last executing test programs: 3.006358771s ago: executing program 2 (id=3): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x18, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x20000000) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000407d1e512d0000000000010902240001000000080904000009030001000921fefffe0122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00#4\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.208323072s ago: executing program 4 (id=5): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 253.859183ms ago: executing program 2 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8014) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) getsockopt(r5, 0x10117, 0x1002, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.35' (ED25519) to the list of known hosts. [ 195.384462][ T5553] cgroup: Unknown subsys name 'net' [ 195.566406][ T5553] cgroup: Unknown subsys name 'cpuset' [ 195.587471][ T5553] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 202.609844][ T5553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 207.673942][ T5572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.688800][ T5572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.700509][ T5572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.720530][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.732859][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.744124][ T5580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.783968][ T5579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.794122][ T5579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.809255][ T5579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.821885][ T5579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.842149][ T5572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.856019][ T5572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.867918][ T4870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.902930][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.907210][ T4870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.920191][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.935924][ T5572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.949161][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.960430][ T4870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.972256][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.974797][ T4870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.999051][ T4870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.008322][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.022621][ T5579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.040977][ T4870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.776485][ T4870] Bluetooth: hci0: command tx timeout [ 209.940495][ T4870] Bluetooth: hci1: command tx timeout [ 209.950971][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.960104][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.095209][ T4870] Bluetooth: hci4: command tx timeout [ 210.100972][ T4870] Bluetooth: hci3: command tx timeout [ 210.107091][ T5580] Bluetooth: hci2: command tx timeout [ 211.854973][ T5580] Bluetooth: hci0: command tx timeout [ 212.019861][ T5580] Bluetooth: hci1: command tx timeout [ 212.185439][ T5580] Bluetooth: hci2: command tx timeout [ 212.185670][ T4870] Bluetooth: hci3: command tx timeout [ 212.191170][ T5579] Bluetooth: hci4: command tx timeout [ 213.561373][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.585337][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.605632][ T5574] bridge_slave_0: entered allmulticast mode [ 213.627784][ T5574] bridge_slave_0: entered promiscuous mode [ 213.677946][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.709617][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.755454][ T5585] bridge_slave_0: entered allmulticast mode [ 213.777880][ T5585] bridge_slave_0: entered promiscuous mode [ 213.797654][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.807054][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.815018][ T5574] bridge_slave_1: entered allmulticast mode [ 213.823718][ T5574] bridge_slave_1: entered promiscuous mode [ 213.904247][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.935014][ T5579] Bluetooth: hci0: command tx timeout [ 213.941779][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.957716][ T5585] bridge_slave_1: entered allmulticast mode [ 213.978745][ T5585] bridge_slave_1: entered promiscuous mode [ 214.095400][ T5579] Bluetooth: hci1: command tx timeout [ 214.214728][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.255046][ T5580] Bluetooth: hci3: command tx timeout [ 214.255284][ T4870] Bluetooth: hci2: command tx timeout [ 214.261117][ T5579] Bluetooth: hci4: command tx timeout [ 214.301513][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.311877][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.319991][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.328150][ T5575] bridge_slave_0: entered allmulticast mode [ 214.337561][ T5575] bridge_slave_0: entered promiscuous mode [ 214.359508][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.369651][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.378133][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.385942][ T5576] bridge_slave_0: entered allmulticast mode [ 214.395155][ T5576] bridge_slave_0: entered promiscuous mode [ 214.407284][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.415372][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.422892][ T5571] bridge_slave_0: entered allmulticast mode [ 214.433270][ T5571] bridge_slave_0: entered promiscuous mode [ 214.455114][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.465714][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.473334][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.481459][ T5575] bridge_slave_1: entered allmulticast mode [ 214.490956][ T5575] bridge_slave_1: entered promiscuous mode [ 214.528221][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.536115][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.543767][ T5576] bridge_slave_1: entered allmulticast mode [ 214.553993][ T5576] bridge_slave_1: entered promiscuous mode [ 214.566241][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.573859][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.581830][ T5571] bridge_slave_1: entered allmulticast mode [ 214.591120][ T5571] bridge_slave_1: entered promiscuous mode [ 214.786518][ T5585] team0: Port device team_slave_0 added [ 214.829818][ T5574] team0: Port device team_slave_0 added [ 214.913811][ T5585] team0: Port device team_slave_1 added [ 214.980887][ T5575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.999520][ T5574] team0: Port device