last executing test programs: 2.617196889s ago: executing program 0 (id=1): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000140)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000180)=[0x2], 0x0, 0x1}) 2.207217289s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x0, 0x70000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100"}}) 996.601539ms ago: executing program 1 (id=2): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 760.132816ms ago: executing program 0 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 730.952096ms ago: executing program 3 (id=7): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) 0s ago: executing program 3 (id=8): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa8b02, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x20001, 0xd4fe2, 0x3d3b4e}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 198.864838][ T5765] cgroup: Unknown subsys name 'net' [ 198.998335][ T5765] cgroup: Unknown subsys name 'cpuset' [ 199.013511][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 206.056756][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 211.090865][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.101206][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.116215][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.124511][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.133047][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.144229][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.152723][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.162424][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.171027][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.179567][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.187907][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.211132][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.220436][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.244305][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.265582][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.289599][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.295919][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.308842][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.308984][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.334052][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.340786][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.352677][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.359739][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.369658][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.391676][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.175837][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 213.211761][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 213.417791][ T5792] Bluetooth: hci1: command tx timeout [ 213.423401][ T5786] Bluetooth: hci3: command tx timeout [ 213.423533][ T5789] Bluetooth: hci4: command tx timeout [ 213.437522][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 213.497627][ T5792] Bluetooth: hci0: command tx timeout [ 213.498559][ T5789] Bluetooth: hci2: command tx timeout [ 213.800758][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 214.131723][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 214.694638][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.702494][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.737888][ T5784] bridge_slave_0: entered allmulticast mode [ 214.748408][ T5784] bridge_slave_0: entered promiscuous mode [ 214.811124][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.818999][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.829878][ T5784] bridge_slave_1: entered allmulticast mode [ 214.840140][ T5784] bridge_slave_1: entered promiscuous mode [ 214.854452][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.862285][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.873109][ T5783] bridge_slave_0: entered allmulticast mode [ 214.883629][ T5783] bridge_slave_0: entered promiscuous mode [ 215.146117][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.153970][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.164129][ T5783] bridge_slave_1: entered allmulticast mode [ 215.175676][ T5783] bridge_slave_1: entered promiscuous mode [ 215.377484][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.385086][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.394167][ T5796] bridge_slave_0: entered allmulticast mode [ 215.403027][ T5796] bridge_slave_0: entered promiscuous mode [ 215.424329][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.447055][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.498366][ T5789] Bluetooth: hci1: command tx timeout [ 215.498487][ T5792] Bluetooth: hci4: command tx timeout [ 215.503967][ T5789] Bluetooth: hci3: command tx timeout [ 215.536019][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.543713][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.551909][ T5796] bridge_slave_1: entered allmulticast mode [ 215.560711][ T5796] bridge_slave_1: entered promiscuous mode [ 215.577575][ T5789] Bluetooth: hci0: command tx timeout [ 215.581139][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.592897][ T5789] Bluetooth: hci2: command tx timeout [ 215.603358][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.613631][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.621436][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.630024][ T5785] bridge_slave_0: entered allmulticast mode [ 215.639237][ T5785] bridge_slave_0: entered promiscuous mode [ 215.766841][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.774640][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.783528][ T5785] bridge_slave_1: entered allmulticast mode [ 215.792290][ T5785] bridge_slave_1: entered promiscuous mode [ 