last executing test programs: 13.29035857s ago: executing program 0 (id=29): syz_open_dev$sndctrl(0x0, 0xe8000000, 0x8ebb480b69b51531) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000484c) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) 12.580963566s ago: executing program 0 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.007682206s ago: executing program 2 (id=36): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x670, 0x960, 0x1b6, 0x1000, 0x100, 0x6, 0x8, 0x0, {0x2, 0x401, 0x1}, {0xfffffff7, 0x3, 0x1}, {0x0, 0x5}, {0x4, 0xad9}, 0x0, 0x100, 0x1, 0x0, 0x0, 0x4b, 0x5, 0x0, 0x401, 0x8, 0xfffffffd, 0x1, 0x4, 0x200, 0x2, 0xc}) 11.449529836s ago: executing program 0 (id=38): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) 11.128069741s ago: executing program 2 (id=39): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x404c850) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x9, 0x0, 0x2000000, 0x80, 'syz0\x00', 0x2}, 0x3, 0x10, 0x2, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 10.745123333s ago: executing program 0 (id=40): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) 10.423494755s ago: executing program 2 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) r1 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setsockopt$RDS_RECVERR(r1, 0x114, 0x3f, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 7.309007569s ago: executing program 4 (id=48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) syz_open_pts(r0, 0x141601) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5.934038242s ago: executing program 2 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r5 = dup(r4) shutdown(r5, 0x1) 5.933651365s ago: executing program 0 (id=53): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = eventfd2(0xe5c, 0x80001) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r1, 0x7, 0x2}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x9, 0xfffffffffffffffd, 0x0, 0x6, 0x800000000000, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0xb, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.79681934s ago: executing program 0 (id=56): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 4.446612194s ago: executing program 4 (id=59): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa}) syz_usb_ep_read(r0, 0x1, 0x65, &(0x7f0000000140)=""/101) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.059764873s ago: executing program 1 (id=60): r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x852b}, &(0x7f0000000300)=0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) 3.862047135s ago: executing program 3 (id=61): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffffff, 0x0, 0x1, 0x103) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, 0x0, 0x0) 3.539382792s ago: executing program 1 (id=62): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 3.302954608s ago: executing program 3 (id=63): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = fsopen(&(0x7f0000000380)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.686736116s ago: executing program 1 (id=64): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) 2.402476063s ago: executing program 3 (id=65): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5456, 0x10000, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.026838141s ago: executing program 4 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8) 1.707528658s ago: executing program 1 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 1.625236144s ago: executing program 3 (id=68): r0 = syz_io_uring_setup(0x49f, &(0x7f0000001000)={0x0, 0x54e9, 0x0, 0x7, 0x40024f}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x5, 0x100000002, 0x0, 0x6, 0x6, 0x1}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1.374205951s ago: executing program 4 (id=69): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f00000005c0)="46b8", 0x2, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0}, 0x14) 976.951376ms ago: executing program 4 (id=70): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) close(r0) 826.176614ms ago: executing program 1 (id=71): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0xc0) fcntl$setlease(r1, 0x400, 0x1) 682.255618ms ago: executing program 2 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 681.918045ms ago: executing program 3 (id=73): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043e751d"], 0x24) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffffff, 0x0, 0x1, 0x103) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) 251.608894ms ago: executing program 1 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) 201.899186ms ago: executing program 4 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 63.969048ms ago: executing program 2 (id=76): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x5, [0x9, 0x7ff]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 3 (id=77): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x2c, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 158.829031][ T5781] cgroup: Unknown subsys name 'net' [ 158.989940][ T5781] cgroup: Unknown subsys name 'cpuset' [ 159.004401][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.090396][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.097116][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.596975][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 