last executing test programs: 35.18533951s ago: executing program 0 (id=100): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 34.642636037s ago: executing program 0 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c00028008000440000000010c000140000000000000000208000440000000000c00024000000002000000350900010073797a30000000000900020073797a320000000014efffff1000010000000000000000000000000a"], 0x94}}, 0x0) 34.280480575s ago: executing program 0 (id=102): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) splice(r1, &(0x7f0000000000)=0x3ff, r1, &(0x7f0000000100)=0x2, 0x100, 0x4) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x8, 0x8, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x200}, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000001680)=""/256, 0x100, 0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0xbb, 0x1000000757}) write$cgroup_int(r6, 0x0, 0x0) 32.998075407s ago: executing program 0 (id=108): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.396578461s ago: executing program 0 (id=112): socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) close(0x3) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610fac6f39d87f0000020800450000240000e0"], 0x0) 31.940049927s ago: executing program 0 (id=117): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x0, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) socket$packet(0x11, 0x3, 0x300) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000800) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) 16.692431531s ago: executing program 32 (id=117): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x0, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) socket$packet(0x11, 0x3, 0x300) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000800) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) 5.447251725s ago: executing program 4 (id=221): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) shutdown(r0, 0x1) 5.12864813s ago: executing program 2 (id=222): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x800000}, 0x5, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16], 0x38}, {0x0}], 0x2, 0x0, 0x0, 0x2200c0c0}, 0x0) 4.64463977s ago: executing program 2 (id=224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 4.603967693s ago: executing program 4 (id=225): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) splice(r1, &(0x7f0000000000)=0x3ff, r1, &(0x7f0000000100)=0x2, 0x100, 0x4) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x8, 0x8, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x200}, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000001680)=""/256, 0x100, 0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0xbb, 0x1000000757}) 4.132918151s ago: executing program 2 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}}, 0x20004055) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.951374765s ago: executing program 3 (id=229): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc000000", 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 3.594966912s ago: executing program 2 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) socket$kcm(0x11, 0xa, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x318, 0x158, 0x0, 0x148, 0x158, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x75}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0xfffffcaa, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3404, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x20, 0x0, 0x684}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@empty, @local, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "00d23e", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @dest_unreach={0x1, 0x6, 0x0, 0x5, '\x00', {0x2, 0x6, "df23ea", 0x80, 0x32, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) 3.510473889s ago: executing program 3 (id=231): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, @private1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7fff, 0x0, 0x0, 0x0, 0x800fffffff9, 0x80}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 3.40254597s ago: executing program 1 (id=232): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 3.251073165s ago: executing program 4 (id=233): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x800000}, 0x5, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16], 0x38}, {0x0}], 0x2, 0x0, 0x0, 0x2200c0c0}, 0x0) 3.005565845s ago: executing program 3 (id=234): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) shutdown(r0, 0x1) 2.809062681s ago: executing program 1 (id=235): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 2.758748889s ago: executing program 4 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 2.446202572s ago: executing program 3 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r3, &(0x7f0000000000), 0x0, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000000880), 0x0, 0x10102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r5], 0x38}}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 2.340639361s ago: executing program 4 (id=238): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)=""/236, 0x46, 0xec, 0x6}, 0x28) 2.239485212s ago: executing program 1 (id=239): setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x5b, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) 1.865485366s ago: executing program 4 (id=240): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.775436908s ago: executing program 1 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000004, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0x4}, {0xfff2, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x5, 0x5, {0x3, 0x4}}]}, 0x3c}}, 0x4000) 1.239262389s ago: executing program 3 (id=242): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) splice(r1, &(0x7f0000000000)=0x3ff, r1, &(0x7f0000000100)=0x2, 0x100, 0x4) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x8, 