215.804077][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.811947][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.820574][ T5787] bridge_slave_0: entered allmulticast mode [ 215.829468][ T5787] bridge_slave_0: entered promiscuous mode [ 215.956440][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.964168][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.973030][ T5787] bridge_slave_1: entered allmulticast mode [ 215.982098][ T5787] bridge_slave_1: entered promiscuous mode [ 216.001654][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.020381][ T5784] team0: Port device team_slave_0 added [ 216.036644][ T5783] team0: Port device team_slave_0 added [ 216.109686][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.127006][ T5784] team0: Port device team_slave_1 added [ 216.141333][ T5783] team0: Port device team_slave_1 added [ 216.185911][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.318844][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.355046][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.422639][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.429990][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.456275][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.505809][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.558956][ T5796] team0: Port device team_slave_0 added [ 216.567828][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.575043][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.601427][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.620123][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.627376][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.653727][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.750821][ T5796] team0: Port device team_slave_1 added [ 216.760612][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.767880][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.794641][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.832657][ T5785] team0: Port device team_slave_0 added [ 216.846669][ T5787] team0: Port device team_slave_0 added [ 216.910059][ T5785] team0: Port device team_slave_1 added [ 216.925059][ T5787] team0: Port device team_slave_1 added [ 216.978656][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.985840][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.012566][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.032952][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.040267][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.066893][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.324614][ T5783] hsr_slave_0: entered promiscuous mode [ 217.333999][ T5783] hsr_slave_1: entered promiscuous mode [ 217.351979][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.359415][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.385735][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.400769][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.408281][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.434702][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.499988][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.507069][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.533847][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.549672][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.556810][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.583375][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.589658][ T5789] Bluetooth: hci4: command tx timeout [ 217.594571][ T5792] Bluetooth: hci1: command tx timeout [ 217.600811][ T5789] Bluetooth: hci3: command tx timeout [ 217.653437][ T5784] hsr_slave_0: entered promiscuous mode [ 217.657565][ T5789] Bluetooth: hci2: command tx timeout [ 217.664722][ T5792] Bluetooth: hci0: command tx timeout [ 217.665637][ T5784] hsr_slave_1: entered promiscuous mode [ 217.679245][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 217.685075][ T5784] Cannot create hsr debugfs directory [ 217.856733][ T5796] hsr_slave_0: entered promiscuous mode [ 217.866088][ T5796] hsr_slave_1: entered promiscuous mode [ 217.874726][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 217.880642][ T5796] Cannot create hsr debugfs directory [ 218.076558][ T5787] hsr_slave_0: entered promiscuous mode [ 218.085732][ T5787] hsr_slave_1: entered promiscuous mode [ 218.094330][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 218.100294][ T5787] Cannot create hsr debugfs directory [ 218.310227][ T5785] hsr_slave_0: entered promiscuous mode [ 218.319720][ T5785] hsr_slave_1: entered promiscuous mode [ 218.327959][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 218.333851][ T5785] Cannot create hsr debugfs directory [ 219.633313][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.659665][ T5789] Bluetooth: hci1: command tx timeout [ 219.665420][ T5792] Bluetooth: hci4: command tx timeout [ 219.671289][ T5786] Bluetooth: hci3: command tx timeout [ 219.674776][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.729913][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.740726][ T5792] Bluetooth: hci2: command tx timeout [ 219.740848][ T5789] Bluetooth: hci0: command tx timeout [ 