169.644367][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.653519][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.662043][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.673835][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.700046][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.709361][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.717424][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.731947][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.733657][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.751886][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.773340][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.791601][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.801405][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.815166][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.822492][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.825717][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.831915][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.853619][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.862270][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.864109][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.883716][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.897408][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.902577][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.907914][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.915180][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.204896][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 171.482028][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 171.691948][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 171.809963][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 171.881741][ T5808] Bluetooth: hci0: command tx timeout [ 171.887328][ T5808] Bluetooth: hci1: command tx timeout [ 171.927877][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 171.951575][ T5808] Bluetooth: hci3: command tx timeout [ 171.957154][ T5808] Bluetooth: hci2: command tx timeout [ 172.031388][ T5808] Bluetooth: hci4: command tx timeout [ 172.306400][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.316867][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.324657][ T5806] bridge_slave_0: entered allmulticast mode [ 172.334083][ T5806] bridge_slave_0: entered promiscuous mode [ 172.398144][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.405873][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.413650][ T5806] bridge_slave_1: entered allmulticast mode [ 172.422963][ T5806] bridge_slave_1: entered promiscuous mode [ 172.697317][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.706629][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.714330][ T5801] bridge_slave_0: entered allmulticast mode [ 172.723585][ T5801] bridge_slave_0: entered promiscuous mode [ 172.784234][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.792001][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.799519][ T5810] bridge_slave_0: entered allmulticast mode [ 172.810728][ T5810] bridge_slave_0: entered promiscuous mode [ 172.833004][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.842691][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.850130][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.859989][ T5810] bridge_slave_1: entered allmulticast mode [ 172.869300][ T5810] bridge_slave_1: entered promiscuous mode [ 172.878670][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.886403][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.893894][ T5801] bridge_slave_1: entered allmulticast mode [ 172.902504][ T5801] bridge_slave_1: entered promiscuous mode [ 172.953629][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.109845][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.118681][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.126264][ T5809] bridge_slave_0: entered allmulticast mode [ 173.134344][ T5809] bridge_slave_0: entered promiscuous mode [ 173.268664][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.276332][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.283993][ T5809] bridge_slave_1: entered allmulticast mode [ 173.293091][ T5809] bridge_slave_1: entered promiscuous mode [ 173.325642][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.333284][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.340975][ T5800] bridge_slave_0: entered allmulticast mode [ 173.350088][ T5800] bridge_slave_0: entered promiscuous mode [ 173.376992][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.433956][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.452205][ T5806] team0: Port device team_slave_0 added [ 173.459464][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.467332][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.475720][ T5800] bridge_slave_1: entered allmulticast mode [ 173.484098][ T5800] bridge_slave_1: entered promiscuous mode [ 173.501801][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.585272][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.600773][ T5806] team0: Port device team_slave_1 added [ 173.674542][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.691032][ T5810] team0: Port device team_slave_0 added [ 173.791926][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.810411][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.827337][ T5810] team0: Port device team_slave_1 added [ 173.845546][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.952220][ T5808] Bluetooth: hci1: command tx timeout [ 173.957801][ T5808] Bluetooth: hci0: command tx timeout [ 174.031615][ T5805] Bluetooth: hci2: command tx timeout [ 174.035439][ T5808] Bluetooth: hci3: command tx timeout [ 174.044687][ T5801] team0: Port device team_slave_0 added [ 174.087178][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.094451][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.120888][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.121344][ T5808] Bluetooth: hci4: command tx timeout [ 174.163728][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.171532][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.198005][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.217162][ T5800] team0: Port device team_slave_0 added [ 174.230402][ T5801] team0: Port device team_slave_1 added [ 174.244262][ T5809] team0: Port device team_slave_0 added [ 174.306207][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.313658][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.339886][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.354786][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.362059][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.388451][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.421606][ T5800] team0: Port device team_slave_1 added [ 174.434140][ T5809] team0: Port device team_slave_1 added [ 174.586215][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.593656][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.619790][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.734164][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.742144][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.768361][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.783162][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.790495][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.816951][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.907205][ T5810] hsr_slave_0: entered promiscuous mode [ 174.917147][ T5810] hsr_slave_1: entered promiscuous mode [ 174.927689][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.935061][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.961284][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.974535][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.981911][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.008121][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.045625][ T5806] hsr_slave_0: entered promiscuous mode [ 175.055158][ T5806] hsr_slave_1: entered promiscuous mode [ 175.063545][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 175.069367][ T5806] Cannot create hsr debugfs directory [ 175.082075][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.089164][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.115410][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.311883][ T5809] hsr_slave_0: entered promiscuous mode [ 175.321654][ T5809] hsr_slave_1: entered promiscuous mode [ 175.329988][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 175.337207][ T5809] Cannot create hsr debugfs directory [ 175.701484][ T5801] hsr_slave_0: entered promiscuous mode [ 175.711132][ T5801] hsr_slave_1: entered promiscuous mode [ 175.719340][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 175.725557][ T5801] Cannot create hsr debugfs directory [ 175.787619][ T5800] hsr_slave_0: entered promiscuous mode [ 175.797253][ T5800] hsr_slave_1: entered promiscuous mode [ 175.805811][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 175.811897][ T5800] Cannot create hsr debugfs directory [ 176.036900][ T5808] Bluetooth: hci0: command tx timeout [ 176.036941][ T5805] Bluetooth: hci1: command tx timeout [ 176.111146][ T5808] Bluetooth: hci3: command tx timeout [ 176.123036][ T5808] Bluetooth: hci2: command tx timeout [ 176.192100][ T5808] Bluetooth: hci4: command tx timeout [ 176.916527][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.934705][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.968919][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.988462][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.053510][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.080144][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.108325][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.170439][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.375186][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.404704][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.452488][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.470463][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.491579][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.527535][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.548712][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.584801][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.922955][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.974635][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.003439][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.023456][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.113150][ T5808] Bluetooth: hci1: command tx timeout [ 178.118740][ T5808] Bluetooth: hci0: command tx timeout [ 178.201809][ T5805] Bluetooth: hci2: command tx timeout [ 178.202302][ T5808] Bluetooth: hci3: command tx timeout [ 178.277942][ T5808] Bluetooth: hci4: command tx timeout [ 178.352500][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.539749][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.576588][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.674377][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.707781][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.715312][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.824482][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.832043][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.866774][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.914609][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.951974][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.039912][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.049778][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.064775][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.072581][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.095935][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.104109][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.152704][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.351705][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.409511][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.417200][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.444520][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.452163][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.484027][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.491555][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.717139][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.820227][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.887880][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.895732][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.013197][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.020681][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.204355][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.272032][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.510634][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.577292][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.714393][ T5810] veth0_vlan: entered promiscuous mode [ 181.787495][ T5809] veth0_vlan: entered promiscuous mode [ 181.818470][ T5810] veth1_vlan: entered promiscuous mode [ 181.935225][ T5809] veth1_vlan: entered promiscuous mode [ 182.092647][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.125900][ T5801] veth0_vlan: entered promiscuous mode [ 182.223239][ T5801] veth1_vlan: entered promiscuous mode [ 182.261726][ T5810] veth0_macvtap: entered promiscuous mode [ 182.308632][ T5809] veth0_macvtap: entered promiscuous mode [ 182.348868][ T5810] veth1_macvtap: entered promiscuous mode [ 182.409244][ T5809] veth1_macvtap: entered promiscuous mode [ 182.569513][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.619528][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.678922][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.740210][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.779281][ T5800] veth0_vlan: entered promiscuous mode [ 182.788808][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.814110][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.842841][ T5801] veth0_macvtap: entered promiscuous mode [ 182.885089][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.934982][ T5800] veth1_vlan: entered promiscuous mode [ 182.947586][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.959134][ T5801] veth1_macvtap: entered promiscuous mode [ 183.013331][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.063868][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.089443][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.148084][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.256049][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.283131][ T5800] veth0_macvtap: entered promiscuous mode [ 183.339256][ T5800] veth1_macvtap: entered promiscuous mode [ 183.363219][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.463737][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.535915][ T1140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.571136][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.599770][ T1140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.677922][ T1140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.728886][ T1140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.782458][ T1140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.812128][ T1869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.875207][ T1869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.929050][ T1869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.233875][ T5806] veth0_vlan: entered promiscuous mode [ 184.339352][ T5806] veth1_vlan: entered promiscuous mode [ 184.662001][ T5806] veth0_macvtap: entered promiscuous mode [ 184.767351][ T5806] veth1_macvtap: entered promiscuous mode [ 184.878585][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.996140][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.064862][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.125564][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.182743][ T4852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.239901][ T4852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.288156][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.296396][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.532141][ T1842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.540143][ T1842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.677055][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.685642][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.817492][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.825744][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.986401][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 189.195870][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.204067][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.242018][ T4706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.250020][ T4706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.510576][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.518904][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.554323][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.562837][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.558932][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.568090][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.679197][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.687359][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.468560][ T6002] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.482700][ T6002] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 191.493657][ T6002] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 194.132258][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 194.393626][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.408585][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.567644][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.577055][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.585652][ T9] usb 3-1: SerialNumber: syz [ 195.060621][ T6025] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 195.087924][ T6025] Zero length message leads to an empty skb [ 195.095636][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 195.229074][ T9] usb 3-1: 0:2 : does not exist [ 195.332397][ T9] usb 3-1: USB disconnect, device number 2 [ 195.563046][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.650099][ T6026] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14'. [ 197.067418][ T6046] bridge0: entered promiscuous mode [ 197.073180][ T6046] macsec1: entered promiscuous mode [ 197.084741][ T6046] bridge0: port 3(macsec1) entered blocking state [ 197.091887][ T6046] bridge0: port 3(macsec1) entered disabled state [ 197.099079][ T6046] macsec1: entered allmulticast mode [ 197.104664][ T6046] bridge0: entered allmulticast mode [ 197.224758][ T6046] macsec1: left allmulticast mode [ 197.230151][ T6046] bridge0: left allmulticast mode [ 197.258868][ T6046] bridge0: left promiscuous mode [ 197.915955][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.105096][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 198.125172][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.137033][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.147334][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.154300][ T9] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 198.163683][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.176642][ T6053] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 198.212491][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 198.221727][ T6053] bridge_slave_1: left allmulticast mode [ 198.227645][ T6053] bridge_slave_1: left promiscuous mode [ 198.235308][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.254255][ T9] usb 5-1: config 0 descriptor?? [ 198.319453][ T6053] bridge_slave_0: left allmulticast mode [ 198.329553][ T6053] bridge_slave_0: left promiscuous mode [ 198.336408][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.734685][ T9] hid (null): unknown global tag 0xc [ 198.740205][ T9] hid (null): global environment stack underflow [ 199.017534][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.024972][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.032581][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.039830][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.047321][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.054638][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.061920][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.069219][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.076663][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.084002][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 199.096126][ T9] cougar 0003:060B:500A.0001: unexpected long global item [ 199.337446][ T9] cougar 0003:060B:500A.0001: parse failed [ 199.344181][ T9] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 199.398360][ T9] usb 5-1: USB disconnect, device number 2 [ 200.494171][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 201.608704][ T6084] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 201.619366][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 201.761316][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 202.896426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 203.101790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 203.339705][ T30] audit: type=1804 audit(1760495045.762:2): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.43" name="/newroot/10/file0" dev="tmpfs" ino=68 res=1 errno=0 [ 205.042782][ T6109] capability: warning: `syz.4.47' uses deprecated v2 capabilities in a way that may be insecure [ 205.875501][ T6112] vlan2: entered promiscuous mode [ 205.881074][ T6112] veth0_virt_wifi: entered promiscuous mode [ 205.888049][ T6112] vlan2: entered allmulticast mode [ 205.893517][ T6112] veth0_virt_wifi: entered allmulticast mode [ 205.905266][ T5808] Bluetooth: hci1: Unable to find connection for big 0x00 [ 206.255535][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 206.488854][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.497217][ T9] usb 5-1: config 0 has no interface number 0 [ 206.503814][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.515254][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 206.526457][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.535858][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.549965][ T6119] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 206.644936][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 206.654471][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.737619][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.793242][ T9] usb 5-1: config 0 descriptor?? [ 206.801774][ T6113] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.863430][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.035794][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 207.291655][ T6112] hsr_slave_1 (unregistering): left promiscuous mode [ 207.484441][ T9] usb 5-1: USB disconnect, device number 3 [ 208.816441][ T1599] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.031914][ T1599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.061414][ T5808] Bluetooth: hci3: Unable to find connection for big 0x00 [ 209.069685][ T1599] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 209.078273][ T1599] usb 5-1: config 6 has no interface number 0 [ 209.084768][ T1599] usb 5-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 209.096131][ T1599] usb 5-1: config 6 interface 200 has no altsetting 0 [ 209.289865][ T1599] usb 5-1: string descriptor 0 read error: -22 [ 209.296922][ T1599] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 209.306352][ T1599] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 209.405129][ T1599] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 209.614438][ T1599] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.679469][ T1599] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 209.688146][ T1599] usb 5-1: media controller created [ 209.790394][ T1599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.158024][ T1599] dvb-usb: bulk message failed: -71 (6/0) [ 210.191267][ T1599] dvb-usb: bulk message failed: -71 (6/0) [ 210.197685][ T1599] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 210.238542][ T1599] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 210.278984][ T6155] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 210.326967][ T1599] dvb-usb: schedule remote query interval to 150 msecs. [ 210.334217][ T1599] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 210.362943][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 210.391280][ T1599] usb 5-1: USB disconnect, device number 4 [ 210.886739][ T1599] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 