last executing test programs: 2.545179096s ago: executing program 2 (id=3): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) timerfd_settime(r0, 0x2, 0x0, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 964.383413ms ago: executing program 3 (id=4): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x3920e, r0, 0x3, 0x1, 0x3, 0x6}) 880.093952ms ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x4, 0xc95d, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x49, 0x5, 0x85, 0xffffff01, 0x6, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0xfffffffd, 0x3, 0x9, 0x1, 0x1f461e2c, 0x4, 0xa, 0x4, 0x7, 0x2101, 0x7fff, 0x4c74, 0x451, 0x242, 0x3, 0x4ea2, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0xffffffff, 0x6, 0x30000006, 0x0, 0x5, 0x200, 0x8, 0x0, 0x80, 0x0, 0x9, 0x6, 0x8, 0x20000004, 0x1, 0x9], [0x1000, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff0, 0x129432e6, 0xcb, 0xf9, 0xd, 0x10, 0x6c9, 0x6, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0xff, 0x9, 0x400, 0x5, 0x6, 0x800, 0xff, 0x5, 0x5, 0x5f31, 0x8, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x800, 0x6, 0x7, 0x1, 0x1, 0xc, 0xff7f, 0xa, 0x7f, 0x4, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x9, 0x9, 0x48c93690, 0x42, 0xffffff0a], [0x3fc, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x8, 0x5, 0x1, 0x1ef, 0x5, 0x1, 0x87, 0x3, 0xf0000000, 0x3e7, 0x9, 0x5, 0x80002, 0x8, 0x7fffffff, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x4000007, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7fd, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x5, 0x800aaed, 0x8, 0x65], [0x9, 0xbbb1, 0x3, 0xb, 0x5, 0x938, 0xb, 0x6, 0xa, 0x5, 0xce7, 0x1ff, 0x2, 0xfff, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x5, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xc, 0xe, 0x6, 0x2, 0x80000000, 0x8, 0x8, 0xc8, 0x1a, 0x4, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0xfffffffe, 0x10080, 0x5, 0x6, 0xedf6, 0xfffffff7, 0x335e0ac3, 0x0, 0x1, 0x6c1b, 0x0, 0x3dfb, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0x40000fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 463.277863ms ago: executing program 2 (id=6): mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 0s ago: executing program 0 (id=1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@initdev, @remote}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x64, 0x0, 0x0, 0x79, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 160.608352][ T5793] cgroup: Unknown subsys name 'net' [ 160.752556][ T5793] cgroup: Unknown subsys name 'cpuset' [ 160.766696][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.060870][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.067596][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.349648][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 171.689070][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.697129][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.714053][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.722414][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.730056][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.738305][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.746174][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.755732][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.763480][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.774007][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.787064][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.787430][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.797554][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.805047][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.812566][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.823848][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.829851][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.832902][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.842817][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.855480][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.864589][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.867792][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.883154][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.903909][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.918965][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.875045][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 173.715313][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 173.811255][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 173.925117][ T5814] Bluetooth: hci2: command tx timeout [ 173.925190][ T49] Bluetooth: hci0: command tx timeout [ 173.925288][ T49] Bluetooth: hci1: command tx timeout [ 173.930698][ T5814] Bluetooth: hci4: command tx timeout [ 174.001435][ T5814] Bluetooth: hci3: command tx timeout [ 174.143472][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.150976][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.158900][ T5823] bridge_slave_0: entered allmulticast mode [ 174.168848][ T5823] bridge_slave_0: entered promiscuous mode [ 174.182968][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 174.253863][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.264185][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.271940][ T5823] bridge_slave_1: entered allmulticast mode [ 174.281366][ T5823] bridge_slave_1: entered promiscuous mode [ 174.292400][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 174.606025][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.675054][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.928699][ T5823] team0: Port device team_slave_0 added [ 175.027888][ T5823] team0: Port