last executing test programs: 3.671158179s ago: executing program 1 (id=2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 2.948140226s ago: executing program 1 (id=6): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 2.539356379s ago: executing program 0 (id=1): r0 = fsopen(&(0x7f0000000380)='gfs2meta\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 1 [ 162.869494][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.911576][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.942671][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.954761][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.965930][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.975854][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.985009][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.993374][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.007337][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.017401][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.031352][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.068131][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.074956][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.091699][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.102325][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.128944][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.129328][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.145190][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.155830][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.175673][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.188638][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.196655][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.211972][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.227825][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.259258][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.373208][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.269232][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 164.630702][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 164.710851][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 165.042311][ T5798] Bluetooth: hci0: command tx timeout [ 165.080276][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 165.202665][ T5798] Bluetooth: hci2: command tx timeout [ 165.283247][ T5798] Bluetooth: hci3: command tx timeout [ 165.288837][ T5798] Bluetooth: hci1: command tx timeout [ 165.389495][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.397825][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.413872][ T5808] bridge_slave_0: entered allmulticast mode [ 165.423268][ T5808] bridge_slave_0: entered promiscuous mode [ 165.450123][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.457786][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.465903][ T5808] bridge_slave_1: entered allmulticast mode [ 165.474946][ T5808] bridge_slave_1: entered promiscuous mode [ 165.522639][ T50] Bluetooth: hci4: command tx timeout [ 165.525174][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 165.714962][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.722576][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.730145][ T5805] bridge_slave_0: entered allmulticast mode [ 165.741494][ T5805] bridge_slave_0: entered promiscuous mode [ 165.825713][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.842509][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.849980][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.857847][ T5805] bridge_slave_1: entered allmulticast mode [ 165.866846][ T5805] bridge_slave_1: entered promiscuous mode [ 165.887074][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.954398][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.961867][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.972299][ T5797] bridge_slave_0: entered allmulticast mode [ 165.981352][ T5797] bridge_slave_0: entered promiscuous mode [ 166.111008][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.120775][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.128462][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.137098][ T5797] bridge_slave_1: entered allmulticast mode [ 166.145535][ T5797] bridge_slave_1: entered promiscuous mode [ 166.223768][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.307380][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.321862][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.329645][ T5801] bridge_slave_0: entered allmulticast mode [ 166.338774][ T5801] bridge_slave_0: entered promiscuous mode [ 166.354990][ T5808] team0: Port device team_slave_0 added [ 166.363271][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.370710][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.378960][ T5801] bridge_slave_1: entered allmulticast mode [ 166.388056][ T5801] bridge_slave_1: entered promiscuous mode [ 166.465276][ T5808] team0: Port device team_slave_1 added [ 166.514331][ T5805] team0: Port device team_slave_0 added [ 166.532741][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.623348][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.639794][ T5805] team0: Port device team_slave_1 added [ 166.655687][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.672443][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.846080][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.853221][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.879435][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.015401][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.023787][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.051173][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.064093][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.071523][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.079367][ T5810] bridge_slave_0: entered allmulticast mode [ 167.087439][ T5810] bridge_slave_0: entered promiscuous mode [ 167.106558][ T5801] team0: Port device team_slave_0 added [ 167.114165][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.121603][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.129368][ T5810] bridge_slave_1: entered allmulticast mode [ 167.138466][ T5810] bridge_slave_1: entered promiscuous mode [ 167.147672][ T50] Bluetooth: hci0: command tx timeout [ 167.149170][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.160425][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.187068][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.238800][ T5797] team0: Port