0x8, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x200}, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000001680)=""/256, 0x100, 0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) 1.00079492s ago: executing program 1 (id=243): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 654.279857ms ago: executing program 2 (id=244): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x1019, &(0x7f0000000840)=""/4121, 0x41100, 0xc}, 0x94) 446.40278ms ago: executing program 1 (id=245): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'pim6reg0\x00', {}, {}, 0x6, 0x1, 0x9}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'ipvlan0\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1, 0x6, 0x4, 0x3, 0x2], 0x2, 0x1}, {0xffffffffffffffff, [0x5, 0x6, 0x6, 0x6, 0x4, 0x1], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x0, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0xfffffef2, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 311.179881ms ago: executing program 2 (id=246): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 3 (id=247): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r1, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 158.526479][ T5753] cgroup: Unknown subsys name 'net' [ 158.650721][ T5753] cgroup: Unknown subsys name 'cpuset' [ 158.665004][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 164.279463][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 168.444434][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.455723][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.484079][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.493560][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.501426][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.514873][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.522935][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.534092][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.542966][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.559307][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.567953][ T5071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.577385][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.578400][ T5071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.602148][ T5071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.622344][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.636141][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.654038][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.674004][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.687515][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.698385][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.786004][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.795016][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.805135][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.820836][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.832045][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.988837][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 170.338328][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 170.383278][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 170.401344][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 170.711996][ T50] Bluetooth: hci2: command tx timeout [ 170.717606][ T50] Bluetooth: hci1: command tx timeout [ 170.725895][ T5071] Bluetooth: hci0: command tx timeout [ 170.781901][ T5071] Bluetooth: hci3: command tx timeout [ 170.953008][ T5071] Bluetooth: hci4: command tx timeout [ 170.967800][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.002089][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.009696][ T5778] bridge_slave_0: entered allmulticast mode [ 171.047450][ T5778] bridge_slave_0: entered promiscuous mode [ 171.076626][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 171.117005][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.126137][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.134643][ T5778] bridge_slave_1: entered allmulticast mode [ 171.145997][ T5778] bridge_slave_1: entered promiscuous mode [ 171.447934][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.485831][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.493930][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.501453][ T5771] bridge_slave_0: entered allmulticast mode [ 171.513367][ T5771] bridge_slave_0: entered promiscuous mode [ 171.527368][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.537582][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.546618][ T5774] bridge_slave_0: entered allmulticast mode [ 171.556768][ T5774] bridge_slave_0: entered promiscuous mode [ 171.613492][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.682381][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.689851][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.697679][ T5771] bridge_slave_1: entered allmulticast mode [ 171.705852][ T5771] bridge_slave_1: entered promiscuous mode [ 171.715948][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.723513][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.730822][ T5774] bridge_slave_1: entered allmulticast mode [ 171.739961][ T5774] bridge_slave_1: entered promiscuous mode [ 171.779150][ T5778] team0: Port device team_slave_0 added [ 171.849029][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.857739][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.865413][ T5783] bridge_slave_0: entered allmulticast mode [ 171.875075][ T5783] bridge_slave_0: entered promiscuous mode [ 171.894016][ T5778] team0: Port device team_slave_1 added [ 171.949195][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.956979][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.964763][ T5783] bridge_slave_1: entered allmulticast mode [ 171.973600][ T5783] bridge_slave_1: entered promiscuous mode [ 