last executing test programs: 3.75052269s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 1.663648291s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) 951.921419ms ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0x7, 0x2, &(0x7f0000000240)={0x9, "810556c721393f4084be9ea7f77d040b0200000010000000000000004200"}}) 528.031633ms ago: executing program 0 (id=7): personality(0x87bf5ac905ea0f7f) syz_ublk_setup_io_uring(0x1338, &(0x7f0000000000)={0x0, 0x5ac5, 0x400, 0x20002, 0x283}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000180)) 0s ago: executing program 0 (id=8): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r1, 0x0, 0x0) socket(0x11, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x600, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 155.803096][ T5555] cgroup: Unknown subsys name 'net' [ 155.948144][ T5555] cgroup: Unknown subsys name 'cpuset' [ 155.961713][ T5555] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.560074][ T5555] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.757872][ T5577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.764155][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.766964][ T5577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.775643][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.782245][ T5577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.799302][ T5577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.814270][ T5577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.814429][ T5581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.825700][ T5577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.832263][ T5581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.844475][ T5581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.860281][ T5581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.868330][ T5583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.874614][ T5581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.887647][ T5583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.979694][ T5581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.992440][ T5581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.000319][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.010828][ T5581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.011568][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.029954][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.048167][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.056711][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.070079][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.085241][ T5575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.919145][ T5575] Bluetooth: hci1: command tx timeout [ 167.924864][ T5583] Bluetooth: hci2: command tx timeout [ 167.926355][ T48] Bluetooth: hci0: command tx timeout [ 168.159213][ T48] Bluetooth: hci3: command tx timeout [ 168.159264][ T5583] Bluetooth: hci4: command tx timeout [ 170.000917][ T48] Bluetooth: hci2: command tx timeout [ 170.006633][ T5583] Bluetooth: hci0: command tx timeout [ 170.012411][ T5575] Bluetooth: hci1: command tx timeout [ 170.140483][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.160490][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.180701][ T5573] bridge_slave_0: entered allmulticast mode [ 170.198050][ T5573] bridge_slave_0: entered promiscuous mode [ 170.228810][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.239472][ T5583] Bluetooth: hci4: command tx timeout [ 170.245110][ T48] Bluetooth: hci3: command tx timeout [ 170.259535][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.267360][ T5573] bridge_slave_1: entered allmulticast mode [ 170.277743][ T5573] bridge_slave_1: entered promiscuous mode [ 170.502176][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.511108][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.518613][ T5574] bridge_slave_0: entered allmulticast mode [ 170.527692][ T5574] bridge_slave_0: entered promiscuous mode [ 170.546581][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.599969][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.607603][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.615129][ T5574] bridge_slave_1: entered allmulticast mode [ 170.623240][ T5574] bridge_slave_1: entered promiscuous mode [ 170.663404][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.695118][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.702760][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.710353][ T5580] bridge_slave_0: entered allmulticast mode [ 170.718272][ T5580] bridge_slave_0: entered promiscuous mode [ 170.795705][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.803352][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.810936][ T5586] bridge_slave_0: entered allmulticast mode [ 170.819648][ T5586] bridge_slave_0: entered promiscuous mode [ 170.830493][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.838017][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.845948][ T5580] bridge_slave_1: entered allmulticast mode [ 170.853974][ T5580] bridge_slave_1: entered promiscuous mode [ 170.885638][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.893119][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.900778][ T5585] bridge_slave_0: entered allmulticast mode [ 170.909074][ T5585] bridge_slave_0: entered promiscuous mode [ 170.942255][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.950215][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.957529][ T5586] bridge_slave_1: entered allmulticast mode [ 170.966096][ T5586] bridge_slave_1: entered promiscuous mode [ 171.003679][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.013403][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.021273][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.028634][ T5585] bridge_slave_1: entered allmulticast mode [ 171.037063][ T5585] bridge_slave_1: entered promiscuous mode [ 171.073063][ T5573] team0: Port device team_slave_0 added [ 171.240039][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.301207][ T5573] team0: Port device team_slave_1 added [ 