last executing test programs: 1.916688806s ago: executing program 1 (id=2): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 890.191866ms ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000380)={0x20, 0xb, 0x4, "c9005a21"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0xd4, 0x2, &(0x7f0000000080)={0x3, "42cae8b3df20afbcf8dd178c50e5d84526580489d79a473f112453b228922bd31c"}}) 471.964537ms ago: executing program 3 (id=4): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_io_uring_setup(0x48a7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001240)={0x0, 0x4, 0xffffffff, 0xffffffff, 0x9, "001bf1c677b4dd6448cdc00100000000002000"}) r10 = syz_open_pts(r3, 0x101) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r12 = dup3(r10, r3, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000040)={0x5, 0x3, 0x6aeb, 0x8, 0x4, "b4f5ad7e54a179de93ec537b2ea1f63c50781d"}) write$UHID_INPUT(r12, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf250906000008000300", @ANYRES32=r13, @ANYBLOB="0800379eff0000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) 259.575908ms ago: executing program 1 (id=6): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={0x0}) 155.070603ms ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"}) r2 = syz_open_dev$hidraw(0x0, 0x82, 0x2) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x3a, 0x0, @multicast1, @multicast1}, {0x8000, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff", "8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f", "62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e", {"52a05c5cfcff2c9350623b5806dc725f", 'B\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}}}}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x1d) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000005000/0x4000)=nil, &(0x7f0000008000/0x1000)=nil, 0x4000, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000006c0)=[@textreal={0x8, 0x0}], 0x1, 0x25, 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x300fff2) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000002200)=0xf1eb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)={0x90000004}) openat$drirender128(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) fcntl$setstatus(r10, 0x4, 0x2400) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) 0s ago: executing program 4 (id=5): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x20363159, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) getpid() setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = dup(r0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 188.349828][ T5773] cgroup: Unknown subsys name 'net' [ 188.492305][ T5773] cgroup: Unknown subsys name 'cpuset' [ 188.509067][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.345438][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.352162][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.896070][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.292677][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.303911][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.313670][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.321481][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.329758][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.339758][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.347707][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.357014][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.370688][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.371220][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.381259][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.388175][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.394835][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.400792][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.410826][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.424859][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.426205][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.434335][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.453274][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.453495][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.465443][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.472524][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.485138][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.498135][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.507867][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.516275][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 248.317501][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 248.473219][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.480902][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.490894][ T5790] bridge_slave_0: entered allmulticast mode [ 248.501064][ T5790] bridge_slave_0: entered promiscuous mode [ 248.588828][ T5795] Bluetooth: hci0: command tx timeout [ 248.594840][ T52] Bluetooth: hci1: command tx timeout [ 248.600483][ T52] Bluetooth: hci2: command tx timeout [ 248.666229][ T5800] Bluetooth: hci4: command tx timeout [ 248.671952][ T5800] Bluetooth: hci3: command tx timeout [ 248.679830][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 248.701402][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.709640][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.717624][ T5790] bridge_slave_1: entered allmulticast mode [ 248.727376][ T5790] bridge_slave_1: entered promiscuous mode [ 248.951310][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.960953][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 249.071286][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.293978][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 249.328720][ T5790] team0: Port device team_slave_0 added [ 249.393886][ T5790] team0: Port device team_slave_1 added [ 249.618894][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.626295][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.652766][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.764473][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.772286][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.780280][ T5791] bridge_slave_0: entered allmulticast mode [ 249.789833][ T5791] bridge_slave_0: entered promiscuous mode [ 249.817916][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.825648][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.854722][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.909599][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.920221][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.928156][ T5791] bridge_slave_1: entered allmulticast mode [ 249.938279][ T5791] bridge_slave_1: entered promiscuous mode [ 250.203656][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.211331][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.219525][ T5789] bridge_slave_0: entered allmulticast mode [ 250.229154][ T5789] bridge_slave_0: entered promiscuous mode [ 250.331979][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.355254][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.366154][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.373998][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.381677][ T5789] bridge_slave_1: entered