device team_slave_1 added [ 175.036892][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.044670][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.052388][ T5820] bridge_slave_0: entered allmulticast mode [ 175.061553][ T5820] bridge_slave_0: entered promiscuous mode [ 175.153081][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.160577][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.169099][ T5820] bridge_slave_1: entered allmulticast mode [ 175.178733][ T5820] bridge_slave_1: entered promiscuous mode [ 175.229971][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.237682][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.245635][ T5813] bridge_slave_0: entered allmulticast mode [ 175.255399][ T5813] bridge_slave_0: entered promiscuous mode [ 175.413341][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.420826][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.428722][ T5813] bridge_slave_1: entered allmulticast mode [ 175.437978][ T5813] bridge_slave_1: entered promiscuous mode [ 175.448681][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.457696][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.484012][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.497575][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.505240][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.513009][ T5818] bridge_slave_0: entered allmulticast mode [ 175.524002][ T5818] bridge_slave_0: entered promiscuous mode [ 175.666879][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.675285][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.702077][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.714862][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.722610][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.730099][ T5818] bridge_slave_1: entered allmulticast mode [ 175.738518][ T5818] bridge_slave_1: entered promiscuous mode [ 175.756528][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.767178][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.774824][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.782616][ T5812] bridge_slave_0: entered allmulticast mode [ 175.790655][ T5812] bridge_slave_0: entered promiscuous mode [ 175.894913][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.941632][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.949005][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.956579][ T5812] bridge_slave_1: entered allmulticast mode [ 175.966118][ T5812] bridge_slave_1: entered promiscuous mode [ 175.983855][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.024757][ T5814] Bluetooth: hci4: command tx timeout [ 176.028304][ T5109] Bluetooth: hci1: command tx timeout [ 176.030469][ T5814] Bluetooth: hci2: command tx timeout [ 176.041712][ T5814] Bluetooth: hci0: command tx timeout [ 176.081846][ T5814] Bluetooth: hci3: command tx timeout [ 176.128658][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.178237][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.194722][ T5820] team0: Port device team_slave_0 added [ 176.218442][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.272773][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.326633][ T5820] team0: Port device team_slave_1 added [ 176.370446][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.583720][ T5823] hsr_slave_0: entered promiscuous mode [ 176.593665][ T5823] hsr_slave_1: entered promiscuous mode [ 176.609663][ T5818] team0: Port device team_slave_0 added [ 176.665656][ T5813] team0: Port device team_slave_0 added [ 176.681429][ T5812] team0: Port device team_slave_0 added [ 176.695891][ T5813] team0: Port device team_slave_1 added [ 176.707803][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.715403][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.741768][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.760298][ T5818] team0: Port device team_slave_1 added [ 176.814596][ T5812] team0: Port device team_slave_1 added [ 176.890709][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.897924][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.924191][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.051501][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.059226][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.086170][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.116570][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.126124][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.152521][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.182653][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.189767][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.216138][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.352889][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.360341][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.386769][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.400213][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.407532][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.435218][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.453257][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.460349][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.486719][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.619341][ T5820] hsr_slave_0: entered promiscuous mode [ 177.629213][ T5820] hsr_slave_1: entered promiscuous mode [ 177.637791][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 177.643832][ T5820] Cannot create hsr debugfs directory [ 177.790777][ T5813] hsr_slave_0: entered promiscuous mode [ 177.800703][ T5813] hsr_slave_1: entered promiscuous mode [ 177.809241][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 