last executing test programs: 263.108223ms ago: executing program 0 (id=1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x24040810}, 0x4000) 0s ago: executing program 0 (id=6): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x200001, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 64.689410][ T5816] cgroup: Unknown subsys name 'net' [ 64.816640][ T5816] cgroup: Unknown subsys name 'cpuset' [ 64.824887][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.151501][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.225125][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.233371][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.241130][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.248743][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.254627][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.256256][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.263295][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.271614][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.284851][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.285185][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.294241][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.300662][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.313959][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.315350][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.323485][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.329441][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.336703][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.353946][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.361238][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.370796][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.372880][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.378421][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.386120][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.399902][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.407314][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.872749][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.051386][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 69.223394][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.237445][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.245514][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.253130][ T5827] bridge_slave_0: entered allmulticast mode [ 69.262875][ T5827] bridge_slave_0: entered promiscuous mode [ 69.286847][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.294086][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.301190][ T5827] bridge_slave_1: entered allmulticast mode [ 69.308795][ T5827] bridge_slave_1: entered promiscuous mode [ 69.334552][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 69.369940][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.423229][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.430752][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.437970][ T5831] bridge_slave_0: entered allmulticast mode [ 69.445253][ T5831] bridge_slave_0: entered promiscuous mode [ 69.478448][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.510332][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.517479][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.524755][ T5831] bridge_slave_1: entered allmulticast mode [ 69.531738][ T5831] bridge_slave_1: entered promiscuous mode [ 69.553572][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.644747][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.671002][ T5827] team0: Port device team_slave_0 added [ 69.689187][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.698743][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.706161][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.713288][ T5829] bridge_slave_0: entered allmulticast mode [ 69.720434][ T5829] bridge_slave_0: entered promiscuous mode [ 69.739143][ T5827] team0: Port device team_slave_1 added [ 69.766875][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.774094][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.781223][ T5829] bridge_slave_1: entered allmulticast mode [ 69.788680][ T5829] bridge_slave_1: entered promiscuous mode [ 69.818118][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.825440][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.832661][ T5828] bridge_slave_0: entered allmulticast mode [ 69.839760][ T5828] bridge_slave_0: entered promiscuous mode [ 69.871052][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.878317][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.885539][ T5832] bridge_slave_0: entered allmulticast mode [ 69.892415][ T5832] bridge_slave_0: entered promiscuous mode [ 69.910324][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.917653][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.925331][ T5828] bridge_slave_1: entered allmulticast mode [ 69.932239][ T5828] bridge_slave_1: entered promiscuous mode [ 69.940703][ T5831] team0: Port device team_slave_0 added [ 