allmulticast mode [ 250.390932][ T5789] bridge_slave_1: entered promiscuous mode [ 250.618014][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.627394][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.635265][ T5798] bridge_slave_0: entered allmulticast mode [ 250.643498][ T5795] Bluetooth: hci0: command tx timeout [ 250.645115][ T5798] bridge_slave_0: entered promiscuous mode [ 250.649091][ T5795] Bluetooth: hci2: command tx timeout [ 250.661999][ T5800] Bluetooth: hci1: command tx timeout [ 250.714883][ T5790] hsr_slave_0: entered promiscuous mode [ 250.724634][ T5790] hsr_slave_1: entered promiscuous mode [ 250.735079][ T5795] Bluetooth: hci3: command tx timeout [ 250.735240][ T52] Bluetooth: hci4: command tx timeout [ 250.780795][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.788841][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.796835][ T5792] bridge_slave_0: entered allmulticast mode [ 250.806606][ T5792] bridge_slave_0: entered promiscuous mode [ 250.820542][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.829095][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.837073][ T5798] bridge_slave_1: entered allmulticast mode [ 250.846971][ T5798] bridge_slave_1: entered promiscuous mode [ 250.865674][ T5791] team0: Port device team_slave_0 added [ 250.886689][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.907003][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.914572][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.922090][ T5792] bridge_slave_1: entered allmulticast mode [ 250.931820][ T5792] bridge_slave_1: entered promiscuous mode [ 251.019607][ T5791] team0: Port device team_slave_1 added [ 251.080691][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.178845][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.199680][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.219318][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.372357][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.439698][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.447260][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.474008][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.561256][ T5798] team0: Port device team_slave_0 added [ 251.605600][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.612798][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.639565][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.677499][ T5789] team0: Port device team_slave_0 added [ 251.745713][ T5798] team0: Port device team_slave_1 added [ 251.779058][ T5789] team0: Port device team_slave_1 added [ 251.817456][ T5792] team0: Port device team_slave_0 added [ 251.961118][ T5792] team0: Port device team_slave_1 added [ 252.118714][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.126109][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.152676][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.221650][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.229038][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.255872][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.270397][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.277683][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.304265][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.351793][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.359392][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.385993][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.453685][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.460991][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.487636][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.522378][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.530977][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.560017][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.586741][ T5791] hsr_slave_0: entered promiscuous mode [ 252.596839][ T5791] hsr_slave_1: entered promiscuous mode [ 252.605674][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.613614][ T5791] Cannot create hsr debugfs directory [ 252.723448][ T52] Bluetooth: hci2: command tx timeout [ 252.729222][ T52] Bluetooth: hci1: command tx timeout [ 252.732964][ T5795] Bluetooth: hci0: command tx timeout [ 252.810608][ T5795] Bluetooth: hci3: command tx timeout [ 252.819985][ T5795] Bluetooth: hci4: command tx timeout [ 252.966980][ T5798] hsr_slave_0: entered promiscuous mode [ 252.977167][ T5798] hsr_slave_1: entered promiscuous mode [ 252.985821][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.993719][ T5798] Cannot create hsr debugfs directory [ 253.152650][ T5789] hsr_slave_0: entered promiscuous mode [ 253.163453][ T5789] hsr_slave_1: entered promiscuous mode [ 253.171440][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.179470][ T5789] Cannot create hsr debugfs directory [ 253.200613][ T5792] hsr_slave_0: entered promiscuous mode [ 253.210234][ T5792] hsr_slave_1: entered promiscuous mode [ 253.219261][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.227345][ T5792] Cannot create hsr debugfs directory [ 253.601602][ T5790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.727402][ T5790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.848132][ T5790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.975053][ T5790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.684998][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.734962][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.762582][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.804851][ T5795] Bluetooth: hci1: command tx timeout [ 254.810550][ T5795] Bluetooth: hci0: command tx timeout [ 254.816970][ T5795] Bluetooth: hci2: command tx timeout [ 254.850808][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.884134][ T52] Bluetooth: hci3: command tx timeout [ 254.889874][ T52] Bluetooth: hci4: command tx timeout [ 254.926651][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.006614][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.119805][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.175304][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.201263][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.224863][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.248312][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.324387][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.637963][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.681419][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.734695][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.792469][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.854726][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.008481][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.091157][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.099138][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.207069][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.214956][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.445217][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.664759][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.808206][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.816171][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.901626][