177.815296][ T5813] Cannot create hsr debugfs directory [ 178.091652][ T5814] Bluetooth: hci1: command tx timeout [ 178.097246][ T5814] Bluetooth: hci0: command tx timeout [ 178.103120][ T5814] Bluetooth: hci2: command tx timeout [ 178.108674][ T5814] Bluetooth: hci4: command tx timeout [ 178.161396][ T5814] Bluetooth: hci3: command tx timeout [ 178.249933][ T5812] hsr_slave_0: entered promiscuous mode [ 178.258413][ T5812] hsr_slave_1: entered promiscuous mode [ 178.266571][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 178.272497][ T5812] Cannot create hsr debugfs directory [ 178.326974][ T5818] hsr_slave_0: entered promiscuous mode [ 178.337081][ T5818] hsr_slave_1: entered promiscuous mode [ 178.345831][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 178.351878][ T5818] Cannot create hsr debugfs directory [ 178.816377][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.856585][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.026357][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.150099][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.706020][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.750799][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.800020][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.824336][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.032571][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.093450][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.132351][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.173454][ T5814] Bluetooth: hci4: command tx timeout [ 180.187612][ T5814] Bluetooth: hci2: command tx timeout [ 180.193583][ T5814] Bluetooth: hci0: command tx timeout [ 180.198760][ T5832] Bluetooth: hci1: command tx timeout [ 180.226874][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.245676][ T5109] Bluetooth: hci3: command tx timeout [ 180.258584][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.319974][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.378520][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.432075][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.476662][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.645110][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.705533][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.713078][ T3890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.738539][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.876587][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.915763][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.923360][ T3890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.944410][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.012989][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.287374][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.585298][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.668823][ T1875] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.676411][ T1875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.830877][ T1875] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.838478][ T1875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.946753][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.979240][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.225761][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.249943][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.306936][ T1824] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.314598][ T1824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.395583][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.425295][ T1824] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.432855][ T1824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.453674][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.461243][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.679816][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.687569][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.746993][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.875639][ T3890] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.883195][ T3890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.930366][ T3890] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.937905][ T3890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.204782][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.694372][ T5823] veth0_vlan: entered promiscuous mode [ 183.807733][ T5823] veth1_vlan: entered promiscuous mode [ 184.145667][ T5823] veth0_macvtap: entered promiscuous mode [ 184.216156][ T5823] veth1_macvtap: entered promiscuous mode [ 184.422220][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.503074][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.522002][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.629996][ T1824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.734557][ T1824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.792759][ T1824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.833275][ T1824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.072156][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.097364][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.250895][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.645356][ T5813] veth0_vlan: entered promiscuous mode [ 185.693629][ T5818] veth0_vlan: entered promiscuous mode [ 185.786106][ T5818] veth1_vlan: entered promiscuous mode [ 185.799635][ T5813] veth1_vlan: entered promiscuous mode [ 185.928186][ T5812] veth0_vlan: entered promiscuous mode [ 186.036129][ T5812] veth1_vlan: entered promiscuous mode [ 186.155913][ T5813] veth0_macvtap: entered promiscuous mode [ 186.197987][ T5818] veth0_macvtap: entered promiscuous mode [ 186.230142][ T5813] veth1_macvtap: entered promiscuous mode [ 186.262846][ T5818] veth1_macvtap: entered promiscuous mode [ 186.468801][ T5812] veth0_macvtap: entered promiscuous mode [ 186.517726][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.548413][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.576607][ T5812] veth1_macvtap: entered promiscuous mode [ 186.624973][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.652780][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.768815][ T1875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.826877][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.846873][ T1875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.904299][ T1875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.936639][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.977179][ T1875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.054626][ T1875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.106253][ T1875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.184405][ T1875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.242707][ T1875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.298042][ T1875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.353053][ T3890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.415909][ T3890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.437966][ T5820] veth0_vlan: entered promiscuous mode [ 187.474096][ T3890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.582477][ T5820] veth1_vlan: entered promiscuous mode [ 187.876742][ T5820] veth0_macvtap: entered promiscuous mode [ 187.926833][ T5820] veth1_macvtap: entered promiscuous mode [ 188.083981][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.168444][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.298234][ T1814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.357678][ T5024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.446977][ T5024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.511942][ T5024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.332259][ T3839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.340274][ T3839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.520537][ T5024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.530010][ T5024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.043861][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 192.538580][ T5993] loop2: detected capacity change from 0 to 512 [ 192.713053][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.728462][ T5993] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.942119][ T30] audit: type=1800 audit(1758785127.858:2): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 192.969715][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.978008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.202849][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.211727][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.249445][ T30] audit: type=1800 audit(1758785127.938:3): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 193.290714][ T1824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.299649][ T1824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.370333][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.378983][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.905205][ T1814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.913470][ T1814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.198801][ T3839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.207074][ T3839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.282169][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.300636][ T6007] loop3: detected capacity change from 0 to 512 [ 194.627183][ T6007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.640609][ T6007] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.734856][ T6016] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.752784][ T5462] ===================================================== [ 194.760013][ T5462] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 194.768325][ T5462] _copy_to_iter+0xef3/0x33f0 [ 194.773944][ T5462] __skb_datagram_iter+0x196/0x12c0 [ 194.779425][ T5462] skb_copy_datagram_iter+0x5b/0x1e0 [ 194.785886][ T5462] netlink_recvmsg+0x4bb/0xfe0 [ 194.791926][ T5462] sock_recvmsg+0x2df/0x390 [ 194.796589][ T5462] ____sys_recvmsg+0x193/0x610 [ 194.802303][ T5462] ___sys_recvmsg+0x20b/0x850 [ 194.807163][ T5462] __x64_sys_recvmsg+0x20e/0x3d0 [ 194.813064][ T5462] x64_sys_call+0x35f0/0x3e20 [ 194.817939][ T5462] do_syscall_64+0xd9/0x210 [ 194.823387][ T5462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.829438][ T5462] [ 194.832609][ T5462] Uninit was stored to memory at: [ 194.837915][ T5462] pskb_expand_head+0x310/0x1610 [ 194.845360][ T5462] netlink_trim+0x496/0x500 [ 194.853754][ T5462] netlink_broadcast_filtered+0x80/0x2430 [ 194.859685][ T5462] nlmsg_notify+0x15b/0x2f0 [ 194.865568][ T5462] rtnl_notify+0xba/0x100 [ 194.870101][ T5462] wireless_nlevent_process+0xfe/0x290 [ 194.875908][ T5462] process_scheduled_works+0xb8e/0x1d80 [ 194.882645][ T5462] worker_thread+0xedf/0x1590 [ 194.887521][ T5462] kthread+0xd59/0xf00 [ 194.891846][ T5462] ret_from_fork+0x233/0x380 [ 194.896579][ T5462] ret_from_fork_asm+0x1a/0x30 [ 194.901772][ T5462] [ 194.904158][ T5462] Uninit was stored to memory at: [ 194.909380][ T5462] wireless_send_event+0x67f/0x1530 [ 194.914912][ T5462] ioctl_standard_iw_point+0x12d0/0x13f0 [ 194.920728][ T5462] compat_standard_call+0x188/0x4c0 [ 194.926288][ T5462] wext_ioctl_dispatch+0x192/0x7a0 [ 194.931649][ T5462] compat_wext_handle_ioctl+0x1a1/0x300 [ 194.935576][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.937337][ T5462] compat_sock_ioctl+0x20c/0xff0 [ 194.945377][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.954009][ T5462] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 194.967759][ T5462] ia32_sys_call+0x2d5f/0x4310 [ 194.972797][ T5462] __do_fast_syscall_32+0xb0/0x150 [ 194.978071][ T5462] do_fast_syscall_32+0x38/0x80 [ 194.983228][ T5462] do_SYSENTER_32+0x1f/0x30 [ 194.987875][ T5462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.994527][ T5462] [ 194.996931][ T5462] Local variable iwp created at: [ 195.002109][ T5462] compat_standard_call+0x4a/0x4c0 [ 195.007374][ T5462] wext_ioctl_dispatch+0x192/0x7a0 [ 195.012760][ T5462] [ 195.015235][ T5462] Bytes 60-63 of 64 are uninitialized [ 195.020689][ T5462] Memory access of size 64 starts at ffff8881190bc2c0 [ 195.027806][ T5462] Data copied to user address 00007ffef3bdc760 [ 195.034191][ T5462] [ 195.036631][ T5462] CPU: 0 UID: 101 PID: 5462 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 195.047822][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.061436][ T5462] ===================================================== [ 195.068469][ T5462] Disabling lock debugging due to kernel taint [ 195.075933][ T5462] Kernel panic - not syncing: kmsan.panic set ... [ 195.082492][ T5462] CPU: 0 UID: 101 PID: 5462 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 195.093353][ T5462] Tainted: [B]=BAD_PAGE [ 195.097596][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.107778][ T5462] Call Trace: [ 195.111163][ T5462] [ 195.114180][ T5462] __dump_stack+0x26/0x30 [ 195.118687][ T5462] dump_stack_lvl+0x53/0x270 [ 195.123642][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.129645][ T5462] dump_stack+0x1e/0x25 [ 195.134006][ T5462] vpanic+0x361/0xc50 [ 195.138199][ T5462] panic+0x15d/0x160 [ 195.142318][ T5462] kmsan_report+0x31c/0x320 [ 195.146992][ T5462] ? kmsan_internal_check_memory+0x1e1/0x230 [ 195.153140][ T5462] ? kmsan_copy_to_user+0xf1/0x190 [ 195.158411][ T5462] ? _copy_to_iter+0xef3/0x33f0 [ 195.163417][ T5462] ? __skb_datagram_iter+0x196/0x12c0 [ 195.168976][ T5462] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 195.174636][ T5462] ? netlink_recvmsg+0x4bb/0xfe0 [ 195.179768][ T5462] ? sock_recvmsg+0x2df/0x390 [ 195.184620][ T5462] ? ____sys_recvmsg+0x193/0x610 [ 195.189779][ T5462] ? ___sys_recvmsg+0x20b/0x850 [ 195.194841][ T5462] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 195.200167][ T5462] ? x64_sys_call+0x35f0/0x3e20 [ 195.205214][ T5462] ? do_syscall_64+0xd9/0x210 [ 195.210030][ T5462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.216269][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.222271][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.227548][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.232917][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.238979][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.244267][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.250265][ T5462] ? _raw_spin_trylock_bh+0xb1/0xc0 [ 195.255642][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.260955][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.266982][ T5462] kmsan_internal_check_memory+0x1e1/0x230 [ 195.272980][ T5462] kmsan_copy_to_user+0xf1/0x190 [ 195.278085][ T5462] _copy_to_iter+0xef3/0x33f0 [ 195.282924][ T5462] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 195.289429][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.294719][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.300703][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.305977][ T5462] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 195.312508][ T5462] __skb_datagram_iter+0x196/0x12c0 [ 195.317895][ T5462] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 195.323837][ T5462] skb_copy_datagram_iter+0x5b/0x1e0 [ 195.329327][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.335319][ T5462] netlink_recvmsg+0x4bb/0xfe0 [ 195.340272][ T5462] ? aa_sock_msg_perm+0x29c/0x2f0 [ 195.345483][ T5462] ? __pfx_netlink_recvmsg+0x10/0x10 [ 195.350962][ T5462] sock_recvmsg+0x2df/0x390 [ 195.355616][ T5462] ____sys_recvmsg+0x193/0x610 [ 195.360559][ T5462] ? setup_fault_attr+0x2e0/0x300 [ 195.365722][ T5462] ? stack_depot_save_flags+0x35/0x7b0 [ 195.371355][ T5462] ___sys_recvmsg+0x20b/0x850 [ 195.376245][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.382213][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.387477][ T5462] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 195.393437][ T5462] __x64_sys_recvmsg+0x20e/0x3d0 [ 195.398556][ T5462] ? kmsan_get_metadata+0xfb/0x160 [ 195.403831][ T5462] x64_sys_call+0x35f0/0x3e20 [ 195.408673][ T5462] do_syscall_64+0xd9/0x210 [ 195.413381][ T5462] ? irqentry_exit+0x16/0x60 [ 195.418208][ T5462] ? clear_bhb_loop+0x40/0x90 [ 195.423019][ T5462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.429048][ T5462] RIP: 0033:0x7f289d631407 [ 195.433569][ T5462] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 195.453391][ T5462] RSP: 002b:00007ffef3bdc650 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 195.461964][ T5462] RAX: ffffffffffffffda RBX: 00007f289d5a7740 RCX: 00007f289d631407 [ 195.470069][ T5462] RDX: 0000000000000040 RSI: 00007ffef3bdc6d0 RDI: 0000000000000009 [ 195.478147][ T5462] RBP: 0000557537dbdaa0 R08: 0000000000000000 R09: 0000000000000000 [ 195.486240][ T5462] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 195.494323][ T5462] R13: 00007ffef3be0830 R14: 0000000000000000 R15: 00007ffef3be0820 [ 195.502424][ T5462] [ 195.505864][ T5462] Kernel Offset: disabled [ 195.510252][ T5462] Rebooting in 86400 seconds..