171.315005][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.332486][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.372866][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.411068][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.426652][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.443097][ T5574] team0: Port device team_slave_0 added [ 171.455837][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.533794][ T5574] team0: Port device team_slave_1 added [ 171.564306][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.571413][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.597495][ T5573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.697824][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.705385][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.731830][ T5573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.749609][ T5586] team0: Port device team_slave_0 added [ 171.762795][ T5580] team0: Port device team_slave_0 added [ 171.796454][ T5585] team0: Port device team_slave_0 added [ 171.825235][ T5586] team0: Port device team_slave_1 added [ 171.836689][ T5580] team0: Port device team_slave_1 added [ 171.845637][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.853046][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.879964][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.898575][ T5585] team0: Port device team_slave_1 added [ 171.979659][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.986730][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.012933][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.051183][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.058268][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.084887][ T5583] Bluetooth: hci0: command tx timeout [ 172.085009][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.090599][ T48] Bluetooth: hci2: command tx timeout [ 172.090688][ T48] Bluetooth: hci1: command tx timeout [ 172.207148][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.214772][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.242169][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.256312][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.263400][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.290029][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.303870][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.311006][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.339493][ T5583] Bluetooth: hci3: command tx timeout [ 172.339844][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.345406][ T48] Bluetooth: hci4: command tx timeout [ 172.365719][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.373251][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.399556][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.451388][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.458410][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.484688][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.526447][ T5573] hsr_slave_0: entered promiscuous mode [ 172.534643][ T5573] hsr_slave_1: entered promiscuous mode [ 172.677583][ T5574] hsr_slave_0: entered promiscuous mode [ 172.685815][ T5574] hsr_slave_1: entered promiscuous mode [ 172.693642][ T5574] debugfs: 'hsr0' already exists in 'hsr' [ 172.699564][ T5574] Cannot create hsr debugfs directory [ 172.819032][ T5580] hsr_slave_0: entered promiscuous mode [ 172.827171][ T5580] hsr_slave_1: entered promiscuous mode [ 172.834945][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 172.840816][ T5580] Cannot create hsr debugfs directory [ 172.857991][ T5585] hsr_slave_0: entered promiscuous mode [ 172.866600][ T5585] hsr_slave_1: entered promiscuous mode [ 172.874496][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 172.880377][ T5585] Cannot create hsr debugfs directory [ 172.925522][ T5586] hsr_slave_0: entered promiscuous mode [ 172.935100][ T5586] hsr_slave_1: entered promiscuous mode [ 172.943410][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 172.949361][ T5586] Cannot create hsr debugfs directory [ 174.082879][ T5573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.112096][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.125475][ T5573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.141941][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.153178][ T5573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.160537][ T5583] Bluetooth: hci0: command tx timeout [ 174.164726][ T48] Bluetooth: hci1: command tx timeout [ 174.166199][ T5575] Bluetooth: hci2: command tx timeout [ 174.182021][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.206875][ T5573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.223985][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.330090][ T5580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.354100][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.371704][ T5580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.390359][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.400273][ T5580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.401320][ T5575] Bluetooth: hci3: command tx timeout [ 174.412872][ T5583] Bluetooth: hci4: command tx timeout [ 174.427386][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.436996][ T5580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.455536][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.622208][ T5574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.645548][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.663447][ T5574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.683092][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.692810][ T5574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.715178][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.753400][ T5574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.771540][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.984892][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.001950][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.014762][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.032881][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.061606][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.083825][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.127485][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.147142][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.343050][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.363973][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.401850][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.419570][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.453452][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.471081][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.508278][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.527693][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.611079][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.755650][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.797348][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.842585][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.849924][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.929857][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.937174][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.981908][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.072164][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.079676][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.165466][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.172902][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.207601][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.315078][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.397870][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.587426][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.595015][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.658503][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.666055][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.787364][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.895266][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.902822][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.018824][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.026592][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.224067][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.472870][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.557665][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.565210][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.711742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.719286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.127962][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.553456][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.772835][ T5573] veth0_vlan: entered promiscuous mode [ 179.926022][ T5573] veth1_vlan: entered promiscuous mode [ 180.412980][ T5580] veth0_vlan: entered promiscuous mode [ 180.521428][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.565116][ T5573] veth0_macvtap: entered promiscuous mode [ 180.668096][ T5580] veth1_vlan: entered promiscuous mode [ 180.698211][ T5573] veth1_macvtap: entered promiscuous mode [ 180.866931][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.956939][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.085981][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.248837][ T100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.273563][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.313128][ T5580] veth0_macvtap: entered promiscuous mode [ 181.328098][ T100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.366080][ T100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.380657][ T100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.467064][ T5580] veth1_macvtap: entered promiscuous mode [ 181.485924][ T5574] veth0_vlan: entered promiscuous mode [ 181.705239][ T5574] veth1_vlan: entered promiscuous mode [ 181.755274][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.865969][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.006262][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.018403][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.048784][ T5585] veth0_vlan: entered promiscuous mode [ 182.063290][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.073615][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.276423][ T5585] veth1_vlan: entered promiscuous mode [ 182.438808][ T5574] veth0_macvtap: entered promiscuous mode [ 182.461444][ T5586] veth0_vlan: entered promiscuous mode [ 182.532358][ T5574] veth1_macvtap: entered promiscuous mode [ 182.638120][ T5586] veth1_vlan: entered promiscuous mode [ 182.847643][ T5585] veth0_macvtap: entered promiscuous mode [ 182.869937][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.945288][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.987289][ T5585] veth1_macvtap: entered promiscuous mode [ 183.097196][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.121487][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.153878][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.179843][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.337239][ T5586] veth0_macvtap: entered promiscuous mode [ 183.381436][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.454675][ T5586] veth1_macvtap: entered promiscuous mode [ 183.516262][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.685430][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.700832][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.726964][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.737182][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.835891][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.963370][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.099778][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.137880][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.214086][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.237565][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.071695][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.103161][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.316262][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.367655][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.877213][ T5573] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.109445][ T5699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.151203][ T5699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.610753][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.631409][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.471783][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 190.641075][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 190.658762][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 190.681335][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.734059][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.746874][ T9] usb 4-1: config 0 descriptor?? [ 190.774102][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.942549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.989237][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.006253][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 191.078467][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.112714][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 191.161703][ T9] usb 4-1: media controller created [ 191.205217][ T5845] ===================================================== [ 191.212710][ T5845] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 191.222812][ T5845] _copy_to_user+0xcc/0x120 [ 191.228077][ T5845] i2cdev_ioctl_smbus+0x586/0x660 [ 191.233384][ T5845] i2cdev_ioctl+0xa14/0xf40 [ 191.238049][ T5845] __se_sys_ioctl+0x23c/0x400 [ 191.243054][ T5845] __x64_sys_ioctl+0x97/0xe0 [ 191.247808][ T5845] x64_sys_call+0x1975/0x3ea0 [ 191.252812][ T5845] do_syscall_64+0x134/0xf80 [ 191.257659][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.263866][ T5845] [ 191.266245][ T5845] Uninit was stored to memory at: [ 191.268023][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.274895][ T5845] __i2c_smbus_xfer+0x2609/0x30b0 [ 191.285865][ T5845] i2c_smbus_xfer+0x2d8/0x480 [ 191.290875][ T5845] i2cdev_ioctl_smbus+0x4a1/0x660 [ 191.296085][ T5845] i2cdev_ioctl+0xa14/0xf40 [ 191.300913][ T5845] __se_sys_ioctl+0x23c/0x400 [ 191.305761][ T5845] __x64_sys_ioctl+0x97/0xe0 [ 191.311053][ T5845] x64_sys_call+0x1975/0x3ea0 [ 191.315895][ T5845] do_syscall_64+0x134/0xf80 [ 191.323811][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.330852][ T5845] [ 191.333255][ T5845] Local variable msgbuf1.i created at: [ 191.338781][ T5845] __i2c_smbus_xfer+0x876/0x30b0 [ 191.344136][ T5845] i2c_smbus_xfer+0x2d8/0x480 [ 191.349188][ T5845] [ 191.351576][ T5845] Byte 0 of 1 is uninitialized [ 191.356415][ T5845] Memory access of size 1 starts at ffff888052757d06 [ 191.363374][ T5845] Data copied to user address 0000200000000240 [ 191.369735][ T5845] [ 191.372165][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 191.381515][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.391823][ T5845] ===================================================== [ 191.398824][ T5845] Disabling lock debugging due to kernel taint [ 191.467056][ T5845] Kernel panic - not syncing: kmsan.panic set ... [ 191.473634][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.3.6 Tainted: G B syzkaller #0 PREEMPT(full) [ 191.484399][ T5845] Tainted: [B]=BAD_PAGE [ 191.488635][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.498808][ T5845] Call Trace: [ 191.502182][ T5845] [ 191.505199][ T5845] __dump_stack+0x26/0x30 [ 191.509696][ T5845] dump_stack_lvl+0x50/0x1c0 [ 191.514441][ T5845] ? dump_stack+0x12/0x25 [ 191.518939][ T5845] dump_stack+0x1e/0x25 [ 191.523243][ T5845] vpanic+0x7b4/0x1430 [ 191.527509][ T5845] panic+0x15d/0x160 [ 191.531617][ T5845] kmsan_report+0x31a/0x320 [ 191.536312][ T5845] ? kmsan_internal_check_memory+0x1e8/0x240 [ 191.542482][ T5845] ? kmsan_copy_to_user+0xef/0x190 [ 191.547771][ T5845] ? _copy_to_user+0xcc/0x120 [ 191.552635][ T5845] ? i2cdev_ioctl_smbus+0x586/0x660 [ 191.557996][ T5845] ? i2cdev_ioctl+0xa14/0xf40 [ 191.562832][ T5845] ? __se_sys_ioctl+0x23c/0x400 [ 191.567868][ T5845] ? __x64_sys_ioctl+0x97/0xe0 [ 191.572809][ T5845] ? x64_sys_call+0x1975/0x3ea0 [ 191.577830][ T5845] ? do_syscall_64+0x134/0xf80 [ 191.582764][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.588999][ T5845] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 191.594463][ T5845] ? __i2c_transfer+0x1189/0x31c0 [ 191.599654][ T5845] ? kmsan_get_metadata+0xf1/0x160 [ 191.604965][ T5845] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 191.611491][ T5845] ? kmsan_get_metadata+0xf1/0x160 [ 191.616806][ T5845] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 191.622833][ T5845] ? __i2c_smbus_xfer+0x1fb8/0x30b0 [ 191.628219][ T5845] ? kmsan_get_metadata+0xf1/0x160 [ 191.633542][ T5845] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 191.639572][ T5845] kmsan_internal_check_memory+0x1e8/0x240 [ 191.645589][ T5845] kmsan_copy_to_user+0xef/0x190 [ 191.650705][ T5845] _copy_to_user+0xcc/0x120 [ 191.655396][ T5845] i2cdev_ioctl_smbus+0x586/0x660 [ 191.660616][ T5845] i2cdev_ioctl+0xa14/0xf40 [ 191.665291][ T5845] ? kmsan_report+0x2a7/0x320 [ 191.670162][ T5845] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 191.675355][ T5845] __se_sys_ioctl+0x23c/0x400 [ 191.680238][ T5845] __x64_sys_ioctl+0x97/0xe0 [ 191.685029][ T5845] x64_sys_call+0x1975/0x3ea0 [ 191.689870][ T5845] do_syscall_64+0x134/0xf80 [ 191.694645][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 191.699494][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.705557][ T5845] RIP: 0033:0x7fdb5339cdd9 [ 191.710106][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.729888][ T5845] RSP: 002b:00007fdb5424a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.738476][ T5845] RAX: ffffffffffffffda RBX: 00007fdb53615fa0 RCX: 00007fdb5339cdd9 [ 191.746593][ T5845] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 191.754694][ T5845] RBP: 00007fdb53432d69 R08: 0000000000000000 R09: 0000000000000000 [ 191.762800][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.770895][ T5845] R13: 00007fdb53616038 R14: 00007fdb53615fa0 R15: 00007ffcff7eefb8 [ 191.779041][ T5845] [ 191.782340][ T5845] Kernel Offset: disabled [ 191.786729][ T5845] Rebooting in 86400 seconds..