69.957729][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.965054][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.972235][ T5832] bridge_slave_1: entered allmulticast mode [ 69.979398][ T5832] bridge_slave_1: entered promiscuous mode [ 69.986919][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.994082][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.020176][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.042861][ T5831] team0: Port device team_slave_1 added [ 70.059402][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.080327][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.087283][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.113218][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.145598][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.175692][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.186110][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.193053][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.219195][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.242512][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.255212][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.264856][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.271792][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.297767][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.326528][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.358339][ T5829] team0: Port device team_slave_0 added [ 70.387239][ T5828] team0: Port device team_slave_0 added [ 70.396912][ T5829] team0: Port device team_slave_1 added [ 70.404756][ T5149] Bluetooth: hci0: command tx timeout [ 70.404762][ T5837] Bluetooth: hci3: command tx timeout [ 70.416085][ T5846] Bluetooth: hci2: command tx timeout [ 70.443292][ T5828] team0: Port device team_slave_1 added [ 70.472409][ T5832] team0: Port device team_slave_0 added [ 70.484162][ T5149] Bluetooth: hci1: command tx timeout [ 70.484955][ T5827] hsr_slave_0: entered promiscuous mode [ 70.489850][ T5846] Bluetooth: hci4: command tx timeout [ 70.496796][ T5827] hsr_slave_1: entered promiscuous mode [ 70.534444][ T5831] hsr_slave_0: entered promiscuous mode [ 70.540823][ T5831] hsr_slave_1: entered promiscuous mode [ 70.547062][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 70.552846][ T5831] Cannot create hsr debugfs directory [ 70.559774][ T5832] team0: Port device team_slave_1 added [ 70.578175][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.585230][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.611734][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.634442][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.641377][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.667401][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.679054][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.686032][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.712420][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.733952][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.740905][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.766881][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.789843][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.797316][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.823312][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.851613][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.858602][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.885743][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.065164][ T5832] hsr_slave_0: entered promiscuous mode [ 71.071411][ T5832] hsr_slave_1: entered promiscuous mode [ 71.077678][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 71.083401][ T5832] Cannot create hsr debugfs directory [ 71.094549][ T5829] hsr_slave_0: entered promiscuous mode [ 71.100704][ T5829] hsr_slave_1: entered promiscuous mode [ 71.106934][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 71.112654][ T5829] Cannot create hsr debugfs directory [ 71.147688][ T5828] hsr_slave_0: entered promiscuous mode [ 71.154093][ T5828] hsr_slave_1: entered promiscuous mode [ 71.160051][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 71.166274][ T5828] Cannot create hsr debugfs directory [ 71.299844][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306349][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.560648][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.586320][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.601185][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.618721][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.666717][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.678681][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.697650][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.710583][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.775640][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.792585][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.802813][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.818847][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.912