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.961992][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.969785][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.249281][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.328991][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.447388][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.455124][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.535350][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.584455][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.592091][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.646900][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.760587][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.901614][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.909408][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.927839][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.935592][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.061954][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.226823][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.234534][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.250993][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.258927][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.440001][ T5798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.454958][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.852313][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.407697][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.987010][ T5791] veth0_vlan: entered promiscuous mode [ 260.048957][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.137251][ T5791] veth1_vlan: entered promiscuous mode [ 260.161546][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.460147][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.557667][ T5791] veth0_macvtap: entered promiscuous mode [ 260.694943][ T5791] veth1_macvtap: entered promiscuous mode [ 260.725157][ T5798] veth0_vlan: entered promiscuous mode [ 260.852179][ T5792] veth0_vlan: entered promiscuous mode [ 260.945801][ T5798] veth1_vlan: entered promiscuous mode [ 260.974236][ T5792] veth1_vlan: entered promiscuous mode [ 261.006978][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.089757][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.189272][ T5789] veth0_vlan: entered promiscuous mode [ 261.252798][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.264134][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.273370][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.282415][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.441129][ T5789] veth1_vlan: entered promiscuous mode [ 261.471413][ T5798] veth0_macvtap: entered promiscuous mode [ 261.510499][ T5792] veth0_macvtap: entered promiscuous mode [ 261.581140][ T5798] veth1_macvtap: entered promiscuous mode [ 261.600808][ T5792] veth1_macvtap: entered promiscuous mode [ 261.751485][ T5790] veth0_vlan: entered promiscuous mode [ 261.801234][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.813617][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.830475][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.913896][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.924883][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.935100][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.946087][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.961512][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.994661][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.006569][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.026692][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.076179][ T5790] veth1_vlan: entered promiscuous mode [ 262.166584][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.178463][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.188778][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.199628][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.214849][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.231661][ T5789] veth0_macvtap: entered promiscuous mode [ 262.302114][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.312053][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.321782][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.331244][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.355278][ T5789] veth1_macvtap: entered promiscuous mode [ 262.450308][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.461241][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.471991][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.481881][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.509969][ T5790] veth0_macvtap: entered promiscuous mode [ 262.646070][ T5790] veth1_macvtap: entered promiscuous mode [ 262.677739][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.689930][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.700291][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.711326][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.721948][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.734661][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.750438][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.895448][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.906279][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.916501][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.927326][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.937591][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.948375][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.963644][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.017216][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.029147][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.041056][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.054021][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.064321][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.075297][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.085578][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.096480][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.113969][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.221189][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.230503][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.239972][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.249240][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.371411][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.383531][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.396242][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.407359][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.417827][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.428928][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.439236][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.453481][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.473962][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.607513][ T5790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.616838][ T5790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.626130][ T5790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.635385][ T5790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.241379][ T5079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.251115][ T5079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.420721][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.429836][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.096237][ T5791] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 269.188227][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.196718][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.214919][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.223237][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.442125][ T5079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.450592][ T5079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.670850][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.679170][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.686001][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.698201][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.202699][ T5079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.211477][ T5079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.381752][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.394148][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.479920][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.495129][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.163693][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 271.383372][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 271.450556][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 271.460783][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.556781][ T9] usb 3-1: config 0 descriptor?? [ 271.843237][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 271.933219][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.953975][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 271.961819][ T9] usb 3-1: media controller created [ 271.983677][ T5880] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 272.062177][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.075706][ T5985] ===================================================== [ 272.083332][ T5985] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 272.090728][ T5985] _copy_to_user+0xcc/0x120 [ 272.095508][ T5985] i2cdev_ioctl_smbus+0x586/0x660 [ 272.100870][ T5985] i2cdev_ioctl+0xa14/0xf40 [ 272.105759][ T5985] __se_sys_ioctl+0x239/0x400 [ 272.110560][ T5985] __x64_sys_ioctl+0x97/0xe0 [ 272.115430][ T5985] x64_sys_call+0x1ebe/0x3db0 [ 272.120446][ T5985] do_syscall_64+0xd9/0x1b0 [ 272.132470][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.140602][ T5985] [ 272.143387][ T5985] Uninit was stored to memory at: [ 272.148774][ T5985] __i2c_smbus_xfer+0x2561/0x2f60 [ 272.154353][ T5985] i2c_smbus_xfer+0x31d/0x4d0 [ 272.160802][ T5985] i2cdev_ioctl_smbus+0x4a1/0x660 [ 272.166338][ T5985] i2cdev_ioctl+0xa14/0xf40 [ 272.171201][ T5985] __se_sys_ioctl+0x239/0x400 [ 272.176393][ T5985] __x64_sys_ioctl+0x97/0xe0 [ 272.181290][ T5985] x64_sys_call+0x1ebe/0x3db0 [ 272.186464][ T5985] do_syscall_64+0xd9/0x1b0 [ 272.191320][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.197707][ T5985] [ 272.200169][ T5985] Local variable msgbuf1.i created at: [ 272.206051][ T5985] __i2c_smbus_xfer+0x86a/0x2f60 [ 272.211214][ T5985] i2c_smbus_xfer+0x31d/0x4d0 [ 272.217100][ T5985] [ 272.219550][ T5985] Byte 0 of 1 is uninitialized [ 272.224609][ T5985] Memory access of size 1 starts at ffff888021527d06 [ 272.236885][ T5985] Data copied to user address 0000200000000080 [ 272.245436][ T5985] [ 272.247979][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.2.3 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 272.260597][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.271066][ T5985] ===================================================== [ 272.278359][ T5985] Disabling lock debugging due to kernel taint [ 272.284789][ T5985] Kernel panic - not syncing: kmsan.panic set ... [ 272.291320][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: syz.2.3 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 272.304957][ T5985] Tainted: [B]=BAD_PAGE [ 272.309184][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.319362][ T5985] Call Trace: [ 272.322725][ T5985] [ 272.325737][ T5985] __dump_stack+0x26/0x30 [ 272.330247][ T5985] dump_stack_lvl+0x53/0x270 [ 272.335054][ T5985] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 272.341019][ T5985] dump_stack+0x1e/0x25 [ 272.345345][ T5985] panic+0x4bd/0xd50 [ 272.349499][ T5985] kmsan_report+0x29d/0x2a0 [ 272.354159][ T5985] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 272.360716][ T5985] ? kmsan_internal_check_memory+0x496/0x570 [ 272.366833][ T5985] ? kmsan_copy_to_user+0xca/0xe0 [ 272.372022][ T5985] ? _copy_to_user+0xcc/0x120 [ 272.376857][ T5985] ? i2cdev_ioctl_smbus+0x586/0x660 [ 272.382371][ T5985] ? i2cdev_ioctl+0xa14/0xf40 [ 272.387196][ T5985] ? __se_sys_ioctl+0x239/0x400 [ 272.392163][ T5985] ? __x64_sys_ioctl+0x97/0xe0 [ 272.397036][ T5985] ? x64_sys_call+0x1ebe/0x3db0 [ 272.402040][ T5985] ? do_syscall_64+0xd9/0x1b0 [ 272.406859][ T5985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.413106][ T5985] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 272.418579][ T5985] ? __i2c_transfer+0x11ca/0x30e0 [ 272.423784][ T5985] ? kmsan_get_metadata+0x105/0x1b0 [ 272.429134][ T5985] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 272.435730][ T5985] ? kmsan_get_metadata+0x105/0x1b0 [ 272.441134][ T5985] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 272.447127][ T5985] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 272.452620][ T5985] ? kmsan_get_metadata+0x105/0x1b0 [ 272.458001][ T5985] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 272.463998][ T5985] kmsan_internal_check_memory+0x496/0x570 [ 272.469970][ T5985] kmsan_copy_to_user+0xca/0xe0 [ 272.474963][ T5985] ? should_fail_usercopy+0x2e/0x40 [ 272.480326][ T5985] _copy_to_user+0xcc/0x120 [ 272.484987][ T5985] i2cdev_ioctl_smbus+0x586/0x660 [ 272.490205][ T5985] i2cdev_ioctl+0xa14/0xf40 [ 272.494865][ T5985] ? kmsan_get_shadow_origin_ptr+0x34/0xb0 [ 272.500948][ T5985] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 272.506117][ T5985] __se_sys_ioctl+0x239/0x400 [ 272.510927][ T5985] __x64_sys_ioctl+0x97/0xe0 [ 272.515646][ T5985] x64_sys_call+0x1ebe/0x3db0 [ 272.520477][ T5985] do_syscall_64+0xd9/0x1b0 [ 272.525129][ T5985] ? irqentry_exit+0x16/0x60 [ 272.529863][ T5985] ? clear_bhb_loop+0x25/0x80 [ 272.534729][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.540834][ T5985] RIP: 0033:0x7f42a418e969 [ 272.545460][ T5985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.565322][ T5985] RSP: 002b:00007f42a4f18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.573911][ T5985] RAX: ffffffffffffffda RBX: 00007f42a43b5fa0 RCX: 00007f42a418e969 [ 272.582003][ T5985] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000004 [ 272.590079][ T5985] RBP: 00007f42a4210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 272.598169][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.607478][ T5985] R13: 0000000000000000 R14: 00007f42a43b5fa0 R15: 00007fffefe9c078 [ 272.615601][ T5985] [ 272.619072][ T5985] Kernel Offset: disabled [ 272.623514][ T5985] Rebooting in 86400 seconds..