172.020139][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.061058][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.125393][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.166576][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.243782][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.250907][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.294428][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.314331][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.321376][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.347614][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.386016][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.394002][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.401337][ T5787] bridge_slave_0: entered allmulticast mode [ 172.410749][ T5787] bridge_slave_0: entered promiscuous mode [ 172.453546][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.470937][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.518349][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.526707][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.534466][ T5787] bridge_slave_1: entered allmulticast mode [ 172.543385][ T5787] bridge_slave_1: entered promiscuous mode [ 172.608754][ T5771] team0: Port device team_slave_0 added [ 172.625163][ T5771] team0: Port device team_slave_1 added [ 172.660008][ T5774] team0: Port device team_slave_0 added [ 172.699260][ T5783] team0: Port device team_slave_0 added [ 172.758364][ T5774] team0: Port device team_slave_1 added [ 172.782009][ T5071] Bluetooth: hci0: command tx timeout [ 172.782111][ T50] Bluetooth: hci2: command tx timeout [ 172.787570][ T5777] Bluetooth: hci1: command tx timeout [ 172.833386][ T5783] team0: Port device team_slave_1 added [ 172.861811][ T5777] Bluetooth: hci3: command tx timeout [ 172.874031][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.953506][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.960602][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.987023][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.007207][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.018816][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.026075][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.052297][ T5777] Bluetooth: hci4: command tx timeout [ 173.054872][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.083381][ T5778] hsr_slave_0: entered promiscuous mode [ 173.091936][ T5778] hsr_slave_1: entered promiscuous mode [ 173.126399][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.134010][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.160352][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.215191][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.222370][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.248718][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.280532][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.287999][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.314265][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.434844][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.442080][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.468289][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.508185][ T5787] team0: Port device team_slave_0 added [ 173.526045][ T5787] team0: Port device team_slave_1 added [ 173.770927][ T5771] hsr_slave_0: entered promiscuous mode [ 173.779430][ T5771] hsr_slave_1: entered promiscuous mode [ 173.787737][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 173.793663][ T5771] Cannot create hsr debugfs directory [ 173.825845][ T5774] hsr_slave_0: entered promiscuous mode [ 173.834918][ T5774] hsr_slave_1: entered promiscuous mode [ 173.842796][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 173.848607][ T5774] Cannot create hsr debugfs directory [ 173.861810][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.871197][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.897485][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.975769][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.982978][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.009781][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.034326][ T5783] hsr_slave_0: entered promiscuous mode [ 174.043432][ T5783] hsr_slave_1: entered promiscuous mode [ 174.050856][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 174.056928][ T5783] Cannot create hsr debugfs directory [ 174.554914][ T5787] hsr_slave_0: entered promiscuous mode [ 174.564160][ T5787] hsr_slave_1: entered promiscuous mode [ 174.572086][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 174.577946][ T5787] Cannot create hsr debugfs directory [ 174.862277][ T5071] Bluetooth: hci0: command tx timeout [ 174.862362][ T50] Bluetooth: hci2: command tx timeout [ 174.868611][ T5777] Bluetooth: hci1: command tx timeout [ 174.942187][ T5777] Bluetooth: hci3: command tx timeout [ 175.102109][ T5777] Bluetooth: hci4: command tx timeout [ 175.224488][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.275921][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.320254][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.372313][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.454825][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.552687][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.598469][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.619723][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.767259][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.789832][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.810813][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.830078][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.067060][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.086989][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.153968][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.210148][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.406589][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.427169][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.447042][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.479811][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.515039][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.733680][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.838348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.845749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.888310][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.937534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.943222][ T5777] Bluetooth: hci2: command tx timeout [ 176.945363][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.959410][ T50] Bluetooth: hci0: command tx timeout [ 176.965860][ T5777] Bluetooth: hci1: command tx timeout [ 177.023032][ T50] Bluetooth: hci3: command tx timeout [ 177.131586][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.152153][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.183508][ T50] Bluetooth: hci4: command tx timeout [ 177.259417][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.266999][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.307241][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.314937][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.435844][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.514074][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.521378][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.589767][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.597373][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.650594][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.775178][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.972801][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.039821][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.090714][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.098292][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.201223][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.208805][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.267146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.274650][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.394964][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.402549][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.001090][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.424807][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.550329][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.154534][ T5774] veth0_vlan: entered promiscuous mode [ 180.177920][ T5771] veth0_vlan: entered promiscuous mode [ 180.268594][ T5771] veth1_vlan: entered promiscuous mode [ 180.334696][ T5774] veth1_vlan: entered promiscuous mode [ 180.574636][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.629078][ T5771] veth0_macvtap: entered promiscuous mode [ 180.659654][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.747938][ T5771] veth1_macvtap: entered promiscuous mode [ 180.838665][ T5774] veth0_macvtap: entered promiscuous mode [ 180.855870][ T5778] veth0_vlan: entered promiscuous mode [ 180.927297][ T5774] veth1_macvtap: entered promiscuous mode [ 181.027250][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.067608][ T5778] veth1_vlan: entered promiscuous mode [ 181.128271][ T5787] veth0_vlan: entered promiscuous mode [ 181.154218][ T5783] veth0_vlan: entered promiscuous mode [ 181.176344][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.190034][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.238105][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.267049][ T5783] veth1_vlan: entered promiscuous mode [ 181.314300][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.324276][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.337759][ T5787] veth1_vlan: entered promiscuous mode [ 181.367940][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.381256][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.423901][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.435492][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.458881][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.469905][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.723186][ T5778] veth0_macvtap: entered promiscuous mode [ 181.775951][ T5783] veth0_macvtap: entered promiscuous mode [ 181.811188][ T5778] veth1_macvtap: entered promiscuous mode [ 181.916300][ T5783] veth1_macvtap: entered promiscuous mode [ 181.971505][ T5787] veth0_macvtap: entered promiscuous mode [ 182.020900][ T5787] veth1_macvtap: entered promiscuous mode [ 182.176201][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.227494][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.299236][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.343377][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.367447][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.516050][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.547388][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.607301][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.641446][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.682053][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.691080][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.818161][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.841902][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.850904][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.935583][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.965584][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.013346][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.062494][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.413858][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.445168][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.598689][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.651792][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.819728][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.852009][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.976261][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.012287][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.324313][ T5774] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.966788][ T5952] Zero length message leads to an empty skb [ 188.171138][ T5954] syzkaller0: entered promiscuous mode [ 188.179761][ T5954] syzkaller0: entered allmulticast mode [ 188.230939][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.279463][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.465241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 189.849447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.857776][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.942111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 189.953206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 189.982941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 190.005627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.383067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 190.786390][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.845342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.060063][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.103075][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.582429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 191.895377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.914176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 192.116148][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.132091][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.230018][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.277343][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.485305][ T5979] hub 8-0:1.0: USB hub found [ 192.493857][ T5979] hub 8-0:1.0: 1 port detected [ 194.173392][ T5987] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.346066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 195.474683][ T5993] ======================================================= [ 195.474683][ T5993] WARNING: The mand mount option has been deprecated and [ 195.474683][ T5993] and is ignored by this kernel. Remove the mand [ 195.474683][ T5993] option from the mount to silence this warning. [ 195.474683][ T5993] ======================================================= [ 195.686471][ T5993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.159097][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'. [ 203.376747][ T5997] tipc: Started in network mode [ 203.392072][ T5997] tipc: Node identity 2efbc3465a6e, cluster identity 4711 [ 203.410565][ T5997] tipc: Enabled bearer , priority 0 [ 203.493120][ T5997] tipc: Resetting bearer [ 203.555280][ T5995] tipc: Disabling bearer [ 204.007362][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.015373][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.218753][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 204.304587][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 204.318892][ T82] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.346029][ T82] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.369013][ T6010] tipc: Started in network mode [ 204.396176][ T6010] tipc: Node identity 168d60efb03b, cluster identity 4711 [ 204.419676][ T6010] tipc: Enabled bearer , priority 0 [ 204.552905][ T6012] syzkaller0: entered promiscuous mode [ 204.662597][ T6012] syzkaller0: entered allmulticast mode [ 204.711669][ T82] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.775588][ T6010] tipc: Resetting bearer [ 204.782651][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.810850][ T82] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.838670][ T6009] tipc: Resetting bearer [ 204.952612][ T6009] tipc: Disabling bearer [ 206.276187][ T6030] syzkaller0: entered promiscuous mode [ 206.282422][ T6030] syzkaller0: entered allmulticast mode [ 208.342518][ T6025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.375898][ T6070] tipc: Enabled bearer , priority 0 [ 210.084871][ T6070] syzkaller0: entered promiscuous mode [ 210.124716][ T6070] syzkaller0: entered allmulticast mode [ 210.167421][ T6070] tipc: Resetting bearer [ 210.259613][ T6069] tipc: Resetting bearer [ 210.711431][ T6069] tipc: Disabling bearer [ 210.784366][ T5827] tipc: Node number set to 2796970223 [ 210.791468][ T6087] syzkaller1: entered promiscuous mode [ 210.797454][ T6087] syzkaller1: entered allmulticast mode [ 211.334196][ T6102] warning: `syz.2.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.541336][ T6129] Illegal XDP return value 2488915250 on prog (id 8) dev N/A, expect packet loss! [ 214.316101][ T50] Bluetooth: hci4: link tx timeout [ 214.321400][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.330401][ T5777] Bluetooth: hci4: link tx timeout [ 214.336068][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.360549][ T5777] Bluetooth: hci4: link tx timeout [ 214.366247][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.374494][ T5777] Bluetooth: hci4: link tx timeout [ 214.380067][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.422097][ T5777] Bluetooth: hci4: link tx timeout [ 214.427769][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.435777][ T5777] Bluetooth: hci4: link tx timeout [ 214.441344][ T5777] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.780192][ T6156] tipc: Enabled bearer , priority 0 [ 214.805797][ T6156] syzkaller0: entered promiscuous mode [ 214.839872][ T6156] syzkaller0: entered allmulticast mode [ 214.911844][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 215.000267][ T6156] tipc: Resetting bearer [ 215.096004][ T6154] tipc: Resetting bearer [ 215.157492][ T6154] tipc: Disabling bearer [ 216.382481][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 