last executing test programs: 0s ago: executing program 1 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 154.925900][ T5762] cgroup: Unknown subsys name 'net' [ 155.069213][ T5762] cgroup: Unknown subsys name 'cpuset' [ 155.083705][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.543598][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.668882][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.681421][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.695881][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.703989][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.722188][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.731233][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.765333][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.766617][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.774493][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.786946][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.789508][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.805574][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.806525][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.821934][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.831594][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.894920][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.904019][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.942118][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.949762][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.959159][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.967012][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.982509][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.001402][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.015955][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.026487][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.200184][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 166.330047][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 166.518142][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 166.549342][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 166.894359][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 166.933352][ T5785] Bluetooth: hci2: command tx timeout [ 166.933423][ T5794] Bluetooth: hci1: command tx timeout [ 166.933511][ T5794] Bluetooth: hci0: command tx timeout [ 167.091940][ T5794] Bluetooth: hci3: command tx timeout [ 167.096877][ T5787] Bluetooth: hci4: command tx timeout [ 167.210558][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.225702][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.241212][ T5780] bridge_slave_0: entered allmulticast mode [ 167.254583][ T5780] bridge_slave_0: entered promiscuous mode [ 167.320788][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.328648][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.338661][ T5780] bridge_slave_1: entered allmulticast mode [ 167.348876][ T5780] bridge_slave_1: entered promiscuous mode [ 167.476495][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.484298][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.493409][ T5781] bridge_slave_0: entered allmulticast mode [ 167.503104][ T5781] bridge_slave_0: entered promiscuous mode [ 167.588132][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.596042][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.603838][ T5781] bridge_slave_1: entered allmulticast mode [ 167.612277][ T5781] bridge_slave_1: entered promiscuous mode [ 167.631025][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.735514][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.767433][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.775289][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.782951][ T5795] bridge_slave_0: entered allmulticast mode [ 167.791629][ T5795] bridge_slave_0: entered promiscuous mode [ 167.871329][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.878909][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.886772][ T5782] bridge_slave_0: entered allmulticast mode [ 167.895535][ T5782] bridge_slave_0: entered promiscuous mode [ 167.906346][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.913884][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.921988][ T5795] bridge_slave_1: entered allmulticast mode [ 167.930191][ T5795] bridge_slave_1: entered promiscuous mode [ 167.940797][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.948229][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.956474][ T5783] bridge_slave_0: entered allmulticast mode [ 167.964714][ T5783] bridge_slave_0: entered promiscuous mode [ 167.983608][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.002488][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.035487][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.043167][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.051076][ T5782] bridge_slave_1: entered allmulticast mode [ 168.059275][ T5782] bridge_slave_1: entered promiscuous mode [ 168.089706][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.097350][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.105302][ T5783] bridge_slave_1: entered allmulticast mode [ 168.113352][ T5783] bridge_slave_1: entered promiscuous mode [ 168.153140][ T5780] team0: Port device team_slave_0 added [ 168.256407][ T5780] team0: Port device team_slave_1 added [ 168.329292][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.348411][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.396953][ T5781] team0: Port device team_slave_0 added [ 168.433752][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.452386][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.468564][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.485289][ T5781] team0: Port device team_slave_1 added [ 168.614450][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.648677][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.655965][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.682726][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.702955][ T5782] team0: Port device team_slave_0 added [ 168.754431][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.761718][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.788039][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.801933][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.809010][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.836198][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.855438][ T5782] team0: Port device team_slave_1 added [ 168.868986][ T5795] team0: Port device team_slave_0 added [ 168.899768][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.907124][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.934154][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.994351][ T5795] team0: Port device team_slave_1 added [ 169.008162][ T5783] team0: Port device team_slave_0 added [ 169.014087][ T5787] Bluetooth: hci0: command tx timeout [ 169.020757][ T5787] Bluetooth: hci2: command tx timeout [ 169.020798][ T5794] Bluetooth: hci1: command tx timeout [ 169.026946][ T5783] team0: Port device team_slave_1 added [ 169.170737][ T5787] Bluetooth: hci4: command tx timeout [ 169.170774][ T5794] Bluetooth: hci3: command tx timeout [ 169.203715][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.210866][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.237039][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.296577][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.303927][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.330260][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.367478][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.374797][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.400973][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.415806][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.422995][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.449529][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.485979][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.493551][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.519920][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.544867][ T5780] hsr_slave_0: entered promiscuous mode [ 169.553226][ T5780] hsr_slave_1: entered promiscuous mode [ 169.579440][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.587645][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.613968][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.637308][ T5781] hsr_slave_0: entered promiscuous mode [ 169.645776][ T5781] hsr_slave_1: entered promiscuous mode [ 169.653952][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 169.659785][ T5781] Cannot create hsr debugfs directory [ 169.877928][ T5782] hsr_slave_0: entered promiscuous mode [ 169.886265][ T5782] hsr_slave_1: entered promiscuous mode [ 169.894940][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 169.900862][ T5782] Cannot create hsr debugfs directory [ 169.994013][ T5783] hsr_slave_0: entered promiscuous mode [ 170.002977][ T5783] hsr_slave_1: entered promiscuous mode [ 170.010769][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 170.016607][ T5783] Cannot create hsr debugfs directory [ 170.142589][ T5795] hsr_slave_0: entered promiscuous mode [ 170.151139][ T5795] hsr_slave_1: entered promiscuous mode [ 170.158562][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 170.164761][ T5795] Cannot create hsr debugfs directory [ 171.090701][ T5787] Bluetooth: hci2: command tx timeout [ 171.090786][ T5794] Bluetooth: hci1: command tx timeout [ 171.096265][ T5785] Bluetooth: hci0: command tx timeout [ 171.205870][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.233392][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.251568][ T5787] Bluetooth: hci3: command tx timeout [ 171.257486][ T5785] Bluetooth: hci4: command tx timeout [ 171.273569][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.292558][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.392772][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.453397][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.493288][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.536608][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.648232][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.693211][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.731528][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.755500][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.964354][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.014696][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.036655][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.057911][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.342519][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.385132][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.408098][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.426096][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.460247][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.584554][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.699915][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.707328][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.748209][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.755756][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.854195][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.113772][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.154261][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.170864][ T5785] Bluetooth: hci0: command tx timeout [ 173.176482][ T5785] Bluetooth: hci2: command tx timeout [ 173.182542][ T5787] Bluetooth: hci1: command tx timeout [ 173.185312][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.195442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.227808][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.298237][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.320331][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.327743][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.331623][ T5787] Bluetooth: hci3: command tx timeout [ 173.340699][ T5785] Bluetooth: hci4: command tx timeout [ 173.425776][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.453992][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.461533][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.538657][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.546212][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.611142][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.618434][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.679761][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.687404][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.784002][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.979954][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.051785][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.059085][ T4182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.144302][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.151759][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.269659][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.966991][ T5780] veth0_vlan: entered promiscuous mode [ 175.219992][ T5780] veth1_vlan: entered promiscuous mode [ 175.268592][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.661207][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.769251][ T5780] veth0_macvtap: entered promiscuous mode [ 175.825193][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.924069][ T5780] veth1_macvtap: entered promiscuous mode [ 176.108975][ T5781] veth0_vlan: entered promiscuous mode [ 176.158384][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.189557][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.296608][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.368972][ T5781] veth1_vlan: entered promiscuous mode [ 176.411774][ T4175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.435972][ T4175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.481092][ T4175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.612388][ T4175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.857932][ T5782] veth0_vlan: entered promiscuous mode [ 176.994290][ T5781] veth0_macvtap: entered promiscuous mode [ 177.025465][ T5795] veth0_vlan: entered promiscuous mode [ 177.083132][ T5782] veth1_vlan: entered promiscuous mode [ 177.108366][ T5781] veth1_macvtap: entered promiscuous mode [ 177.237787][ T5783] veth0_vlan: entered promiscuous mode [ 177.248430][ T5795] veth1_vlan: entered promiscuous mode [ 177.349869][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.403154][ T5783] veth1_vlan: entered promiscuous mode [ 177.435683][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.548224][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.561429][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.576171][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.628724][ T5782] veth0_macvtap: entered promiscuous mode [ 177.659815][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.746575][ T5782] veth1_macvtap: entered promiscuous mode [ 177.796929][ T5795] veth0_macvtap: entered promiscuous mode [ 177.909512][ T5795] veth1_macvtap: entered promiscuous mode [ 177.975876][ T5783] veth0_macvtap: entered promiscuous mode [ 178.079338][ T5783] veth1_macvtap: entered promiscuous mode [ 178.113518][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.210116][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.243852][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.343409][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.353864][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.404470][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.433622][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.443539][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.462655][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.527945][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.609240][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.640893][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.717767][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.765153][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.836806][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.882849][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.929573][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.945647][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.099487][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.170733][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.444405][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.494773][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.935335][ T5780] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 182.328217][ T5940] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 182.337333][ T5940] ===================================================== [ 182.344638][ T5940] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 182.352592][ T5940] dvbdmx_release_ts_feed+0x198/0x290 [ 182.358566][ T5940] dvb_dmxdev_add_pid+0xacc/0xb50 [ 182.363793][ T5940] dvb_demux_do_ioctl+0x78b/0xc80 [ 182.368947][ T5940] dvb_usercopy+0x263/0x500 [ 182.374398][ T5940] dvb_demux_ioctl+0x46/0x70 [ 182.379607][ T5940] __se_sys_ioctl+0x23c/0x400 [ 182.387746][ T5940] __x64_sys_ioctl+0x97/0xe0 [ 182.392576][ T5940] x64_sys_call+0x1975/0x3ea0 [ 182.397410][ T5940] do_syscall_64+0x134/0xf80 [ 182.402303][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.408334][ T5940] [ 182.410778][ T5940] Uninit was created at: [ 182.415228][ T5940] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 182.421398][ T5940] alloc_pages_mpol+0x328/0x860 [ 182.426425][ T5940] alloc_pages_noprof+0x101/0x280 [ 182.432929][ T5940] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 182.438980][ T5940] __vmalloc_noprof+0x128/0x1f0 [ 182.444027][ T5940] vmalloc_array_noprof+0x48/0x80 [ 182.449219][ T5940] dvb_dmx_init+0x121/0x930 [ 182.454491][ T5940] vidtv_bridge_probe+0x1b1f/0x2690 [ 182.459868][ T5940] platform_probe+0x213/0x370 [ 182.465292][ T5940] really_probe+0x4d5/0xe40 [ 182.469917][ T5940] __driver_probe_device+0x25e/0x370 [ 182.475497][ T5940] driver_probe_device+0x70/0x8f0 [ 182.480707][ T5940] __driver_attach+0x541/0xaa0 [ 182.485638][ T5940] bus_for_each_dev+0x33b/0x580 [ 182.490707][ T5940] driver_attach+0x51/0x70 [ 182.495290][ T5940] bus_add_driver+0x54f/0xdb0 [ 182.500102][ T5940] driver_register+0x42e/0x6a0 [ 182.505089][ T5940] __platform_driver_register+0x65/0x80 [ 182.510866][ T5940] vidtv_bridge_init+0x73/0x100 [ 182.515874][ T5940] do_one_initcall+0x237/0xbb0 [ 182.520919][ T5940] do_initcall_level+0x157/0x350 [ 182.525976][ T5940] do_initcalls+0x176/0x310 [ 182.530676][ T5940] do_basic_setup+0x1d/0x30 [ 182.535297][ T5940] kernel_init_freeable+0x213/0x460 [ 182.540690][ T5940] kernel_init+0x2f/0x5e0 [ 182.545256][ T5940] ret_from_fork+0x20f/0x910 [ 182.549983][ T5940] ret_from_fork_asm+0x1a/0x30 [ 182.555263][ T5940] [ 182.557689][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 182.566915][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.577127][ T5940] ===================================================== [ 182.584255][ T5940] Disabling lock debugging due to kernel taint [ 182.664690][ T5940] Kernel panic - not syncing: kmsan.panic set ... [ 182.671269][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.1.2 Tainted: G B syzkaller #0 PREEMPT(full) [ 182.682037][ T5940] Tainted: [B]=BAD_PAGE [ 182.686266][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.696434][ T5940] Call Trace: [ 182.699794][ T5940] [ 182.702831][ T5940] __dump_stack+0x26/0x30 [ 182.707320][ T5940] dump_stack_lvl+0x50/0x1c0 [ 182.712054][ T5940] ? dump_stack+0x12/0x25 [ 182.716541][ T5940] dump_stack+0x1e/0x25 [ 182.720839][ T5940] vpanic+0x7b4/0x1430 [ 182.725091][ T5940] panic+0x15d/0x160 [ 182.729194][ T5940] kmsan_report+0x31a/0x320 [ 182.733880][ T5940] ? vprintk_emit+0xb60/0xba0 [ 182.738728][ T5940] ? __msan_warning+0x1b/0x30 [ 182.743565][ T5940] ? dvbdmx_release_ts_feed+0x198/0x290 [ 182.749264][ T5940] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 182.754598][ T5940] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 182.759933][ T5940] ? dvb_usercopy+0x263/0x500 [ 182.764816][ T5940] ? dvb_demux_ioctl+0x46/0x70 [ 182.769720][ T5940] ? __se_sys_ioctl+0x23c/0x400 [ 182.774740][ T5940] ? __x64_sys_ioctl+0x97/0xe0 [ 182.779671][ T5940] ? x64_sys_call+0x1975/0x3ea0 [ 182.784689][ T5940] ? do_syscall_64+0x134/0xf80 [ 182.789601][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.795852][ T5940] ? irqentry_exit+0x8f/0x6c0 [ 182.800689][ T5940] ? kmsan_get_metadata+0xf1/0x160 [ 182.805991][ T5940] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 182.812489][ T5940] ? kmsan_get_metadata+0xf1/0x160 [ 182.817777][ T5940] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 182.823792][ T5940] ? preempt_schedule_common+0x5b/0x80 [ 182.829391][ T5940] ? preempt_schedule+0x30/0x40 [ 182.834368][ T5940] ? preempt_schedule_thunk+0x16/0x30 [ 182.839880][ T5940] ? _raw_spin_unlock_irq+0x47/0x50 [ 182.845207][ T5940] ? kmsan_get_metadata+0x146/0x160 [ 182.850595][ T5940] __msan_warning+0x1b/0x30 [ 182.855265][ T5940] dvbdmx_release_ts_feed+0x198/0x290 [ 182.860838][ T5940] dvb_dmxdev_add_pid+0xacc/0xb50 [ 182.866027][ T5940] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 182.872134][ T5940] dvb_demux_do_ioctl+0x78b/0xc80 [ 182.877338][ T5940] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 182.883040][ T5940] dvb_usercopy+0x263/0x500 [ 182.887905][ T5940] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 182.893637][ T5940] ? kmsan_get_metadata+0xf1/0x160 [ 182.898951][ T5940] dvb_demux_ioctl+0x46/0x70 [ 182.903674][ T5940] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 182.909104][ T5940] __se_sys_ioctl+0x23c/0x400 [ 182.913966][ T5940] __x64_sys_ioctl+0x97/0xe0 [ 182.918763][ T5940] x64_sys_call+0x1975/0x3ea0 [ 182.923609][ T5940] do_syscall_64+0x134/0xf80 [ 182.928361][ T5940] ? clear_bhb_loop+0x50/0xa0 [ 182.933189][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.939237][ T5940] RIP: 0033:0x7f42dc19c799 [ 182.943767][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.963773][ T5940] RSP: 002b:00007f42dd001028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.972345][ T5940] RAX: ffffffffffffffda RBX: 00007f42dc416180 RCX: 00007f42dc19c799 [ 182.980438][ T5940] RDX: 0000200000000100 RSI: 0000000040026f33 RDI: 0000000000000008 [ 182.988517][ T5940] RBP: 00007f42dc232c99 R08: 0000000000000000 R09: 0000000000000000 [ 182.996599][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.004671][ T5940] R13: 00007f42dc416218 R14: 00007f42dc416180 R15: 00007ffc78d536a8 [ 183.012810][ T5940] [ 183.016197][ T5940] Kernel Offset: disabled [ 183.020563][ T5940] Rebooting in 86400 seconds..