212.287827][ T5808] Bluetooth: hci3: Unable to find connection for big 0x00 [ 212.764311][ T6183] ===================================================== [ 212.771819][ T6183] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 212.780162][ T6183] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 212.786380][ T6183] do_xdp_generic+0xd52/0x1690 [ 212.791454][ T6183] tun_get_user+0x45be/0x6d70 [ 212.796314][ T6183] tun_chr_write_iter+0x3e9/0x5c0 [ 212.801736][ T6183] vfs_write+0xbe2/0x15d0 [ 212.806253][ T6183] __ia32_sys_write+0x1f9/0x4d0 [ 212.811451][ T6183] ia32_sys_call+0x35bc/0x4310 [ 212.816586][ T6183] __do_fast_syscall_32+0xb0/0x150 [ 212.822063][ T6183] do_fast_syscall_32+0x38/0x80 [ 212.827125][ T6183] do_SYSENTER_32+0x1f/0x30 [ 212.832024][ T6183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.838528][ T6183] [ 212.841202][ T6183] Uninit was stored to memory at: [ 212.846492][ T6183] pskb_expand_head+0x310/0x1610 [ 212.851821][ T6183] do_xdp_generic+0xa79/0x1690 [ 212.856834][ T6183] tun_get_user+0x45be/0x6d70 [ 212.861928][ T6183] tun_chr_write_iter+0x3e9/0x5c0 [ 212.867139][ T6183] vfs_write+0xbe2/0x15d0 [ 212.871861][ T6183] __ia32_sys_write+0x1f9/0x4d0 [ 212.876849][ T6183] ia32_sys_call+0x35bc/0x4310 [ 212.882013][ T6183] __do_fast_syscall_32+0xb0/0x150 [ 212.887312][ T6183] do_fast_syscall_32+0x38/0x80 [ 212.892503][ T6183] do_SYSENTER_32+0x1f/0x30 [ 212.897203][ T6183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.903852][ T6183] [ 212.906241][ T6183] Uninit was created at: [ 212.910722][ T6183] __kmalloc_node_track_caller_noprof+0xb4b/0x1ba0 [ 212.917546][ T6183] kmalloc_reserve+0x22f/0x4b0 [ 212.922886][ T6183] __alloc_skb+0x347/0x7d0 [ 212.927442][ T6183] alloc_skb_with_frags+0xc5/0xa60 [ 212.932946][ T6183] sock_alloc_send_pskb+0xacc/0xc60 [ 212.938578][ T6183] tun_get_user+0x1142/0x6d70 [ 212.943588][ T6183] tun_chr_write_iter+0x3e9/0x5c0 [ 212.948784][ T6183] vfs_write+0xbe2/0x15d0 [ 212.953444][ T6183] __ia32_sys_write+0x1f9/0x4d0 [ 212.958441][ T6183] ia32_sys_call+0x35bc/0x4310 [ 212.963552][ T6183] __do_fast_syscall_32+0xb0/0x150 [ 212.968873][ T6183] do_fast_syscall_32+0x38/0x80 [ 212.974072][ T6183] do_SYSENTER_32+0x1f/0x30 [ 212.978858][ T6183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.985638][ T6183] [ 212.988091][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT(none) [ 212.997517][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.007964][ T6183] ===================================================== [ 213.015136][ T6183] Disabling lock debugging due to kernel taint [ 213.021532][ T6183] Kernel panic - not syncing: kmsan.panic set ... [ 213.028074][ T6183] CPU: 0 UID: 0 PID: 6183 Comm: syz.1.74 Tainted: G B syzkaller #0 PREEMPT(none) [ 213.038931][ T6183] Tainted: [B]=BAD_PAGE [ 213.043171][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.053353][ T6183] Call Trace: [ 213.056737][ T6183] [ 213.059750][ T6183] __dump_stack+0x26/0x30 [ 213.064253][ T6183] dump_stack_lvl+0x53/0x270 [ 213.069013][ T6183] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 213.075003][ T6183] dump_stack+0x1e/0x25 [ 213.079326][ T6183] vpanic+0x435/0xd30 [ 213.083585][ T6183] panic+0x15d/0x160 [ 213.087781][ T6183] kmsan_report+0x31c/0x320 [ 213.092455][ T6183] ? __msan_warning+0x1b/0x30 [ 213.097284][ T6183] ? bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 213.103357][ T6183] ? do_xdp_generic+0xd52/0x1690 [ 213.108462][ T6183] ? tun_get_user+0x45be/0x6d70 [ 213.113485][ T6183] ? tun_chr_write_iter+0x3e9/0x5c0 [ 213.118872][ T6183] ? vfs_write+0xbe2/0x15d0 [ 213.123585][ T6183] ? __ia32_sys_write+0x1f9/0x4d0 [ 213.128762][ T6183] ? ia32_sys_call+0x35bc/0x4310 [ 213.133910][ T6183] ? __do_fast_syscall_32+0xb0/0x150 [ 213.139401][ T6183] ? do_fast_syscall_32+0x38/0x80 [ 213.144642][ T6183] ? do_SYSENTER_32+0x1f/0x30 [ 213.149517][ T6183] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.156230][ T6183] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 213.162225][ T6183] ? ___bpf_prog_run+0xea65/0xeba0 [ 213.167519][ T6183] ? __bpf_prog_run32+0xc2/0xf0 [ 213.172538][ T6183] ? kmsan_get_metadata+0xfb/0x160 [ 213.177964][ T6183] __msan_warning+0x1b/0x30 [ 213.182624][ T6183] bpf_prog_run_generic_xdp+0x1a5a/0x2000 [ 213.188577][ T6183] do_xdp_generic+0xd52/0x1690 [ 213.193509][ T6183] ? tun_get_user+0x40d1/0x6d70 [ 213.198534][ T6183] ? filter_irq_stacks+0x49/0x190 [ 213.203783][ T6183] ? kmsan_get_metadata+0xfb/0x160 [ 213.209083][ T6183] ? tun_get_user+0x453d/0x6d70 [ 213.214108][ T6183] tun_get_user+0x45be/0x6d70 [ 213.218976][ T6183] ? stack_depot_save_flags+0x35/0x7b0 [ 213.224616][ T6183] ? kmsan_get_metadata+0xfb/0x160 [ 213.229885][ T6183] ? kmsan_get_metadata+0xfb/0x160 [ 213.235157][ T6183] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 213.241727][ T6183] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 213.248064][ T6183] tun_chr_write_iter+0x3e9/0x5c0 [ 213.253291][ T6183] vfs_write+0xbe2/0x15d0 [ 213.257840][ T6183] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 213.263579][ T6183] __ia32_sys_write+0x1f9/0x4d0 [ 213.268650][ T6183] ia32_sys_call+0x35bc/0x4310 [ 213.273626][ T6183] __do_fast_syscall_32+0xb0/0x150 [ 213.278963][ T6183] do_fast_syscall_32+0x38/0x80 [ 213.284017][ T6183] do_SYSENTER_32+0x1f/0x30 [ 213.288721][ T6183] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.295477][ T6183] RIP: 0023:0xf7f64539 [ 213.299653][ T6183] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 213.319658][ T6183] RSP: 002b:00000000f5456520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 213.328222][ T6183] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 213.336290][ T6183] RDX: 000000000000fdef RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 213.344362][ T6183] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.352858][ T6183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.360920][ T6183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.369019][ T6183] [ 213.372422][ T6183] Kernel Offset: disabled [ 213.376790][ T6183] Rebooting in 86400 seconds..