team_slave_1 added [ 215.014242][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.034476][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.084408][ T5575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.130843][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.175693][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.188435][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.195821][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.222901][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.349422][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.356870][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.384286][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.427543][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.435063][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.461765][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.483056][ T5576] team0: Port device team_slave_0 added [ 215.546423][ T5575] team0: Port device team_slave_0 added [ 215.555748][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.563029][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.590256][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.609940][ T5576] team0: Port device team_slave_1 added [ 215.625260][ T5571] team0: Port device team_slave_0 added [ 215.643700][ T5575] team0: Port device team_slave_1 added [ 215.705371][ T5571] team0: Port device team_slave_1 added [ 215.868898][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.876410][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.903534][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.007088][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.014188][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.041791][ T5579] Bluetooth: hci0: command tx timeout [ 216.043957][ T5575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.063036][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.070263][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.097389][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.112443][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.120394][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.147593][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.174917][ T5585] hsr_slave_0: entered promiscuous mode [ 216.184286][ T5585] hsr_slave_1: entered promiscuous mode [ 216.190849][ T5579] Bluetooth: hci1: command tx timeout [ 216.243174][ T5575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.250541][ T5575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.277465][ T5575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.310435][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.317807][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.335486][ T5579] Bluetooth: hci2: command tx timeout [ 216.344788][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.350183][ T4870] Bluetooth: hci4: command tx timeout [ 216.360786][ T5580] Bluetooth: hci3: command tx timeout [ 216.391740][ T5574] hsr_slave_0: entered promiscuous mode [ 216.400902][ T5574] hsr_slave_1: entered promiscuous mode [ 216.409857][ T5574] debugfs: 'hsr0' already exists in 'hsr' [ 216.415852][ T5574] Cannot create hsr debugfs directory [ 216.753708][ T5576] hsr_slave_0: entered promiscuous mode [ 216.763289][ T5576] hsr_slave_1: entered promiscuous mode [ 216.772233][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 216.778417][ T5576] Cannot create hsr debugfs directory [ 216.880105][ T5575] hsr_slave_0: entered promiscuous mode [ 216.889614][ T5575] hsr_slave_1: entered promiscuous mode [ 216.898473][ T5575] debugfs: 'hsr0' already exists in 'hsr' [ 216.904447][ T5575] Cannot create hsr debugfs directory [ 216.930787][ T5571] hsr_slave_0: entered promiscuous mode [ 216.940373][ T5571] hsr_slave_1: entered promiscuous mode [ 216.949098][ T5571] debugfs: 'hsr0' already exists in 'hsr' [ 216.955195][ T5571] Cannot create hsr debugfs directory [ 218.305876][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.346445][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.358747][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.379716][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.391849][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.411261][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.438840][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.458961][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.592483][ T5574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.616742][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.638716][ T5574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.660331][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.673270][ T5574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.695886][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.739973][ T5574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.763366][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.991836][ T5571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.022703][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.033649][ T5571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.054356][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.078915][ T5571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.103683][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.159161][ T5571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.182687][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.492708][ T5576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.517663][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.533626][ T5576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.556924][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.589133][ T5576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.614111][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.658109][ T5576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.678888][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.919378][ T5575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.942632][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.983876][ T5575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.007682][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.021106][ T5575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.040804][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.051762][ T5575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.073982][ T5575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.161433][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.414048][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.516591][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.539327][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.547147][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.639313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.647116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.857723][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.998825][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.006496][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.032002][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.198349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.206285][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.379541][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.529874][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.566722][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.574483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.753824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.761599][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.975737][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.082178][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.090137][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.162366][ T5575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.231911][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.239661][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.651879][ T5575] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.893909][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.901765][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.148793][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.156945][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.969788][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.771745][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.605202][ T5574] veth0_vlan: entered promiscuous mode [ 226.821225][ T5574] veth1_vlan: entered promiscuous mode [ 227.001717][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.393227][ T5585] veth0_vlan: entered promiscuous mode [ 227.510245][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.531364][ T5574] veth0_macvtap: entered promiscuous mode [ 227.611971][ T5575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.629232][ T5574] veth1_macvtap: entered promiscuous mode [ 227.653070][ T5585] veth1_vlan: entered promiscuous mode [ 227.868305][ T5571] veth0_vlan: entered promiscuous mode [ 227.938884][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.026463][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.081546][ T5571] veth1_vlan: entered promiscuous mode [ 228.201233][ T2988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.211389][ T2988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.296405][ T2988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.311428][ T2988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.378216][ T5585] veth0_macvtap: entered promiscuous mode [ 228.455719][ T5576] veth0_vlan: entered promiscuous mode [ 228.469303][ T5585] veth1_macvtap: entered promiscuous mode [ 228.574100][ T5575] veth0_vlan: entered promiscuous mode [ 228.697402][ T5576] veth1_vlan: entered promiscuous mode [ 228.779011][ T5575] veth1_vlan: entered promiscuous mode [ 228.927715][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.989015][ T5571] veth0_macvtap: entered promiscuous mode [ 229.043417][ T5571] veth1_macvtap: entered promiscuous mode [ 229.091940][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.250637][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.267808][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.323380][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.378685][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.524139][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.563816][ T5576] veth0_macvtap: entered promiscuous mode [ 229.673461][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.694377][ T5575] veth0_macvtap: entered promiscuous mode [ 229.739684][ T5576] veth1_macvtap: entered promiscuous mode [ 229.846782][ T5575] veth1_macvtap: entered promiscuous mode [ 229.870888][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.902775][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.951468][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.975379][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.306875][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.344359][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.551643][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.593148][ T5575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.800752][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.826010][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.878879][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.920403][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.958389][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.007412][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.093352][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.126753][ T1347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.510914][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.543182][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.137618][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.176404][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.864153][ T5574] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 236.741147][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.764871][ T5677] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 236.773107][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.981806][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.018028][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.059815][ T5677] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.111947][ T5677] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 237.119596][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.145409][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.170069][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.202472][ T5677] usb 3-1: config 0 descriptor?? [ 237.729494][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.762032][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.797418][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.830947][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.862360][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.906094][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.939877][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 237.965560][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.982660][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 238.013650][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.037387][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 