219.785684][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.883496][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.929206][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.959285][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.986008][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.234017][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.259346][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.284604][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.319614][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.677480][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.710508][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.741134][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.788173][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.159842][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.216517][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.276161][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.313678][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.331850][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.546088][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.585140][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.725966][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.733632][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.850436][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.858257][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.891904][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.906145][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.975168][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.982735][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.092045][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.099500][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.238629][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.322324][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.330264][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.425003][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.487985][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.495347][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.674685][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.852971][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.860641][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.955045][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.962726][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.119588][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.583461][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.808613][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.816394][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.024838][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.032592][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.339697][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.442828][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.268729][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.378899][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.400097][ T5783] veth0_vlan: entered promiscuous mode [ 225.505374][ T5784] veth0_vlan: entered promiscuous mode [ 225.558913][ T5783] veth1_vlan: entered promiscuous mode [ 225.695591][ T5784] veth1_vlan: entered promiscuous mode [ 226.161084][ T5783] veth0_macvtap: entered promiscuous mode [ 226.243110][ T5787] veth0_vlan: entered promiscuous mode [ 226.272103][ T5784] veth0_macvtap: entered promiscuous mode [ 226.292277][ T5783] veth1_macvtap: entered promiscuous mode [ 226.354916][ T5784] veth1_macvtap: entered promiscuous mode [ 226.398424][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.453661][ T5787] veth1_vlan: entered promiscuous mode [ 226.629774][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.686642][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.766042][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.799985][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.895577][ T3508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.942788][ T3508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.095811][ T3441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.163674][ T3441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.254721][ T5785] veth0_vlan: entered promiscuous mode [ 227.268882][ T5787] veth0_macvtap: entered promiscuous mode [ 227.306239][ T3441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.340750][ T3441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.393780][ T5787] veth1_macvtap: entered promiscuous mode [ 227.424932][ T3441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.454925][ T3441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.470256][ T5796] veth0_vlan: entered promiscuous mode [ 227.521843][ T5785] veth1_vlan: entered promiscuous mode [ 227.701467][ T5796] veth1_vlan: entered promiscuous mode [ 227.763911][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.855296][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.976138][ T3508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.048192][ T2114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.181089][ T2114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.253697][ T2114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.274601][ T5785] veth0_macvtap: entered promiscuous mode [ 228.434153][ T5796] veth0_macvtap: entered promiscuous mode [ 228.473604][ T5785] veth1_macvtap: entered promiscuous mode [ 228.615697][ T5796] veth1_macvtap: entered promiscuous mode [ 228.840472][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.960677][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.996031][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.091111][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.162377][ T331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.220841][ T331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.269856][ T331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.348251][ T331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.399169][ T331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.470612][ T331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.513511][ T331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.562059][ T331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.800148][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.809944][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.165063][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.174557][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.342363][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.350736][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.741128][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.749495][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.761189][ T5784] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 234.880119][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.888501][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.647785][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.655848][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.814867][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 236.045894][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.054188][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.231967][ T5981] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 237.892448][ T5987] veth3: entered promiscuous mode [ 237.970610][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.983008][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.052346][ T5990] ===================================================== [ 238.064908][ T5990] BUG: KMSAN: uninit-value in iopt_pages_unfill_xarray+0xfe3/0x1660 [ 238.078191][ T5990] iopt_pages_unfill_xarray+0xfe3/0x1660 [ 238.084096][ T5990] iopt_area_remove_access+0x508/0x650 [ 238.090691][ T5990] iommufd_access_unpin_pages+0x637/0xa50 [ 238.096747][ T5990] iommufd_test_access_unmap+0x423/0x6b0 [ 238.102871][ T5990] iommufd_test_staccess_release+0x7f/0x140 [ 238.113582][ T5990] __fput+0x60e/0x1050 [ 238.118075][ T5990] ____fput+0x25/0x30 [ 238.122243][ T5990] task_work_run+0x208/0x2b0 [ 238.127355][ T5990] exit_to_user_mode_loop+0x2ff/0x1b20 [ 238.133068][ T5990] do_syscall_64+0x1d7/0xf80 [ 238.140090][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.147900][ T5990] [ 238.150330][ T5990] Local variable batch created at: [ 238.155544][ T5990] iopt_pages_unfill_xarray+0x86/0x1660 [ 238.163773][ T5990] iopt_area_remove_access+0x508/0x650 [ 238.172078][ T5990] [ 238.174523][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.185113][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 238.195655][ T5990] ===================================================== [ 238.202932][ T5990] Disabling lock debugging due to kernel taint [ 238.209411][ T5990] Kernel panic - not syncing: kmsan.panic set ... [ 238.215992][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.3.8 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 238.227253][ T5990] Tainted: [B]=BAD_PAGE [ 238.231525][ T5990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 238.241738][ T5990] Call Trace: [ 238.245133][ T5990] [ 238.248172][ T5990] __dump_stack+0x26/0x30 [ 238.252707][ T5990] dump_stack_lvl+0x50/0x1c0 [ 238.257501][ T5990] ? dump_stack+0x12/0x25 [ 238.262034][ T5990] dump_stack+0x1e/0x25 [ 238.266385][ T5990] vpanic+0x435/0xd40 [ 238.270605][ T5990] panic+0x15d/0x160 [ 238.274773][ T5990] kmsan_report+0x31a/0x320 [ 238.279534][ T5990] ? __msan_warning+0x1b/0x30 [ 238.284431][ T5990] ? iopt_pages_unfill_xarray+0xfe3/0x1660 [ 238.290475][ T5990] ? iopt_area_remove_access+0x508/0x650 [ 238.296348][ T5990] ? iommufd_access_unpin_pages+0x637/0xa50 [ 238.302482][ T5990] ? iommufd_test_access_unmap+0x423/0x6b0 [ 238.308489][ T5990] ? iommufd_test_staccess_release+0x7f/0x140 [ 238.314757][ T5990] ? __fput+0x60e/0x1050 [ 238.319191][ T5990] ? ____fput+0x25/0x30 [ 238.323521][ T5990] ? task_work_run+0x208/0x2b0 [ 238.328496][ T5990] ? exit_to_user_mode_loop+0x2ff/0x1b20 [ 238.334370][ T5990] ? do_syscall_64+0x1d7/0xf80 [ 238.339354][ T5990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.345717][ T5990] ? kmsan_get_metadata+0xf1/0x160 [ 238.351101][ T5990] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 238.357176][ T5990] ? xas_load+0xcec/0xd70 [ 238.361745][ T5990] ? __xas_next+0x142/0x7a0 [ 238.366470][ T5990] ? kmsan_get_metadata+0xf1/0x160 [ 238.371848][ T5990] __msan_warning+0x1b/0x30 [ 238.376572][ T5990] iopt_pages_unfill_xarray+0xfe3/0x1660 [ 238.382458][ T5990] ? kmsan_get_metadata+0xc0/0x160 [ 238.387918][ T5990] ? kmsan_get_metadata+0xf1/0x160 [ 238.393283][ T5990] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 238.399356][ T5990] ? interval_tree_remove+0x158e/0x1730 [ 238.405128][ T5990] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 238.411233][ T5990] iopt_area_remove_access+0x508/0x650 [ 238.416972][ T5990] iommufd_access_unpin_pages+0x637/0xa50 [ 238.423005][ T5990] iommufd_test_access_unmap+0x423/0x6b0 [ 238.428904][ T5990] iommufd_test_staccess_release+0x7f/0x140 [ 238.435011][ T5990] ? __pfx_iommufd_test_staccess_release+0x10/0x10 [ 238.441721][ T5990] __fput+0x60e/0x1050 [ 238.446014][ T5990] ? kmsan_get_metadata+0xf1/0x160 [ 238.451373][ T5990] ? __pfx_____fput+0x10/0x10 [ 238.456245][ T5990] ____fput+0x25/0x30 [ 238.460410][ T5990] task_work_run+0x208/0x2b0 [ 238.465231][ T5990] exit_to_user_mode_loop+0x2ff/0x1b20 [ 238.470977][ T5990] ? __x64_sys_close_range+0x97/0xe0 [ 238.476540][ T5990] do_syscall_64+0x1d7/0xf80 [ 238.481354][ T5990] ? clear_bhb_loop+0x40/0x90 [ 238.486228][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.492315][ T5990] RIP: 0033:0x7f634fb9acb9 [ 238.496870][ T5990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.516669][ T5990] RSP: 002b:00007ffe3ab2da98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 238.525290][ T5990] RAX: 0000000000000000 RBX: 00007ffe3ab2db80 RCX: 00007f634fb9acb9 [ 238.533435][ T5990] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 238.541564][ T5990] RBP: 000000000003a151 R08: 0000000000000001 R09: 0000000000000000 [ 238.549677][ T5990] R10: 0000001b2d520000 R11: 0000000000000246 R12: 00007ffe3ab2dbc0 [ 238.557796][ T5990] R13: 00007f634fe15fac R14: 000000000003a1ea R15: 00007f634fe15fa0 [ 238.565967][ T5990] [ 238.569289][ T5990] Kernel Offset: disabled [ 238.573698][ T5990] Rebooting in 86400 seconds..