last executing test programs: 2.083802887s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x7ab, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="14000000"], 0xf0}}], 0x2, 0x0) 1.608378467s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) 1.304109629s ago: executing program 1 (id=6): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0xfffffffd, 0x1}}]}}, 0x0, 0x32, 0x0, 0x6, 0x2}, 0x28) 922.371191ms ago: executing program 2 (id=7): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') pwrite64(0xffffffffffffffff, &(0x7f0000000080)="b18c20343b49590a35d5245b7f02a1e79ed03fde27194e144281484496e036f137a1f7e2c3443e32", 0x28, 0x8080c5f) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) 677.414913ms ago: executing program 1 (id=8): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0, 0x45}, {0x0}, {0x0}, {&(0x7f0000000200)=""/110, 0x6e}], 0x4}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="c5236745cdddcb99c622aa007a068c22eb2bbf130c1bbfa0848917aebba404b0a2fbd0babe95f3d6e379732c7bea4e94f4a220ca2b6bf0937b98b69a33c79a3d70c952259e"}}}}}, 0x0) 384.017734ms ago: executing program 0 (id=1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x7f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 245.438717ms ago: executing program 2 (id=9): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') fstatfs(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) lseek(r0, 0x0, 0x1) 117.24698ms ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x0, 0xfa7}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in={0x2, 0x4e21, @loopback}], 0x2c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 0s ago: executing program 1 (id=10): write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488a8170081"], 0x27) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. [ 182.430993][ T5773] cgroup: Unknown subsys name 'net' [ 182.585998][ T5773] cgroup: Unknown subsys name 'cpuset' [ 182.606487][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 188.857623][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 193.159333][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.167052][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.175848][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.188292][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.198075][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.208988][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.218767][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.226512][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.235703][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.246857][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.255174][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.263113][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.271124][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.280259][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.302452][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.312336][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.318987][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.331799][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.332876][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.345902][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.367113][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.394515][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.407140][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.409370][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.426952][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.716436][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 194.901242][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 195.450442][ T5796] Bluetooth: hci1: command tx timeout [ 195.459008][ T5796] Bluetooth: hci3: command tx timeout [ 195.464576][ T5796] Bluetooth: hci4: command tx timeout [ 195.470494][ T5792] Bluetooth: hci0: command tx timeout [ 195.535230][ T5792] Bluetooth: hci2: command tx timeout [ 195.676121][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 195.697179][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.704744][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.712577][ T5798] bridge_slave_0: entered allmulticast mode [ 195.722668][ T5798] bridge_slave_0: entered promiscuous mode [ 195.751740][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.759533][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.767411][ T5798] bridge_slave_1: entered allmulticast mode [ 195.777112][ T5798] bridge_slave_1: entered promiscuous mode [ 195.981659][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.077834][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.091997][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 196.270172][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 196.340968][ T5798] team0: Port device team_slave_0 added [ 196.377120][ T5798] team0: Port device team_slave_1 added [ 196.631441][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.639566][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.647409][ T5789] bridge_slave_0: entered allmulticast mode [ 196.659044][ T5789] bridge_slave_0: entered promiscuous mode [ 196.778845][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.786430][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.794071][ T5789] bridge_slave_1: entered allmulticast mode [ 196.804200][ T5789] bridge_slave_1: entered promiscuous mode [ 196.837402][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.844548][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.875737][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.031027][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.038969][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.065414][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.215959][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.256876][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.308777][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.316575][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.324190][ T5794] bridge_slave_0: entered allmulticast mode [ 197.334118][ T5794] bridge_slave_0: entered promiscuous mode [ 197.474379][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.481913][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.491837][ T5794] bridge_slave_1: entered allmulticast mode [ 197.500875][ T5794] bridge_slave_1: entered promiscuous mode [ 197.548767][ T5792] Bluetooth: hci0: command tx timeout [ 197.552538][ T5809] Bluetooth: hci4: command tx timeout [ 197.554567][ T5792] Bluetooth: hci3: command tx timeout [ 197.559977][ T5796] Bluetooth: hci1: command tx timeout [ 197.603425][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.611047][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.618779][ T5803] bridge_slave_0: entered allmulticast mode [ 197.628294][ T5803] bridge_slave_0: entered promiscuous mode [ 197.628626][ T5796] Bluetooth: hci2: command tx timeout [ 197.750208][ T5789] team0: Port device team_slave_0 added [ 197.758100][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.768629][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.776284][ T5803] bridge_slave_1: entered allmulticast mode [ 197.784507][ T5803] bridge_slave_1: entered promiscuous mode [ 197.811579][ T5798] hsr_slave_0: entered promiscuous mode [ 197.822091][ T5798] hsr_slave_1: entered promiscuous mode [ 197.871285][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.879087][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.886792][ T5790] bridge_slave_0: entered allmulticast mode [ 197.895564][ T5790] bridge_slave_0: entered promiscuous mode [ 197.914499][ T5789] team0: Port device team_slave_1 added [ 197.922541][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.930713][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.938422][ T5790] bridge_slave_1: entered allmulticast mode [ 197.947109][ T5790] bridge_slave_1: entered promiscuous mode [ 198.011924][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.131774][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.251058][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.313739][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.321119][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.349055][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.372892][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.423532][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.465050][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.472167][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.498531][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.520850][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.607082][ T5794] team0: Port device team_slave_0 added [ 198.705546][ T5803] team0: Port device team_slave_0 added [ 198.720441][ T5794] team0: Port device team_slave_1 added [ 198.736984][ T5803] team0: Port device team_slave_1 added [ 198.958640][ T5790] team0: Port device team_slave_0 added [ 199.051732][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.059979][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.087495][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.106680][ T5790] team0: Port device team_slave_1 added [ 199.132159][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.139499][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.165845][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.230508][ T5789] hsr_slave_0: entered promiscuous mode [ 199.240706][ T5789] hsr_slave_1: entered promiscuous mode [ 199.249514][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 199.255484][ T5789] Cannot create hsr debugfs directory [ 199.301093][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.308322][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.334619][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.387104][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.394231][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.420539][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.617097][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.624227][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.650868][ T5796] Bluetooth: hci4: command tx timeout [ 199.650980][ T5796] Bluetooth: hci1: command tx timeout [ 199.651075][ T5796] Bluetooth: hci3: command tx timeout [ 199.651192][ T5796] Bluetooth: hci0: command tx timeout [ 199.674541][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.728817][ T5795] Bluetooth: hci2: command tx timeout [ 199.791294][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.798586][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.826105][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.982923][ T5794] hsr_slave_0: entered promiscuous mode [ 199.992164][ T5794] hsr_slave_1: entered promiscuous mode [ 200.000765][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 200.006784][ T5794] Cannot create hsr debugfs directory [ 200.059533][ T5803] hsr_slave_0: entered promiscuous mode [ 200.068902][ T5803] hsr_slave_1: entered promiscuous mode [ 200.077404][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 200.083270][ T5803] Cannot create hsr debugfs directory [ 200.441589][ T5790] hsr_slave_0: entered promiscuous mode [ 200.450721][ T5790] hsr_slave_1: entered promiscuous mode [ 200.459498][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 200.465431][ T5790] Cannot create hsr debugfs directory [ 200.630489][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.697903][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.734836][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.845440][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.578334][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.696781][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.705581][ T5795] Bluetooth: hci0: command tx timeout [ 201.711245][ T5795] Bluetooth: hci3: command tx timeout [ 201.716903][ T5796] Bluetooth: hci1: command tx timeout [ 201.717016][ T5796] Bluetooth: hci4: command tx timeout [ 201.767195][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.776458][ T5795] Bluetooth: hci2: command tx timeout [ 201.906330][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.951729][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.993985][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 202.128293][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.161081][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.199514][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 202.281649][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.310015][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.414073][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.461041][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.504082][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.543275][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.590152][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.930426][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.201490][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.277595][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.285277][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.390132][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.403811][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.411458][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.620870][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.738195][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.768134][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.775707][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.822658][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.928281][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.935944][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.010879][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.069657][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.173715][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.181303][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.262278][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.303410][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.311321][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.334777][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.342542][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.358540][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.366115][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.645600][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.813390][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.886012][ T3876] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.893543][ T3876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.915698][ T3876] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.923275][ T3876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.890876][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.403915][ T5798] veth0_vlan: entered promiscuous mode [ 206.430502][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.549778][ T5798] veth1_vlan: entered promiscuous mode [ 206.794221][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.931889][ T5789] veth0_vlan: entered promiscuous mode [ 207.019759][ T5798] veth0_macvtap: entered promiscuous mode [ 207.112821][ T5798] veth1_macvtap: entered promiscuous mode [ 207.146955][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.181460][ T5789] veth1_vlan: entered promiscuous mode [ 207.355464][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.420569][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.446249][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.503511][ T3554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.571711][ T3554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.583918][ T3554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.694240][ T5789] veth0_macvtap: entered promiscuous mode [ 207.717880][ T3554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.831848][ T5789] veth1_macvtap: entered promiscuous mode [ 207.965005][ T5794] veth0_vlan: entered promiscuous mode [ 