217.733703][ T6217] tipc: Started in network mode [ 217.781280][ T6217] tipc: Node identity de6b554f311f, cluster identity 4711 [ 217.862803][ T6217] tipc: Enabled bearer , priority 0 [ 217.977024][ T6217] tipc: Resetting bearer [ 218.096184][ T6215] tipc: Disabling bearer [ 218.595454][ T6226] syzkaller0: entered promiscuous mode [ 218.631463][ T6226] syzkaller0: entered allmulticast mode [ 218.808707][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.99'. [ 219.996238][ T6252] tipc: Started in network mode [ 220.001472][ T6252] tipc: Node identity 76013f639f9, cluster identity 4711 [ 220.039277][ T6252] tipc: Enabled bearer , priority 0 [ 220.057510][ T6260] syzkaller0: entered promiscuous mode [ 220.087030][ T6260] syzkaller0: entered allmulticast mode [ 220.268773][ T6252] tipc: Resetting bearer [ 220.312821][ T6251] tipc: Resetting bearer [ 220.385457][ T6251] tipc: Disabling bearer [ 220.683684][ T6265] syzkaller0: entered promiscuous mode [ 220.726465][ T6265] syzkaller0: entered allmulticast mode [ 220.797376][ T6269] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 221.943172][ T6290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 223.320654][ T6310] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 225.792157][ T6346] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 226.708799][ T6354] tipc: Started in network mode [ 226.736792][ T6354] tipc: Node identity 5666e1b9550d, cluster identity 4711 [ 226.774461][ T6354] tipc: Enabled bearer , priority 0 [ 226.825010][ T6357] syzkaller0: entered promiscuous mode [ 226.830727][ T6357] syzkaller0: entered allmulticast mode [ 226.925805][ T6354] tipc: Resetting bearer [ 226.955897][ T6351] tipc: Resetting bearer [ 226.986109][ T6351] tipc: Disabling bearer [ 227.882981][ T6367] syzkaller0: entered promiscuous mode [ 227.888659][ T6367] syzkaller0: entered allmulticast mode [ 229.694331][ T6391] tipc: Enabled bearer , priority 0 [ 229.728157][ T6391] syzkaller0: entered promiscuous mode [ 229.750179][ T6391] syzkaller0: entered allmulticast mode [ 229.866373][ T6391] tipc: Resetting bearer [ 229.965597][ T6390] tipc: Resetting bearer [ 230.070504][ T6390] tipc: Disabling bearer [ 230.508634][ T6402] syzkaller0: entered promiscuous mode [ 230.515046][ T6402] syzkaller0: entered allmulticast mode [ 231.214754][ T6407] syzkaller0: entered promiscuous mode [ 231.228139][ T6407] syzkaller0: entered allmulticast mode [ 231.702855][ T6411] netlink: 72 bytes leftover after parsing attributes in process `syz.2.161'. [ 233.388125][ T6430] tipc: Enabled bearer , priority 0 [ 233.430114][ T6428] syzkaller0: entered promiscuous mode [ 233.464580][ T6428] syzkaller0: entered allmulticast mode [ 233.496055][ T6431] syzkaller0: entered promiscuous mode [ 233.532129][ T6431] syzkaller0: entered allmulticast mode [ 233.763249][ T6435] tipc: Resetting bearer [ 233.804048][ T6429] tipc: Resetting bearer [ 233.850220][ T6429] tipc: Disabling bearer [ 234.336337][ T6444] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 234.392108][ T6444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.174'. [ 234.658625][ T6444] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 234.735590][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 234.753127][ T6444] team0: Failed to send options change via netlink (err -105) [ 234.761221][ T6444] team0: Port device netdevsim1 added [ 234.777670][ T6449] netlink: 'syz.1.176': attribute type 5 has an invalid length. [ 234.930727][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 234.940134][ T6449] netlink: 'syz.1.176': attribute type 5 has an invalid length. [ 234.948716][ T3453] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.995778][ T3453] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.061929][ T3453] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.071016][ T3453] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.826801][ T6460] syzkaller0: entered promiscuous mode [ 235.852065][ T6460] syzkaller0: entered allmulticast mode [ 236.347238][ T6472] tipc: Enabled bearer , priority 0 [ 236.413650][ T6473] syzkaller0: entered promiscuous mode [ 236.438799][ T6473] syzkaller0: entered allmulticast mode [ 236.593349][ T6472] tipc: Resetting bearer [ 236.623044][ T6470] tipc: Resetting bearer [ 236.689697][ T6470] tipc: Disabling bearer [ 237.349852][ T6483] tipc: Enabled bearer , priority 0 [ 237.400220][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 237.444130][ T6483] syzkaller0: entered promiscuous mode [ 237.449778][ T6483] syzkaller0: entered allmulticast mode [ 237.452843][ T6486] netlink: 'syz.1.191': attribute type 5 has an invalid length. [ 237.563606][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 237.582189][ T6486] netlink: 'syz.1.191': attribute type 5 has an invalid length. [ 237.616789][ T6483] tipc: Resetting bearer [ 237.752806][ T6481] tipc: Resetting bearer [ 237.846828][ T6481] tipc: Disabling bearer [ 238.230635][ T6496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.252959][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.282664][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.309609][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.372833][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.402620][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.209484][ T6504] syzkaller0: entered promiscuous mode [ 239.252309][ T6504] syzkaller0: entered allmulticast mode [ 240.549685][ T5777] Bluetooth: hci5: command tx timeout [ 241.423889][ T6518] tipc: Enabled bearer , priority 0 [ 241.497666][ T6519] syzkaller0: entered promiscuous mode [ 241.522181][ T6519] syzkaller0: entered allmulticast mode [ 241.603858][ T6529] tipc: Resetting bearer [ 241.741910][ T6515] tipc: Resetting bearer [ 241.774721][ T6515] tipc: Disabling bearer [ 242.506470][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 242.623912][ T5777] Bluetooth: hci5: command tx timeout [ 244.711202][ T5777] Bluetooth: hci5: command tx timeout [ 244.773805][ T6570] syzkaller0: entered promiscuous mode [ 244.803987][ T6570] syzkaller0: entered allmulticast mode [ 246.842141][ T5777] Bluetooth: hci5: command tx timeout [ 247.611462][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.619067][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.627993][ T6498] bridge_slave_0: entered allmulticast mode [ 247.643367][ T6498] bridge_slave_0: entered promiscuous mode [ 247.657113][ T6579] tipc: Enabled bearer , priority 0 [ 247.725613][ T6593] tipc: Resetting bearer [ 247.783111][ T6581] syzkaller0: entered promiscuous mode [ 247.788738][ T6581] syzkaller0: entered allmulticast mode [ 247.923036][ T6575] tipc: Resetting bearer [ 248.009606][ T6575] tipc: Disabling bearer [ 248.132265][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.170890][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.202389][ T6498] bridge_slave_1: entered allmulticast mode [ 248.267267][ T6498] bridge_slave_1: entered promiscuous mode [ 248.336241][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.219'. [ 248.741183][ T6600] tipc: Enabled bearer , priority 0 [ 248.758336][ T6607] syzkaller0: entered promiscuous mode [ 248.818418][ T6607] syzkaller0: entered allmulticast mode [ 249.109743][ T6604] tipc: Resetting bearer [ 249.193420][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.252965][ T6598] tipc: Resetting bearer [ 249.289840][ T6598] tipc: Disabling bearer [ 249.506256][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.670152][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.860687][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.902358][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 250.029594][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.117877][ T6498] team0: Port device team_slave_0 added [ 250.206925][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.299658][ T6498] team0: Port device team_slave_1 added [ 250.756027][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.829513][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.901877][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.957334][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.002100][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.111736][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.110068][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'. [ 252.238261][ T6498] hsr_slave_0: entered promiscuous mode [ 252.312404][ T6498] hsr_slave_1: entered promiscuous mode [ 252.334926][ T6498] debugfs: 'hsr0' already exists in 'hsr' [ 252.352346][ T6498] Cannot create hsr debugfs directory [ 252.415031][ T1139] bridge_slave_1: left allmulticast mode [ 252.420835][ T1139] bridge_slave_1: left promiscuous mode [ 252.439209][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.535898][ T1139] bridge_slave_0: left allmulticast mode [ 252.554629][ T1139] bridge_slave_0: left promiscuous mode [ 252.585968][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.062910][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 253.319927][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.409415][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.475217][ T1139] bond0 (unregistering): Released all slaves [ 253.506872][ T6678] x_tables: ip_tables: ah match: only valid for protocol 51 [ 253.559612][ T6661] syzkaller1: entered promiscuous mode [ 253.572396][ T6661] syzkaller1: entered allmulticast mode [ 253.681863][ T5980] ===================================================== [ 253.694702][ T5980] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 253.701984][ T5980] __inet_bind+0x8a4/0xf20 [ 253.706570][ T5980] inet_bind+0x12c/0x1a0 [ 253.710989][ T5980] kernel_bind+0xd6/0x130 [ 253.717357][ T5980] rds_tcp_conn_path_connect+0x952/0xff0 [ 253.723273][ T5980] rds_connect_worker+0x353/0x4d0 [ 253.728492][ T5980] process_scheduled_works+0xb21/0x1e30 [ 253.734384][ T5980] worker_thread+0xede/0x1580 [ 253.742462][ T5980] kthread+0x53f/0x600 [ 253.747800][ T5980] ret_from_fork+0x20f/0x910 [ 253.753595][ T5980] ret_from_fork_asm+0x1a/0x30 [ 253.758578][ T5980] [ 253.760984][ T5980] Uninit was stored to memory at: [ 253.767957][ T5980] kernel_bind+0x92/0x130 [ 253.773480][ T5980] rds_tcp_conn_path_connect+0x952/0xff0 [ 253.779275][ T5980] rds_connect_worker+0x353/0x4d0 [ 253.786600][ T5980] process_scheduled_works+0xb21/0x1e30 [ 253.793684][ T5980] worker_thread+0xede/0x1580 [ 253.798521][ T5980] kthread+0x53f/0x600 [ 253.803740][ T5980] ret_from_fork+0x20f/0x910 [ 253.808501][ T5980] ret_from_fork_asm+0x1a/0x30 [ 253.814518][ T5980] [ 253.816919][ T5980] Uninit was stored to memory at: [ 253.823127][ T5980] rds_tcp_conn_path_connect+0xaf8/0xff0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 253.828915][ T5980] rds_connect_worker+0x353/0x4d0 [ 253.834309][ T5980] process_scheduled_works+0xb21/0x1e30 [ 253.842531][ T5980] worker_thread+0xede/0x1580 [ 253.847367][ T5980] kthread+0x53f/0x600 [ 253.853487][ T5980] ret_from_fork+0x20f/0x910 [ 253.858227][ T5980] ret_from_fork_asm+0x1a/0x30 [ 253.863296][ T5980] [ 253.865690][ T5980] Uninit was created at: [ 253.870135][ T5980] kmem_cache_alloc_noprof+0x37b/0x1270 [ 253.875978][ T5980] rds_tcp_conn_alloc+0x7b/0xbb0 [ 253.881057][ T5980] __rds_conn_create+0x267f/0x34e0 [ 253.886754][ T5980] rds_conn_create_outgoing+0x5d/0x80 [ 253.892448][ T5980] rds_sendmsg+0x2684/0x4d70 [ 253.897297][ T5980] ____sys_sendmsg+0xfe7/0x1080 [ 253.903371][ T5980] ___sys_sendmsg+0x271/0x3b0 [ 253.908201][ T5980] __x64_sys_sendmsg+0x211/0x3e0 [ 253.914210][ T5980] x64_sys_call+0x1e20/0x3ea0 [ 253.919085][ T5980] do_syscall_64+0x134/0xf80 [ 253.923933][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.929959][ T5980] [ 253.932560][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 253.945512][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.956905][ T5980] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 253.963375][ T5980] ===================================================== [ 253.970391][ T5980] Disabling lock debugging due to kernel taint [ 254.003359][ T5982] ===================================================== [ 254.010583][ T5982] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 254.017997][ T5982] __inet_bind+0x8a4/0xf20 [ 254.023129][ T5982] inet_bind+0x12c/0x1a0 [ 254.027501][ T5982] kernel_bind+0xd6/0x130 [ 254.032669][ T5982] rds_tcp_conn_path_connect+0x952/0xff0 [ 254.038456][ T5982] rds_connect_worker+0x353/0x4d0 [ 254.048691][ T5982] process_scheduled_works+0xb21/0x1e30 [ 254.056396][ T5982] worker_thread+0xede/0x1580 [ 254.061277][ T5982] kthread+0x53f/0x600 [ 254.066424][ T5982] ret_from_fork+0x20f/0x910 [ 254.071176][ T5982] ret_from_fork_asm+0x1a/0x30 [ 254.077001][ T5982] [ 254.079393][ T5982] Uninit was stored to memory at: [ 254.085602][ T5982] kernel_bind+0x92/0x130 [ 254.091088][ T5982] rds_tcp_conn_path_connect+0x952/0xff0 [ 254.099122][ T5982] rds_connect_worker+0x353/0x4d0 [ 254.104865][ T5982] process_scheduled_works+0xb21/0x1e30 [ 254.110562][ T5982] worker_thread+0xede/0x1580 [ 254.115489][ T5982] kthread+0x53f/0x600 [ 254.119720][ T5982] ret_from_fork+0x20f/0x910 [ 254.124613][ T5982] ret_from_fork_asm+0x1a/0x30 [ 254.129550][ T5982] [ 254.132009][ T5982] Uninit was stored to memory at: [ 254.137237][ T5982] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 254.143110][ T5982] rds_connect_worker+0x353/0x4d0 [ 254.153111][ T5982] process_scheduled_works+0xb21/0x1e30 [ 254.158821][ T5982] worker_thread+0xede/0x1580 [ 254.165071][ T5982] kthread+0x53f/0x600 [ 254.169306][ T5982] ret_from_fork+0x20f/0x910 [ 254.174147][ T5982] ret_from_fork_asm+0x1a/0x30 [ 254.179080][ T5982] [ 254.181471][ T5982] Uninit was created at: [ 254.186082][ T5982] kmem_cache_alloc_noprof+0x37b/0x1270 [ 254.191884][ T5982] rds_tcp_conn_alloc+0x7b/0xbb0 [ 254.196966][ T5982] __rds_conn_create+0x267f/0x34e0 [ 254.202294][ T5982] rds_conn_create_outgoing+0x5d/0x80 [ 254.207815][ T5982] rds_sendmsg+0x2684/0x4d70 [ 254.212633][ T5982] ____sys_sendmsg+0xfe7/0x1080 [ 254.217641][ T5982] ___sys_sendmsg+0x271/0x3b0 [ 254.222571][ T5982] __x64_sys_sendmsg+0x211/0x3e0 [ 254.227654][ T5982] x64_sys_call+0x1e20/0x3ea0 [ 254.232603][ T5982] do_syscall_64+0x134/0xf80 [ 254.237377][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.243583][ T5982] [ 254.246020][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u8:12 Tainted: G B syzkaller #0 PREEMPT(full) [ 254.262163][ T5982] Tainted: [B]=BAD_PAGE [ 254.266489][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.278294][ T5982] Workqueue: krds_cp_wq#1/0 rds_connect_worker [ 254.284813][ T5982] ===================================================== [ 254.775758][ T1139] tipc: Left network mode [ 254.940452][ T5982] Kernel panic - not syncing: kmsan.panic set ... [ 254.947042][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u8:12 Tainted: G B syzkaller #0 PREEMPT(full) [ 254.958337][ T5982] Tainted: [B]=BAD_PAGE [ 254.962573][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.972763][ T5982] Workqueue: krds_cp_wq#1/0 rds_connect_worker [ 254.979145][ T5982] Call Trace: [ 254.982519][ T5982] [ 254.985549][ T5982] __dump_stack+0x26/0x30 [ 254.990088][ T5982] dump_stack_lvl+0x50/0x1c0 [ 254.994840][ T5982] ? dump_stack+0x12/0x25 [ 254.999348][ T5982] dump_stack+0x1e/0x25 [ 255.003669][ T5982] vpanic+0x7b4/0x1430 [ 255.007925][ T5982] panic+0x15d/0x160 [ 255.012047][ T5982] kmsan_report+0x31a/0x320 [ 255.016729][ T5982] ? __msan_warning+0x1b/0x30 [ 255.021546][ T5982] ? __inet_bind+0x8a4/0xf20 [ 255.026295][ T5982] ? inet_bind+0x12c/0x1a0 [ 255.030855][ T5982] ? kernel_bind+0xd6/0x130 [ 255.035530][ T5982] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 255.041485][ T5982] ? rds_connect_worker+0x353/0x4d0 [ 255.046880][ T5982] ? process_scheduled_works+0xb21/0x1e30 [ 255.052736][ T5982] ? worker_thread+0xede/0x1580 [ 255.057719][ T5982] ? kthread+0x53f/0x600 [ 255.062102][ T5982] ? ret_from_fork+0x20f/0x910 [ 255.067002][ T5982] ? ret_from_fork_asm+0x1a/0x30 [ 255.072161][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 255.077510][ T5982] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.083503][ T5982] ? __rcu_read_unlock+0x6c/0xd0 [ 255.088641][ T5982] ? inet_addr_type_table+0x33b/0x560 [ 255.094172][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 255.099457][ T5982] __msan_warning+0x1b/0x30 [ 255.104101][ T5982] __inet_bind+0x8a4/0xf20 [ 255.108666][ T5982] inet_bind+0x12c/0x1a0 [ 255.113034][ T5982] ? __pfx_inet_bind+0x10/0x10 [ 255.117929][ T5982] kernel_bind+0xd6/0x130 [ 255.122410][ T5982] ? rds_tcp_tune+0x834/0xe60 [ 255.127208][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 255.132487][ T5982] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.138462][ T5982] rds_tcp_conn_path_connect+0x952/0xff0 [ 255.144231][ T5982] ? try_to_wake_up+0x107e/0x21e0 [ 255.149431][ T5982] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 255.155400][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 255.160692][ T5982] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 255.166985][ T5982] rds_connect_worker+0x353/0x4d0 [ 255.172188][ T5982] ? __pfx_rds_connect_worker+0x10/0x10 [ 255.177931][ T5982] process_scheduled_works+0xb21/0x1e30 [ 255.183683][ T5982] worker_thread+0xede/0x1580 [ 255.188551][ T5982] kthread+0x53f/0x600 [ 255.192783][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 255.198045][ T5982] ? __pfx_kthread+0x10/0x10 [ 255.202797][ T5982] ret_from_fork+0x20f/0x910 [ 255.207536][ T5982] ? __switch_to+0x51c/0x750 [ 255.212296][ T5982] ? __pfx_kthread+0x10/0x10 [ 255.217059][ T5982] ret_from_fork_asm+0x1a/0x30 [ 255.222067][ T5982] [ 255.225777][ T5982] Kernel Offset: disabled [ 255.230157][ T5982] Rebooting in 86400 seconds..