device team_slave_0 added [ 167.282316][ T50] Bluetooth: hci2: command tx timeout [ 167.304168][ T5801] team0: Port device team_slave_1 added [ 167.332595][ T5797] team0: Port device team_slave_1 added [ 167.341334][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.348599][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.375227][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.382994][ T50] Bluetooth: hci1: command tx timeout [ 167.391532][ T5798] Bluetooth: hci3: command tx timeout [ 167.400831][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.528275][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.599145][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.606476][ T50] Bluetooth: hci4: command tx timeout [ 167.614072][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.640386][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.654595][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.661701][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.689352][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.786149][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.794047][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.821281][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.835383][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.842624][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.869404][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.925500][ T5808] hsr_slave_0: entered promiscuous mode [ 167.935117][ T5808] hsr_slave_1: entered promiscuous mode [ 167.997353][ T5805] hsr_slave_0: entered promiscuous mode [ 168.006856][ T5805] hsr_slave_1: entered promiscuous mode [ 168.015273][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 168.021151][ T5805] Cannot create hsr debugfs directory [ 168.049116][ T5810] team0: Port device team_slave_0 added [ 168.068679][ T5810] team0: Port device team_slave_1 added [ 168.209072][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.217000][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.243994][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.379836][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.387865][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.415108][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.504585][ T5801] hsr_slave_0: entered promiscuous mode [ 168.514173][ T5801] hsr_slave_1: entered promiscuous mode [ 168.522495][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 168.528354][ T5801] Cannot create hsr debugfs directory [ 168.610333][ T5797] hsr_slave_0: entered promiscuous mode [ 168.618895][ T5797] hsr_slave_1: entered promiscuous mode [ 168.626950][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 168.632875][ T5797] Cannot create hsr debugfs directory [ 168.933471][ T5810] hsr_slave_0: entered promiscuous mode [ 168.945839][ T5810] hsr_slave_1: entered promiscuous mode [ 168.954325][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 168.960198][ T5810] Cannot create hsr debugfs directory [ 169.210200][ T50] Bluetooth: hci0: command tx timeout [ 169.364912][ T50] Bluetooth: hci2: command tx timeout [ 169.443775][ T50] Bluetooth: hci1: command tx timeout [ 169.449405][ T5798] Bluetooth: hci3: command tx timeout [ 169.682571][ T5798] Bluetooth: hci4: command tx timeout [ 169.951695][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.970111][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.999971][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.018486][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.190897][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.210485][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.248677][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.271685][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.294845][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.316558][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.361793][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.418843][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.578533][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.625092][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.698415][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.758371][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.851052][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.955082][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.980444][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.044301][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.209645][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.282906][ T5798] Bluetooth: hci0: command tx timeout [ 171.307612][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.344090][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.351689][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.445301][ T5798] Bluetooth: hci2: command tx timeout [ 171.455634][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.463167][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.530530][ T5798] Bluetooth: hci3: command tx timeout [ 171.531566][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.536793][ T50] Bluetooth: hci1: command tx timeout [ 171.750467][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.767602][ T5798] Bluetooth: hci4: command tx timeout [ 171.896401][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.942961][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.961703][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.019880][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.027504][ T1873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.097208][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.149012][ T1873] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.156582][ T1873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.174727][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.182375][ T1873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.255315][ T1873] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.262919][ T1873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.284971][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.292536][ T1873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.403482][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.411050][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.624000][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.637168][ T5805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.648762][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.755271][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.957371][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.964905][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.985849][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.993394][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.076566][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.349617][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.391064][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.851129][ T5808] veth0_vlan: entered promiscuous mode [ 174.000482][ T5808] veth1_vlan: entered promiscuous mode [ 174.310161][ T5808] veth0_macvtap: entered promiscuous mode [ 174.417311][ T5808] veth1_macvtap: entered promiscuous mode [ 174.595555][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.664624][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.704849][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.728598][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.748818][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.865593][ T3857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.914072][ T3857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.967975][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.023143][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.244831][ T5810] veth0_vlan: entered promiscuous mode [ 175.315045][ T5801] veth0_vlan: entered promiscuous mode [ 175.350035][ T5810] veth1_vlan: entered promiscuous mode [ 175.416881][ T5801] veth1_vlan: entered promiscuous mode [ 175.436985][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.720091][ T5801] veth0_macvtap: entered promiscuous mode [ 175.733344][ T5810] veth0_macvtap: entered promiscuous mode [ 175.819305][ T5801] veth1_macvtap: entered promiscuous mode [ 175.837185][ T5810] veth1_macvtap: entered promiscuous mode [ 176.028324][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.038041][ T5797] veth0_vlan: entered promiscuous mode [ 176.080476][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.135116][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.175489][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.218095][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.249006][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.263324][ T5797] veth1_vlan: entered promiscuous mode [ 176.318371][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.371326][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.423583][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.471467][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.517024][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.581024][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.660758][ T5797] veth0_macvtap: entered promiscuous mode [ 176.721926][ T5797] veth1_macvtap: entered promiscuous mode [ 176.924769][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.953350][ T5805] veth0_vlan: entered promiscuous mode [ 177.035196][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.065504][ T5805] veth1_vlan: entered promiscuous mode [ 177.158150][ T3531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.209361][ T3531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.284138][ T1888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.335181][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.418736][ T5805] veth0_macvtap: entered promiscuous mode [ 177.478361][ T5805] veth1_macvtap: entered promiscuous mode [ 177.643101][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.749649][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.829712][ T1888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.895650][ T3785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.964623][ T3785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.024445][ T3785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.801053][ T1873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.809741][ T1873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.820639][ T1888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.828839][ T1888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.225098][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 181.788720][ T5969] Bluetooth: MGMT ver 1.23 [ 181.953436][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.961443][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.069095][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.077256][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.196627][ T1873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.207347][ T1873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.337291][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.345576][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.011167][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.019377][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.161489][ T5980] gfs2: path_lookup on c::: returned error -2 [ 183.360169][ T4911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.368662][ T4911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.428995][ T3785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.438908][ T3785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.754277][ T3785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.762577][ T3785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.859268][ T5798] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.867001][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.978272][ T5988] loop0: detected capacity change from 0 to 256 [ 184.138882][ T5988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 184.895751][ T6004] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11'. [ 185.146226][ T6006] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.163719][ T5448] ===================================================== [ 185.170942][ T5448] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 185.182463][ T5448] _copy_to_iter+0xef3/0x33f0 [ 185.188374][ T5448] __skb_datagram_iter+0x196/0x12c0 [ 185.193876][ T5448] skb_copy_datagram_iter+0x5b/0x1e0 [ 185.199329][ T5448] netlink_recvmsg+0x4bb/0xfe0 [ 185.204510][ T5448] sock_recvmsg+0x2df/0x390 [ 185.209153][ T5448] ____sys_recvmsg+0x193/0x610 [ 185.214297][ T5448] ___sys_recvmsg+0x20b/0x850 [ 185.219145][ T5448] __x64_sys_recvmsg+0x20e/0x3d0 [ 185.224513][ T5448] x64_sys_call+0x35f0/0x3e30 [ 185.229352][ T5448] do_syscall_64+0xd9/0xfa0 [ 185.234125][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.240175][ T5448] [ 185.242790][ T5448] Uninit was stored to