952][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.923306][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.957253][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.980786][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.034820][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.046645][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.066054][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.077502][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.097501][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.166084][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.201108][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.208331][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.231343][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.238446][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.278826][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.328048][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.357779][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.369493][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.376622][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.400407][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.407513][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.430894][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.484177][ T5149] Bluetooth: hci0: command tx timeout [ 72.489662][ T5846] Bluetooth: hci2: command tx timeout [ 72.496256][ T5149] Bluetooth: hci3: command tx timeout [ 72.513003][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.540793][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.567317][ T5149] Bluetooth: hci1: command tx timeout [ 72.573000][ T5846] Bluetooth: hci4: command tx timeout [ 72.595041][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.602125][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.612625][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.619790][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.630179][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.637348][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.678151][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.685248][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.770767][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.801546][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.849369][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.902636][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.942196][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.949406][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.989653][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.996871][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.120937][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.149215][ T5827] veth0_vlan: entered promiscuous mode [ 73.216807][ T5827] veth1_vlan: entered promiscuous mode [ 73.272161][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.358728][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.391012][ T5827] veth0_macvtap: entered promiscuous mode [ 73.422031][ T5827] veth1_macvtap: entered promiscuous mode [ 73.446715][ T5832] veth0_vlan: entered promiscuous mode [ 73.488167][ T5832] veth1_vlan: entered promiscuous mode [ 73.513129][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.550728][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.576780][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.588973][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.606633][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616790][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646178][ T5829] veth0_vlan: entered promiscuous mode [ 73.669454][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.698476][ T5829] veth1_vlan: entered promiscuous mode [ 73.710394][ T5832] veth0_macvtap: entered promiscuous mode [ 73.750341][ T5832] veth1_macvtap: entered promiscuous mode [ 73.795012][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.802934][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.839574][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.879071][ T5831] veth0_vlan: entered promiscuous mode [ 73.888291][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.896912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.905160][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.910822][ T5831] veth1_vlan: entered promiscuous mode [ 73.945069][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.961569][ T5829] veth0_macvtap: entered promiscuous mode [ 73.970653][ T5828] veth0_vlan: entered promiscuous mode [ 73.983230][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988170][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.992871][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.023159][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.040044][ T5829] veth1_macvtap: entered promiscuous mode [ 74.064524][ T5828] veth1_vlan: entered promiscuous mode [ 74.115673][ T5831] veth0_macvtap: entered promiscuous mode [ 74.151039][ T5831] veth1_macvtap: entered promiscuous mode [ 74.171759][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.201774][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.230230][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.237778][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.246998][ T5944] block nbd0: Unsupported socket: should be TCP or UNIX. [ 74.255809][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.268783][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.292402][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.301488][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.326313][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.339193][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.351056][ T5828] veth0_macvtap: entered promiscuous mode [ 74.367872][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.567972][ T5149] Bluetooth: hci2: command tx timeout [ 74.568051][ T5846] Bluetooth: hci3: command tx timeout [ 74.573417][ T5837] Bluetooth: hci0: command tx timeout [ 74.637687][ T5947] ------------[ cut here ]------------ [ 74.643214][ T5947] WARNING: net/core/skbuff.c:7243 at skb_attempt_defer_free+0x572/0x6d0, CPU#1: syz.0.6/5947 [ 74.654060][ T5947] Modules linked in: [ 74.657995][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 74.667209][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.672159][ T5149] Bluetooth: hci1: command tx timeout [ 74.677310][ T5947] RIP: 0010:skb_attempt_defer_free+0x572/0x6d0 [ 74.677344][ T5947] Code: ff e8 72 c4 8f f8 90 0f 0b 90 e9 a8 fb ff ff e8 64 c4 8f f8 eb 85 e8 5d c4 8f f8 90 0f 0b 90 e9 94 fc ff ff e8 4f c4 8f f8 90 <0f> 0b 90 e9 af fc ff ff e8 41 c4 8f f8 90 0f 0b 90 e9 da fc ff ff [ 74.677360][ T5947] RSP: 0018:ffffc9000479f400 EFLAGS: 00010287 [ 74.677379][ T5947] RAX: ffffffff8931ee01 RBX: ffff88805531cb40 RCX: 0000000000080000 [ 74.682786][ T5149] Bluetooth: hci4: command tx timeout [ 74.688931][ T5947] RDX: ffffc9000e449000 RSI: 0000000000004af2 RDI: 0000000000004af3 [ 74.688947][ T5947] RBP: ffffc9000479f4b0 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 74.688961][ T5947] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: 0000000000000000 [ 74.753612][ T5947] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805531cba0 [ 74.761663][ T5947] FS: 00007f267c87b6c0(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 74.770681][ T5947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.777321][ T5947] CR2: 00007f267c87af98 CR3: 0000000077fdc000 CR4: 00000000003526f0 [ 74.785405][ T5947] Call Trace: [ 74.788685][ T5947] [ 74.791621][ T5947] ? __lock_acquire+0x6b6/0x2cf0 [ 74.796620][ T5947] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 74.802536][ T5947] ? skb_consume_udp+0x90/0x260 [ 74.808436][ T5947] udp_recvmsg+0xdb0/0x1050 [ 74.812976][ T5947] ? __pfx_udp_recvmsg+0x10/0x10 [ 74.818003][ T5947] ? udp_bpf_recvmsg+0xe7/0xda0 [ 74.822872][ T5947] udp_bpf_recvmsg+0xb84/0xda0 [ 74.827691][ T5947] ? udp_bpf_recvmsg+0xe7/0xda0 [ 74.832561][ T5947] ? get_page_from_freelist+0x2365/0x2440 [ 74.839010][ T5947] ? __pfx___might_resched+0x10/0x10 [ 74.844607][ T5947] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 74.849923][ T5947] ? aa_sk_perm+0x15f/0x920 [ 74.854808][ T5947] ? aa_sk_perm+0x7ee/0x920 [ 74.859530][ T5947] ? sock_rps_record_flow+0x19/0x410 [ 74.864865][ T5947] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 74.870162][ T5947] inet_recvmsg+0x24a/0x250 [ 74.874717][ T5947] ? __pfx_inet_recvmsg+0x10/0x10 [ 74.879747][ T5947] ? __lock_acquire+0x6b6/0x2cf0 [ 74.885112][ T5947] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 74.890393][ T5947] ? security_socket_recvmsg+0x7e/0x2e0 [ 74.896079][ T5947] sock_recvmsg+0x1a8/0x270 [ 74.900603][ T5947] ____sys_recvmsg+0x1c9/0x460 [ 74.905420][ T5947] ? __pfx_____sys_recvmsg+0x10/0x10 [ 74.910718][ T5947] ? import_iovec+0x74/0xa0 [ 74.915255][ T5947] ___sys_recvmsg+0x1b5/0x510 [ 74.919940][ T5947] ? __pfx____sys_recvmsg+0x10/0x10 [ 74.925187][ T5947] ? __fget_files+0x3a0/0x420 [ 74.929876][ T5947] do_recvmmsg+0x307/0x770 [ 74.934339][ T5947] ? __pfx_do_recvmmsg+0x10/0x10 [ 74.939406][ T5947] ? handle_mm_fault+0xdb/0x32b0 [ 74.944648][ T5947] __x64_sys_recvmmsg+0x190/0x240 [ 74.949686][ T5947] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 74.955277][ T5947] ? do_syscall_64+0xbe/0xf80 [ 74.959965][ T5947] do_syscall_64+0xfa/0xf80 [ 74.964807][ T5947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.970885][ T5947] ? clear_bhb_loop+0x60/0xb0 [ 74.975610][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.981514][ T5947] RIP: 0033:0x7f267b98f749 [ 74.985996][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.005653][ T5947] RSP: 002b:00007f267c87b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.014121][ T5947] RAX: ffffffffffffffda RBX: 00007f267bbe6090 RCX: 00007f267b98f749 [ 75.022092][ T5947] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 75.030092][ T5947] RBP: 00007f267ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.038164][ T5947] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 75.046556][ T5947] R13: 00007f267bbe6128 R14: 00007f267bbe6090 R15: 00007ffd0857fc98 [ 75.054878][ T5947] [ 75.057908][ T5947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.065189][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 75.074198][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.084259][ T5947] Call Trace: [ 75.087533][ T5947] [ 75.090451][ T5947] dump_stack_lvl+0x99/0x250 [ 75.095036][ T5947] ? __asan_memcpy+0x40/0x70 [ 75.099609][ T5947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.104794][ T5947] ? __pfx__printk+0x10/0x10 [ 75.109385][ T5947] vpanic+0x237/0x6d0 [ 75.113361][ T5947] ? __pfx_vpanic+0x10/0x10 [ 75.117861][ T5947] ? is_bpf_text_address+0x292/0x2b0 [ 75.123150][ T5947] ? is_bpf_text_address+0x26/0x2b0 [ 75.128357][ T5947] panic+0xb9/0xc0 [ 75.132079][ T5947] ? __pfx_panic+0x10/0x10 [ 75.136501][ T5947] __warn+0x317/0x4b0 [ 75.140487][ T5947] ? skb_attempt_defer_free+0x572/0x6d0 [ 75.146032][ T5947] ? skb_attempt_defer_free+0x572/0x6d0 [ 75.151571][ T5947] __report_bug+0x288/0x500 [ 75.156068][ T5947] ? skb_attempt_defer_free+0x572/0x6d0 [ 75.161619][ T5947] ? __pfx___report_bug+0x10/0x10 [ 75.166643][ T5947] ? __might_fault+0xb0/0x130 [ 75.171320][ T5947] ? skb_attempt_defer_free+0x572/0x6d0 [ 75.176854][ T5947] report_bug+0x16a/0x220 [ 75.181172][ T5947] ? skb_attempt_defer_free+0x572/0x6d0 [ 75.186704][ T5947] ? skb_attempt_defer_free+0x574/0x6d0 [ 75.192240][ T5947] handle_bug+0x98/0x200 [ 75.196476][ T5947] exc_invalid_op+0x1a/0x50 [ 75.200966][ T5947] asm_exc_invalid_op+0x1a/0x20 [ 75.205804][ T5947] RIP: 0010:skb_attempt_defer_free+0x572/0x6d0 [ 75.211950][ T5947] Code: ff e8 72 c4 8f f8 90 0f 0b 90 e9 a8 fb ff ff e8 64 c4 8f f8 eb 85 e8 5d c4 8f f8 90 0f 0b 90 e9 94 fc ff ff e8 4f c4 8f f8 90 <0f> 0b 90 e9 af fc ff ff e8 41 c4 8f f8 90 0f 0b 90 e9 da fc ff ff [ 75.231541][ T5947] RSP: 0018:ffffc9000479f400 EFLAGS: 00010287 [ 75.237599][ T5947] RAX: ffffffff8931ee01 RBX: ffff88805531cb40 RCX: 0000000000080000 [ 75.245562][ T5947] RDX: ffffc9000e449000 RSI: 0000000000004af2 RDI: 0000000000004af3 [ 75.253519][ T5947] RBP: ffffc9000479f4b0 R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 75.261475][ T5947] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: 0000000000000000 [ 75.269432][ T5947] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805531cba0 [ 75.277395][ T5947] ? skb_attempt_defer_free+0x571/0x6d0 [ 75.282937][ T5947] ? __lock_acquire+0x6b6/0x2cf0 [ 75.287859][ T5947] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 75.293753][ T5947] ? skb_consume_udp+0x90/0x260 [ 75.298598][ T5947] udp_recvmsg+0xdb0/0x1050 [ 75.303099][ T5947] ? __pfx_udp_recvmsg+0x10/0x10 [ 75.308027][ T5947] ? udp_bpf_recvmsg+0xe7/0xda0 [ 75.312869][ T5947] udp_bpf_recvmsg+0xb84/0xda0 [ 75.317638][ T5947] ? udp_bpf_recvmsg+0xe7/0xda0 [ 75.322499][ T5947] ? get_page_from_freelist+0x2365/0x2440 [ 75.328217][ T5947] ? __pfx___might_resched+0x10/0x10 [ 75.333519][ T5947] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 75.338800][ T5947] ? aa_sk_perm+0x15f/0x920 [ 75.343298][ T5947] ? aa_sk_perm+0x7ee/0x920 [ 75.347796][ T5947] ? sock_rps_record_flow+0x19/0x410 [ 75.353076][ T5947] ? __pfx_udp_bpf_recvmsg+0x10/0x10 [ 75.358350][ T5947] inet_recvmsg+0x24a/0x250 [ 75.362847][ T5947] ? __pfx_inet_recvmsg+0x10/0x10 [ 75.367857][ T5947] ? __lock_acquire+0x6b6/0x2cf0 [ 75.372783][ T5947] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 75.378051][ T5947] ? security_socket_recvmsg+0x7e/0x2e0 [ 75.383588][ T5947] sock_recvmsg+0x1a8/0x270 [ 75.388085][ T5947] ____sys_recvmsg+0x1c9/0x460 [ 75.392841][ T5947] ? __pfx_____sys_recvmsg+0x10/0x10 [ 75.398124][ T5947] ? import_iovec+0x74/0xa0 [ 75.402615][ T5947] ___sys_recvmsg+0x1b5/0x510 [ 75.407280][ T5947] ? __pfx____sys_recvmsg+0x10/0x10 [ 75.412494][ T5947] ? __fget_files+0x3a0/0x420 [ 75.417164][ T5947] do_recvmmsg+0x307/0x770 [ 75.421573][ T5947] ? __pfx_do_recvmmsg+0x10/0x10 [ 75.426497][ T5947] ? handle_mm_fault+0xdb/0x32b0 [ 75.431443][ T5947] __x64_sys_recvmmsg+0x190/0x240 [ 75.436457][ T5947] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 75.441994][ T5947] ? do_syscall_64+0xbe/0xf80 [ 75.446658][ T5947] do_syscall_64+0xfa/0xf80 [ 75.451162][ T5947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.457231][ T5947] ? clear_bhb_loop+0x60/0xb0 [ 75.461912][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.467804][ T5947] RIP: 0033:0x7f267b98f749 [ 75.472211][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.491805][ T5947] RSP: 002b:00007f267c87b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.500212][ T5947] RAX: ffffffffffffffda RBX: 00007f267bbe6090 RCX: 00007f267b98f749 [ 75.508171][ T5947] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 75.516127][ T5947] RBP: 00007f267ba13f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.524088][ T5947] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 75.532050][ T5947] R13: 00007f267bbe6128 R14: 00007f267bbe6090 R15: 00007ffd0857fc98 [ 75.540023][ T5947] [ 75.543174][ T5947] Kernel Offset: disabled [ 75.547492][ T5947] Rebooting in 86400 seconds..