208.034249][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.093550][ T5794] veth1_vlan: entered promiscuous mode [ 208.119940][ T5790] veth0_vlan: entered promiscuous mode [ 208.197364][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.276798][ T5790] veth1_vlan: entered promiscuous mode [ 208.295332][ T4297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.308315][ T3554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.347143][ T3554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.378116][ T3554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.622108][ T5794] veth0_macvtap: entered promiscuous mode [ 208.685638][ T5790] veth0_macvtap: entered promiscuous mode [ 208.725261][ T5794] veth1_macvtap: entered promiscuous mode [ 208.798106][ T5790] veth1_macvtap: entered promiscuous mode [ 208.920312][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.028288][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.063801][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.146995][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.201854][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.289394][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.345215][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.354253][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.462081][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.505593][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.514613][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.596181][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.737910][ T5803] veth0_vlan: entered promiscuous mode [ 209.904193][ T5803] veth1_vlan: entered promiscuous mode [ 210.310215][ T5803] veth0_macvtap: entered promiscuous mode [ 210.411418][ T5803] veth1_macvtap: entered promiscuous mode [ 210.567729][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.667469][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.741264][ T3554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.794094][ T3554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.826022][ T3554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.871720][ T3554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.371942][ T3702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.384114][ T3702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.559279][ T3702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.567573][ T3702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.921115][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.929252][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.099296][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 215.182032][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.191981][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.071239][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.079728][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.395719][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.403783][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.513430][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.521660][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.749180][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.762132][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.426494][ T5992] ===================================================== [ 217.433754][ T5992] BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 [ 217.441752][ T5992] erspan_build_header+0x167/0x2f0 [ 217.447208][ T5992] erspan_xmit+0x10b0/0x1ce0 [ 217.451992][ T5992] dev_hard_start_xmit+0x22f/0xa30 [ 217.457444][ T5992] sch_direct_xmit+0x3b2/0xcf0 [ 217.462435][ T5992] __dev_queue_xmit+0x3588/0x5e60 [ 217.467871][ T5992] __bpf_redirect+0x162d/0x1760 [ 217.472940][ T5992] bpf_clone_redirect+0x366/0x530 [ 217.478298][ T5992] ___bpf_prog_run+0x1294/0xeba0 [ 217.483406][ T5992] __bpf_prog_run32+0xc2/0xf0 [ 217.488374][ T5992] bpf_test_run+0x498/0xb90 [ 217.493117][ T5992] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 217.498891][ T5992] bpf_prog_test_run+0x5bf/0xa40 [ 217.504028][ T5992] __sys_bpf+0x873/0xeb0 [ 217.508556][ T5992] __ia32_sys_bpf+0xa4/0xf0 [ 217.513268][ T5992] ia32_sys_call+0xadf/0x4310 [ 217.518279][ T5992] __do_fast_syscall_32+0xb0/0x150 [ 217.523575][ T5992] do_fast_syscall_32+0x38/0x80 [ 217.528723][ T5992] do_SYSENTER_32+0x1f/0x30 [ 217.533367][ T5992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.540016][ T5992] [ 217.542429][ T5992] Uninit was created at: [ 217.547050][ T5992] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 217.553248][ T5992] kmalloc_reserve+0x13c/0x4b0 [ 217.558337][ T5992] pskb_expand_head+0x1fc/0x1610 [ 217.563503][ T5992] erspan_xmit+0x952/0x1ce0 [ 217.568297][ T5992] dev_hard_start_xmit+0x22f/0xa30 [ 217.573626][ T5992] sch_direct_xmit+0x3b2/0xcf0 [ 217.578703][ T5992] __dev_queue_xmit+0x3588/0x5e60 [ 217.583984][ T5992] __bpf_redirect+0x162d/0x1760 [ 217.589182][ T5992] bpf_clone_redirect+0x366/0x530 [ 217.594457][ T5992] ___bpf_prog_run+0x1294/0xeba0 [ 217.599789][ T5992] __bpf_prog_run32+0xc2/0xf0 [ 217.604681][ T5992] bpf_test_run+0x498/0xb90 [ 217.609552][ T5992] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 217.615452][ T5992] bpf_prog_test_run+0x5bf/0xa40 [ 217.620590][ T5992] __sys_bpf+0x873/0xeb0 [ 217.625149][ T5992] __ia32_sys_bpf+0xa4/0xf0 [ 217.629853][ T5992] ia32_sys_call+0xadf/0x4310 [ 217.634787][ T5992] __do_fast_syscall_32+0xb0/0x150 [ 217.640307][ T5992] do_fast_syscall_32+0x38/0x80 [ 217.645485][ T5992] do_SYSENTER_32+0x1f/0x30 [ 217.650163][ T5992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.656828][ T5992] [ 217.659302][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(none) [ 217.668656][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.678985][ T5992] ===================================================== [ 217.686162][ T5992] Disabling lock debugging due to kernel taint [ 217.692431][ T5992] Kernel panic - not syncing: kmsan.panic set ... [ 217.699012][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.1 Tainted: G B syzkaller #0 PREEMPT(none) [ 217.709822][ T5992] Tainted: [B]=BAD_PAGE [ 217.714114][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.724550][ T5992] Call Trace: [ 217.727960][ T5992] [ 217.731006][ T5992] __dump_stack+0x26/0x30 [ 217.735554][ T5992] dump_stack_lvl+0x53/0x270 [ 217.740364][ T5992] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 217.746427][ T5992] dump_stack+0x1e/0x25 [ 217.750818][ T5992] vpanic+0x435/0xd30 [ 217.755092][ T5992] panic+0x15d/0x160 [ 217.759295][ T5992] kmsan_report+0x31c/0x320 [ 217.764059][ T5992] ? __msan_warning+0x1b/0x30 [ 217.768973][ T5992] ? erspan_build_header+0x167/0x2f0 [ 217.774496][ T5992] ? erspan_xmit+0x10b0/0x1ce0 [ 217.779456][ T5992] ? dev_hard_start_xmit+0x22f/0xa30 [ 217.784972][ T5992] ? sch_direct_xmit+0x3b2/0xcf0 [ 217.790138][ T5992] ? __dev_queue_xmit+0x3588/0x5e60 [ 217.795965][ T5992] ? __bpf_redirect+0x162d/0x1760 [ 217.801440][ T5992] ? bpf_clone_redirect+0x366/0x530 [ 217.807174][ T5992] ? ___bpf_prog_run+0x1294/0xeba0 [ 217.812494][ T5992] ? __bpf_prog_run32+0xc2/0xf0 [ 217.817547][ T5992] ? bpf_test_run+0x498/0xb90 [ 217.822456][ T5992] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 217.828319][ T5992] ? bpf_prog_test_run+0x5bf/0xa40 [ 217.833627][ T5992] ? __sys_bpf+0x873/0xeb0 [ 217.838221][ T5992] ? __ia32_sys_bpf+0xa4/0xf0 [ 217.843072][ T5992] ? ia32_sys_call+0xadf/0x4310 [ 217.848146][ T5992] ? __do_fast_syscall_32+0xb0/0x150 [ 217.853626][ T5992] ? do_fast_syscall_32+0x38/0x80 [ 217.858824][ T5992] ? do_SYSENTER_32+0x1f/0x30 [ 217.863691][ T5992] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.870416][ T5992] ? kfree+0x4e3/0x1460 [ 217.874752][ T5992] ? skb_free_head+0x1b5/0x3a0 [ 217.879787][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 217.885128][ T5992] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 217.891164][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 217.896504][ T5992] __msan_warning+0x1b/0x30 [ 217.901221][ T5992] erspan_build_header+0x167/0x2f0 [ 217.906585][ T5992] erspan_xmit+0x10b0/0x1ce0 [ 217.911405][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 217.916773][ T5992] ? __pfx_erspan_xmit+0x10/0x10 [ 217.921919][ T5992] dev_hard_start_xmit+0x22f/0xa30 [ 217.927318][ T5992] sch_direct_xmit+0x3b2/0xcf0 [ 217.932294][ T5992] ? kmsan_get_metadata+0x150/0x160 [ 217.937712][ T5992] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 217.944289][ T5992] __dev_queue_xmit+0x3588/0x5e60 [ 217.949552][ T5992] ? skb_release_data+0xa12/0xac0 [ 217.954806][ T5992] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 217.961236][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 217.966535][ T5992] ? __dev_queue_xmit+0x30c/0x5e60 [ 217.971929][ T5992] __bpf_redirect+0x162d/0x1760 [ 217.976998][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 217.982339][ T5992] bpf_clone_redirect+0x366/0x530 [ 217.987617][ T5992] ___bpf_prog_run+0x1294/0xeba0 [ 217.992807][ T5992] __bpf_prog_run32+0xc2/0xf0 [ 217.997669][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 218.003012][ T5992] ? __pfx___bpf_prog_run32+0x10/0x10 [ 218.008602][ T5992] ? __pfx___bpf_prog_run32+0x10/0x10 [ 218.014185][ T5992] bpf_test_run+0x498/0xb90 [ 218.018921][ T5992] ? csum_partial+0x424/0x480 [ 218.023798][ T5992] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 218.030319][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 218.035670][ T5992] ? bpf_test_run+0x2f1/0xb90 [ 218.040578][ T5992] ? kmsan_get_metadata+0xfb/0x160 [ 218.045911][ T5992] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 218.051625][ T5992] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 218.057635][ T5992] bpf_prog_test_run+0x5bf/0xa40 [ 218.062779][ T5992] __sys_bpf+0x873/0xeb0 [ 218.067314][ T5992] __ia32_sys_bpf+0xa4/0xf0 [ 218.071986][ T5992] ia32_sys_call+0xadf/0x4310 [ 218.076876][ T5992] __do_fast_syscall_32+0xb0/0x150 [ 218.082163][ T5992] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 218.088121][ T5992] do_fast_syscall_32+0x38/0x80 [ 218.093132][ T5992] do_SYSENTER_32+0x1f/0x30 [ 218.097785][ T5992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.104322][ T5992] RIP: 0023:0xf7fa5539 [ 218.108506][ T5992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 218.128268][ T5992] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 218.136834][ T5992] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 218.144937][ T5992] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.153029][ T5992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.161120][ T5992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.169198][ T5992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.177312][ T5992] [ 218.180820][ T5992] Kernel Offset: disabled [ 218.185219][ T5992] Rebooting in 86400 seconds..