.869670][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 174.875661][ T5582] Cannot create hsr debugfs directory [ 174.894037][ T5589] hsr_slave_0: entered promiscuous mode [ 174.902867][ T5589] hsr_slave_1: entered promiscuous mode [ 174.911790][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 174.917985][ T5589] Cannot create hsr debugfs directory [ 175.150014][ T5579] hsr_slave_0: entered promiscuous mode [ 175.158637][ T5579] hsr_slave_1: entered promiscuous mode [ 175.169036][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 175.175016][ T5579] Cannot create hsr debugfs directory [ 176.044944][ T5580] Bluetooth: hci1: command tx timeout [ 176.050729][ T5586] Bluetooth: hci0: command tx timeout [ 176.142613][ T5575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.164021][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.175069][ T5575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.191588][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.205263][ T5575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.223160][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.233760][ T5575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.249821][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.285212][ T5580] Bluetooth: hci3: command tx timeout [ 176.290981][ T48] Bluetooth: hci4: command tx timeout [ 176.297618][ T5586] Bluetooth: hci2: command tx timeout [ 176.367832][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.408653][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.422461][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.438719][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.451030][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.470534][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.505298][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.524196][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.679455][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.701120][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.713104][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.733527][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.743868][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.761736][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.796192][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.814246][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.013208][ T5579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.034125][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.065898][ T5579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.084247][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.113459][ T5579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.136268][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.180049][ T5579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.199541][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.441910][ T5589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.462639][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.489662][ T5589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.508535][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.519165][ T5589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.536244][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.571109][ T5589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.590281][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.701604][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.915632][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.953691][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.044013][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.051661][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.151547][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.159131][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.203662][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.358475][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.417478][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.472065][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.479558][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.508932][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.578074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.585454][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.600838][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.608227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.710437][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.717917][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.735987][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.829077][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.836626][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.939022][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.965571][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.972960][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.184217][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.280819][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.288425][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.418126][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.425814][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.971881][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.562610][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.632055][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.819030][ T5575] veth0_vlan: entered promiscuous mode [ 182.973810][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.993557][ T5575] veth1_vlan: entered promiscuous mode [ 183.149937][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.465451][ T5582] veth0_vlan: entered promiscuous mode [ 183.484260][ T5583] veth0_vlan: entered promiscuous mode [ 183.606716][ T5575] veth0_macvtap: entered promiscuous mode [ 183.662952][ T5575] veth1_macvtap: entered promiscuous mode [ 183.685961][ T5582] veth1_vlan: entered promiscuous mode [ 183.708840][ T5583] veth1_vlan: entered promiscuous mode [ 183.877291][ T5589] veth0_vlan: entered promiscuous mode [ 183.917951][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.951128][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.016923][ T5589] veth1_vlan: entered promiscuous mode [ 184.088158][ T5705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.098602][ T5705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.148461][ T5705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.159427][ T5705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.196345][ T5582] veth0_macvtap: entered promiscuous mode [ 184.244181][ T5583] veth0_macvtap: entered promiscuous mode [ 184.319816][ T5582] veth1_macvtap: entered promiscuous mode [ 184.349849][ T5583] veth1_macvtap: entered promiscuous mode [ 184.464604][ T5579] veth0_vlan: entered promiscuous mode [ 184.485794][ T5589] veth0_macvtap: entered promiscuous mode [ 184.561668][ T5589] veth1_macvtap: entered promiscuous mode [ 184.597943][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.657097][ T5579] veth1_vlan: entered promiscuous mode [ 184.690873][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.751548][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.826220][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.839631][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.860717][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.898665][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.908105][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.031598][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.104931][ T1010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.122472][ T1010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.150692][ T1010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.187286][ T1010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.239738][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.416879][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.435134][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.482747][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.528393][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.687274][ T5579] veth0_macvtap: entered promiscuous mode [ 185.783616][ T5579] veth1_macvtap: entered promiscuous mode [ 186.087501][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.192128][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.318680][ T5705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.350552][ T5705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.397673][ T5705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.443816][ T5705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.409283][ T5693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.448049][ T5693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.667270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.697479][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.213194][ T5575] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 190.733625][ T5586] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 190.884369][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.906027][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.074891][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.114669][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.257822][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.294924][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.348220][ T5837] ===================================================== [ 191.357299][ T5837] BUG: KMSAN: uninit-value in macvlan_broadcast+0x47b/0xac0 [ 191.365722][ T5837] macvlan_broadcast+0x47b/0xac0 [ 191.371048][ T5837] macvlan_start_xmit+0x38b/0x940 [ 191.376499][ T5837] dev_hard_start_xmit+0x22f/0xa80 [ 191.381910][ T5837] __dev_queue_xmit+0x2990/0x5a00 [ 191.387363][ T5837] __bpf_redirect+0x162e/0x1760 [ 191.392666][ T5837] bpf_clone_redirect+0x4a6/0x6c0 [ 191.398179][ T5837] ___bpf_prog_run+0x13e8/0xea90 [ 191.403504][ T5837] __bpf_prog_run32+0xc2/0xf0 [ 191.408648][ T5837] bpf_test_run+0x846/0xdf0 [ 191.413734][ T5837] bpf_prog_test_run_skb+0x2988/0x35f0 [ 191.419858][ T5837] bpf_prog_test_run+0x5bb/0x9f0 [ 191.425316][ T5837] __sys_bpf+0x925/0xee0 [ 191.430226][ T5837] __x64_sys_bpf+0xa4/0xf0 [ 191.435480][ T5837] x64_sys_call+0x13d0/0x3ea0 [ 191.440444][ T5837] do_syscall_64+0x134/0xf80 [ 191.445908][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.452110][ T5837] [ 191.454823][ T5837] Uninit was stored to memory at: [ 191.460266][ T5837] macvlan_broadcast+0x474/0xac0 [ 191.465599][ T5837] macvlan_start_xmit+0x38b/0x940 [ 191.470813][ T5837] dev_hard_start_xmit+0x22f/0xa80 [ 191.476560][ T5837] __dev_queue_xmit+0x2990/0x5a00 [ 191.482030][ T5837] __bpf_redirect+0x162e/0x1760 [ 191.487236][ T5837] bpf_clone_redirect+0x4a6/0x6c0 [ 191.492447][ T5837] ___bpf_prog_run+0x13e8/0xea90 [ 191.498273][ T5837] __bpf_prog_run32+0xc2/0xf0 [ 191.503236][ T5837] bpf_test_run+0x846/0xdf0 [ 191.508560][ T5837] bpf_prog_test_run_skb+0x2988/0x35f0 [ 191.514872][ T5837] bpf_prog_test_run+0x5bb/0x9f0 [ 191.520206][ T5837] __sys_bpf+0x925/0xee0 [ 191.524765][ T5837] __x64_sys_bpf+0xa4/0xf0 [ 191.530059][ T5837] x64_sys_call+0x13d0/0x3ea0 [ 191.535088][ T5837] do_syscall_64+0x134/0xf80 [ 191.539947][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.546285][ T5837] [ 191.548685][ T5837] Uninit was created at: [ 191.553173][ T5837] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 191.559720][ T5837] pskb_expand_head+0x2f3/0x1a40 [ 191.565083][ T5837] skb_ensure_writable+0x44e/0x510 [ 191.570366][ T5837] bpf_clone_redirect+0x301/0x6c0 [ 191.575816][ T5837] ___bpf_prog_run+0x13e8/0xea90 [ 191.580966][ T5837] __bpf_prog_run32+0xc2/0xf0 [ 191.585999][ T5837] bpf_test_run+0x846/0xdf0 [ 191.590948][ T5837] bpf_prog_test_run_skb+0x2988/0x35f0 [ 191.596753][ T5837] bpf_prog_test_run+0x5bb/0x9f0 [ 191.602078][ T5837] __sys_bpf+0x925/0xee0 [ 191.606703][ T5837] __x64_sys_bpf+0xa4/0xf0 [ 191.611300][ T5837] x64_sys_call+0x13d0/0x3ea0 [ 191.616320][ T5837] do_syscall_64+0x134/0xf80 [ 191.621098][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.627602][ T5837] [ 191.630227][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 191.639738][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.650074][ T5837] ===================================================== [ 191.650929][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.657311][ T5837] Disabling lock debugging due to kernel taint [ 191.657362][ T5837] Kernel panic - not syncing: kmsan.panic set ... [ 191.657436][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.2.6 Tainted: G B syzkaller #0 PREEMPT(full) [ 191.657574][ T5837] Tainted: [B]=BAD_PAGE [ 191.657614][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.657680][ T5837] Call Trace: [ 191.657717][ T5837] [ 191.657755][ T5837] __dump_stack+0x26/0x30 [ 191.657879][ T5837] dump_stack_lvl+0x50/0x1c0 [ 191.657992][ T5837] ? dump_stack+0x12/0x25 [ 191.658111][ T5837] dump_stack+0x1e/0x25 [ 191.658222][ T5837] vpanic+0x7b4/0x1430 [ 191.658368][ T5837] panic+0x15d/0x160 [ 191.658537][ T5837] kmsan_report+0x31a/0x320 [ 191.658681][ T5837] ? __msan_warning+0x1b/0x30 [ 191.658801][ T5837] ? macvlan_broadcast+0x47b/0xac0 [ 191.658930][ T5837] ? macvlan_start_xmit+0x38b/0x940 [ 191.659048][ T5837] ? dev_hard_start_xmit+0x22f/0xa80 [ 191.659169][ T5837] ? __dev_queue_xmit+0x2990/0x5a00 [ 191.659294][ T5837] ? __bpf_redirect+0x162e/0x1760 [ 191.659422][ T5837] ? bpf_clone_redirect+0x4a6/0x6c0 [ 191.659553][ T5837] ? ___bpf_prog_run+0x13e8/0xea90 [ 191.659691][ T5837] ? __bpf_prog_run32+0xc2/0xf0 [ 191.659823][ T5837] ? bpf_test_run+0x846/0xdf0 [ 191.659965][ T5837] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 191.660105][ T5837] ? bpf_prog_test_run+0x5bb/0x9f0 [ 191.660241][ T5837] ? __sys_bpf+0x925/0xee0 [ 191.660365][ T5837] ? __x64_sys_bpf+0xa4/0xf0 [ 191.660485][ T5837] ? x64_sys_call+0x13d0/0x3ea0 [ 191.660614][ T5837] ? do_syscall_64+0x134/0xf80 [ 191.660748][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.660870][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.660998][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.661157][ T5837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 191.661316][ T5837] ? __vlan_get_protocol_offset+0x476/0x4c0 [ 191.661471][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.661622][ T5837] __msan_warning+0x1b/0x30 [ 191.661744][ T5837] macvlan_broadcast+0x47b/0xac0 [ 191.661909][ T5837] macvlan_start_xmit+0x38b/0x940 [ 191.662045][ T5837] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 191.662170][ T5837] dev_hard_start_xmit+0x22f/0xa80 [ 191.662330][ T5837] __dev_queue_xmit+0x2990/0x5a00 [ 191.662453][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.662609][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.662752][ T5837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 191.662913][ T5837] ? __dev_queue_xmit+0x2d4/0x5a00 [ 191.663035][ T5837] ? pskb_expand_head+0x164b/0x1a40 [ 191.663209][ T5837] __bpf_redirect+0x162e/0x1760 [ 191.663353][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.663510][ T5837] bpf_clone_redirect+0x4a6/0x6c0 [ 191.663672][ T5837] ___bpf_prog_run+0x13e8/0xea90 [ 191.663855][ T5837] __bpf_prog_run32+0xc2/0xf0 [ 191.663985][ T5837] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 191.664138][ T5837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 191.664283][ T5837] ? __pfx___bpf_prog_run32+0x10/0x10 [ 191.664423][ T5837] ? __pfx___bpf_prog_run32+0x10/0x10 [ 191.664567][ T5837] bpf_test_run+0x846/0xdf0 [ 191.664715][ T5837] ? csum_partial+0x424/0x480 [ 191.664828][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.664994][ T5837] ? bpf_test_run+0x2f4/0xdf0 [ 191.665174][ T5837] bpf_prog_test_run_skb+0x2988/0x35f0 [ 191.665329][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.665473][ T5837] ? kmsan_get_metadata+0xf1/0x160 [ 191.665616][ T5837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 191.665789][ T5837] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 191.665961][ T5837] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 191.666105][ T5837] bpf_prog_test_run+0x5bb/0x9f0 [ 191.666274][ T5837] __sys_bpf+0x925/0xee0 [ 191.666454][ T5837] __x64_sys_bpf+0xa4/0xf0 [ 191.666589][ T5837] x64_sys_call+0x13d0/0x3ea0 [ 191.666723][ T5837] do_syscall_64+0x134/0xf80 [ 191.666861][ T5837] ? clear_bhb_loop+0x50/0xa0 [ 191.666979][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.667106][ T5837] RIP: 0033:0x7fd732b9ce59 [ 191.667190][ T5837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.667287][ T5837] RSP: 002b:00007fd733a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.667395][ T5837] RAX: ffffffffffffffda RBX: 00007fd732e15fa0 RCX: 00007fd732b9ce59 [ 191.667473][ T5837] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 191.667539][ T5837] RBP: 00007fd732c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 191.667604][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.667666][ T5837] R13: 00007fd732e16038 R14: 00007fd732e15fa0 R15: 00007fff9ef3cb68 [ 191.667774][ T5837] [ 191.668447][ T5837] Kernel Offset: disabled