memory at: [ 185.248066][ T5448] pskb_expand_head+0x310/0x1610 [ 185.253391][ T5448] netlink_trim+0x496/0x500 [ 185.258064][ T5448] netlink_broadcast_filtered+0x80/0x28f0 [ 185.264166][ T5448] nlmsg_notify+0x15b/0x2f0 [ 185.268843][ T5448] rtnl_notify+0xba/0x100 [ 185.273499][ T5448] wireless_nlevent_process+0xfe/0x290 [ 185.282482][ T5448] process_scheduled_works+0xb91/0x1d80 [ 185.288222][ T5448] worker_thread+0xedf/0x1590 [ 185.294408][ T5448] kthread+0xd5c/0xf00 [ 185.298605][ T5448] ret_from_fork+0x1f5/0x4c0 [ 185.303566][ T5448] ret_from_fork_asm+0x1a/0x30 [ 185.308583][ T5448] [ 185.310960][ T5448] Uninit was stored to memory at: [ 185.311921][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 185.316414][ T5448] wireless_send_event+0x67f/0x1530 [ 185.338817][ T5448] ioctl_standard_iw_point+0x12b0/0x13f0 [ 185.344742][ T5448] compat_standard_call+0x188/0x4c0 [ 185.350113][ T5448] wext_ioctl_dispatch+0x192/0x7a0 [ 185.355962][ T5448] compat_wext_handle_ioctl+0x1a1/0x300 [ 185.361658][ T5448] compat_sock_ioctl+0x20c/0xff0 [ 185.367022][ T5448] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 185.372903][ T5448] ia32_sys_call+0x2d5f/0x4310 [ 185.377859][ T5448] __do_fast_syscall_32+0xb0/0x150 [ 185.386704][ T5448] do_fast_syscall_32+0x38/0x80 [ 185.391756][ T5448] do_SYSENTER_32+0x1f/0x30 [ 185.397633][ T5448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.404475][ T5448] [ 185.406879][ T5448] Local variable iwp created at: [ 185.411890][ T5448] compat_standard_call+0x4a/0x4c0 [ 185.417315][ T5448] wext_ioctl_dispatch+0x192/0x7a0 [ 185.422672][ T5448] [ 185.425069][ T5448] Bytes 60-63 of 64 are uninitialized [ 185.430528][ T5448] Memory access of size 64 starts at ffff888119844000 [ 185.437582][ T5448] Data copied to user address 00007ffd27307870 [ 185.450906][ T5448] [ 185.454341][ T5448] CPU: 0 UID: 101 PID: 5448 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 185.463774][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.474133][ T5448] ===================================================== [ 185.481147][ T5448] Disabling lock debugging due to kernel taint [ 185.490945][ T5448] Kernel panic - not syncing: kmsan.panic set ... [ 185.497484][ T5448] CPU: 0 UID: 101 PID: 5448 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 185.508336][ T5448] Tainted: [B]=BAD_PAGE [ 185.512569][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.522752][ T5448] Call Trace: [ 185.526111][ T5448] [ 185.529108][ T5448] __dump_stack+0x26/0x30 [ 185.533576][ T5448] dump_stack_lvl+0x53/0x270 [ 185.538294][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.544243][ T5448] dump_stack+0x1e/0x25 [ 185.548526][ T5448] vpanic+0x435/0xd30 [ 185.552658][ T5448] panic+0x15d/0x160 [ 185.556726][ T5448] kmsan_report+0x31c/0x320 [ 185.561352][ T5448] ? kmsan_internal_check_memory+0x1e1/0x230 [ 185.567490][ T5448] ? kmsan_copy_to_user+0xf1/0x190 [ 185.572729][ T5448] ? _copy_to_iter+0xef3/0x33f0 [ 185.577698][ T5448] ? __skb_datagram_iter+0x196/0x12c0 [ 185.583214][ T5448] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 185.588824][ T5448] ? netlink_recvmsg+0x4bb/0xfe0 [ 185.593937][ T5448] ? sock_recvmsg+0x2df/0x390 [ 185.598741][ T5448] ? ____sys_recvmsg+0x193/0x610 [ 185.603827][ T5448] ? ___sys_recvmsg+0x20b/0x850 [ 185.608827][ T5448] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 185.614091][ T5448] ? x64_sys_call+0x35f0/0x3e30 [ 185.619091][ T5448] ? do_syscall_64+0xd9/0xfa0 [ 185.623903][ T5448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.630113][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.636070][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.641303][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.646538][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.652488][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.657722][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.663664][ T5448] ? __pfx__raw_spin_lock+0x1/0x10 [ 185.668898][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.674228][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.680184][ T5448] kmsan_internal_check_memory+0x1e1/0x230 [ 185.686185][ T5448] kmsan_copy_to_user+0xf1/0x190 [ 185.691261][ T5448] _copy_to_iter+0xef3/0x33f0 [ 185.696095][ T5448] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 185.702614][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.707882][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.713842][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.719088][ T5448] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 185.725608][ T5448] __skb_datagram_iter+0x196/0x12c0 [ 185.730970][ T5448] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 185.736788][ T5448] skb_copy_datagram_iter+0x5b/0x1e0 [ 185.742229][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.748182][ T5448] netlink_recvmsg+0x4bb/0xfe0 [ 185.753102][ T5448] ? aa_sock_msg_perm+0x29c/0x2f0 [ 185.758276][ T5448] ? __pfx_netlink_recvmsg+0x10/0x10 [ 185.763709][ T5448] sock_recvmsg+0x2df/0x390 [ 185.768348][ T5448] ____sys_recvmsg+0x193/0x610 [ 185.773259][ T5448] ? setup_fault_attr+0x2a0/0x300 [ 185.778399][ T5448] ? stack_depot_save_flags+0x35/0x7b0 [ 185.784026][ T5448] ___sys_recvmsg+0x20b/0x850 [ 185.788884][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.794830][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.800094][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 185.806041][ T5448] __x64_sys_recvmsg+0x20e/0x3d0 [ 185.811169][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 185.816422][ T5448] x64_sys_call+0x35f0/0x3e30 [ 185.821243][ T5448] do_syscall_64+0xd9/0xfa0 [ 185.825919][ T5448] ? irqentry_exit+0x16/0x60 [ 185.830646][ T5448] ? clear_bhb_loop+0x40/0x90 [ 185.835448][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.841462][ T5448] RIP: 0033:0x7fe2753c6407 [ 185.845974][ T5448] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 185.865707][ T5448] RSP: 002b:00007ffd27307760 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 185.874259][ T5448] RAX: ffffffffffffffda RBX: 00007fe27533c740 RCX: 00007fe2753c6407 [ 185.882322][ T5448] RDX: 0000000000000040 RSI: 00007ffd273077e0 RDI: 0000000000000009 [ 185.890377][ T5448] RBP: 000055fe5d5bcaa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.898434][ T5448] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 185.906490][ T5448] R13: 00007ffd2730b940 R14: 0000000000000000 R15: 00007ffd2730b930 [ 185.914585][ T5448] [ 185.918085][ T5448] Kernel Offset: disabled [ 185.922460][ T5448] Rebooting in 86400 seconds..