238.078715][ T5677] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 238.125502][ T5677] koneplus 0003:1E7D:2D51.0001: item fetching failed at offset 14/41 [ 238.175326][ T5677] koneplus 0003:1E7D:2D51.0001: parse failed [ 238.229771][ T5677] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -22 [ 238.323096][ T5677] usb 3-1: USB disconnect, device number 2 [ 238.481250][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.523639][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.437350][ T5842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.609069][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.654969][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.717471][ T5845] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 239.726846][ T5845] ===================================================== [ 239.734350][ T5845] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 239.743175][ T5845] dvbdmx_release_ts_feed+0x198/0x290 [ 239.748896][ T5845] dvb_dmxdev_add_pid+0xacc/0xb50 [ 239.754189][ T5845] dvb_demux_do_ioctl+0x78b/0xc80 [ 239.759504][ T5845] dvb_usercopy+0x263/0x500 [ 239.764137][ T5845] dvb_demux_ioctl+0x46/0x70 [ 239.768989][ T5845] __se_sys_ioctl+0x23c/0x400 [ 239.778464][ T5845] __x64_sys_ioctl+0x97/0xe0 [ 239.783378][ T5845] x64_sys_call+0x1975/0x3ea0 [ 239.791562][ T5845] do_syscall_64+0x134/0xf80 [ 239.796704][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.802989][ T5845] [ 239.805446][ T5845] Uninit was created at: [ 239.809870][ T5845] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 239.816192][ T5845] alloc_pages_mpol+0x328/0x860 [ 239.821323][ T5845] alloc_pages_noprof+0x101/0x290 [ 239.826586][ T5845] __vmalloc_node_range_noprof+0xab0/0x2cd0 [ 239.832619][ T5845] __vmalloc_noprof+0x128/0x1f0 [ 239.837940][ T5845] vmalloc_array_noprof+0x48/0x80 [ 239.843147][ T5845] dvb_dmx_init+0x121/0x930 [ 239.847824][ T5845] vidtv_bridge_probe+0x1b1f/0x2690 [ 239.853187][ T5845] platform_probe+0x213/0x370 [ 239.858621][ T5845] really_probe+0x4d5/0xe40 [ 239.863251][ T5845] __driver_probe_device+0x2fb/0x410 [ 239.868882][ T5845] driver_probe_device+0x70/0x8f0 [ 239.877939][ T5845] __driver_attach+0x541/0xaa0 [ 239.882960][ T5845] bus_for_each_dev+0x33b/0x580 [ 239.889177][ T5845] driver_attach+0x51/0x70 [ 239.893728][ T5845] bus_add_driver+0x54f/0xdb0 [ 239.898995][ T5845] driver_register+0x42e/0x6a0 [ 239.903997][ T5845] __platform_driver_register+0x65/0x80 [ 239.909784][ T5845] vidtv_bridge_init+0x73/0x100 [ 239.914868][ T5845] do_one_initcall+0x237/0xb30 [ 239.919762][ T5845] do_initcall_level+0x157/0x330 [ 239.925235][ T5845] do_initcalls+0x176/0x310 [ 239.929963][ T5845] do_basic_setup+0x22/0x30 [ 239.934922][ T5845] kernel_init_freeable+0x213/0x460 [ 239.940433][ T5845] kernel_init+0x2f/0x5e0 [ 239.945032][ T5845] ret_from_fork+0x20f/0x8d0 [ 239.949784][ T5845] ret_from_fork_asm+0x1a/0x30 [ 239.954919][ T5845] [ 239.957307][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 239.966630][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.981050][ T5845] ===================================================== [ 239.988155][ T5845] Disabling lock debugging due to kernel taint [ 239.994395][ T5845] Kernel panic - not syncing: kmsan.panic set ... [ 240.001527][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz.0.1 Tainted: G B syzkaller #0 PREEMPT(full) [ 240.012631][ T5845] Tainted: [B]=BAD_PAGE [ 240.016994][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.027248][ T5845] Call Trace: [ 240.030613][ T5845] [ 240.033613][ T5845] __dump_stack+0x26/0x30 [ 240.038095][ T5845] dump_stack_lvl+0x50/0x1c0 [ 240.042811][ T5845] ? dump_stack+0x12/0x25 [ 240.047545][ T5845] dump_stack+0x1e/0x25 [ 240.051850][ T5845] vpanic+0x7b4/0x1430 [ 240.056082][ T5845] panic+0x15d/0x160 [ 240.060146][ T5845] kmsan_report+0x31a/0x320 [ 240.064816][ T5845] ? __msan_warning+0x1b/0x30 [ 240.069936][ T5845] ? dvbdmx_release_ts_feed+0x198/0x290 [ 240.075602][ T5845] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 240.081042][ T5845] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 240.086486][ T5845] ? dvb_usercopy+0x263/0x500 [ 240.091383][ T5845] ? dvb_demux_ioctl+0x46/0x70 [ 240.096286][ T5845] ? __se_sys_ioctl+0x23c/0x400 [ 240.101296][ T5845] ? __x64_sys_ioctl+0x97/0xe0 [ 240.106225][ T5845] ? x64_sys_call+0x1975/0x3ea0 [ 240.111429][ T5845] ? do_syscall_64+0x134/0xf80 [ 240.116359][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.122862][ T5845] ? irqentry_exit+0x7b/0x760 [ 240.127693][ T5845] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 240.134413][ T5845] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 240.140705][ T5845] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 240.146923][ T5845] ? kmsan_get_metadata+0xf1/0x160 [ 240.152373][ T5845] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 240.158850][ T5845] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 240.165245][ T5845] ? _raw_spin_unlock_irq+0x25/0x50 [ 240.170562][ T5845] ? _raw_spin_unlock_irq+0x31/0x50 [ 240.176082][ T5845] ? kmsan_get_metadata+0x146/0x160 [ 240.181645][ T5845] __msan_warning+0x1b/0x30 [ 240.186657][ T5845] dvbdmx_release_ts_feed+0x198/0x290 [ 240.192283][ T5845] dvb_dmxdev_add_pid+0xacc/0xb50 [ 240.197516][ T5845] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 240.203595][ T5845] dvb_demux_do_ioctl+0x78b/0xc80 [ 240.208787][ T5845] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 240.214746][ T5845] dvb_usercopy+0x263/0x500 [ 240.219406][ T5845] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 240.225253][ T5845] ? kmsan_get_metadata+0xf1/0x160 [ 240.230528][ T5845] dvb_demux_ioctl+0x46/0x70 [ 240.235304][ T5845] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 240.240745][ T5845] __se_sys_ioctl+0x23c/0x400 [ 240.245676][ T5845] __x64_sys_ioctl+0x97/0xe0 [ 240.250427][ T5845] x64_sys_call+0x1975/0x3ea0 [ 240.255433][ T5845] do_syscall_64+0x134/0xf80 [ 240.260166][ T5845] ? clear_bhb_loop+0x50/0xa0 [ 240.265062][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.271087][ T5845] RIP: 0033:0x7f71b599cdd9 [ 240.275596][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.295893][ T5845] RSP: 002b:00007f71b6849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.305064][ T5845] RAX: ffffffffffffffda RBX: 00007f71b5c15fa0 RCX: 00007f71b599cdd9 [ 240.313151][ T5845] RDX: 0000200000000100 RSI: 0000000040026f33 RDI: 0000000000000003 [ 240.321213][ T5845] RBP: 00007f71b5a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 240.329534][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.337602][ T5845] R13: 00007f71b5c16038 R14: 00007f71b5c15fa0 R15: 00007ffccbf291f8 [ 240.345802][ T5845] [ 240.349096][ T5845] Kernel Offset: disabled [ 240.353503][ T5845] Rebooting in 86400 seconds..