last executing test programs: 2.627816394s ago: executing program 2 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0xa8, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x1f, 0x3, 0x1, 0x0, 0x1}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.200911792s ago: executing program 2 (id=76): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) read(r0, &(0x7f0000000080)=""/221, 0xdd) 2.042216662s ago: executing program 1 (id=77): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f79", 0x7}], 0x1}}], 0x1, 0x0) 2.003390336s ago: executing program 2 (id=78): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000026c0)=""/46, 0x2e}], 0x1}, 0x8000}], 0x1, 0x0, 0x0) 1.949177908s ago: executing program 1 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000040)=""/6, &(0x7f0000000080)=0x6) 1.82353169s ago: executing program 1 (id=82): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0xd, 0x0, 0x0, 0x0, "589f14b200a22de1ccf19c8e2b8e4c6f1f5321020d98e782ec958e3e643f4ca277d511d74f2346b7d6bb867e69611961d7fbad153698b93585178ec0bd4fca29"}, 0x48}, 0x1, 0x0, 0x0, 0xc4851}, 0x4040080) 1.660126289s ago: executing program 1 (id=83): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffeb", 0x8) 1.550913758s ago: executing program 1 (id=86): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8000, 0x20, 0xc, 0x0, {{0xb, 0x4, 0x1, 0x3f, 0x2c, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0x98, 0x0, 0x3, [0x2, 0x3ff]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "398f5173"}]}]}}}}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b"], 0xffdd) 1.401292545s ago: executing program 3 (id=89): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@l={0x92, 0xf, 0xc0, 0x1c, 0x36, 0xf, 0x100}], 0x8) 1.280007788s ago: executing program 3 (id=91): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000001c0)) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000500)="bd", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x88}}}], 0x14}}], 0x2, 0x4400c800) 1.204301294s ago: executing program 3 (id=92): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x18e) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r9, 0x0) statx(r9, &(0x7f0000000080)='./file1\x00', 0x1000, 0x7ff, 0x0) ioctl$KVM_CREATE_VM(r8, 0x400454e2, 0x110c230004) 1.074692044s ago: executing program 2 (id=93): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r0, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8126}]}]}, 0x44}}, 0x0) 920.348842ms ago: executing program 2 (id=95): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\f\x00\x00\x00)'], 0xc}}], 0x2, 0x0) 920.147936ms ago: executing program 1 (id=96): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close(0x3) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 785.570421ms ago: executing program 0 (id=97): mlockall(0x2) io_setup(0x1, &(0x7f00000004c0)) 729.658922ms ago: executing program 2 (id=98): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) 608.264672ms ago: executing program 0 (id=99): connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) capset(0x0, 0x0) 586.533597ms ago: executing program 0 (id=100): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000180)={0x1, 0x1, 0x5458fc9e, 0x2, 0x800, 0x8}) 536.839674ms ago: executing program 3 (id=101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b337d9092c86df42", "7d05c51d55ff3c135640dfff010000000000000000000400000000000800", "ce21f9ea", "0c0ae315e5d80fea"}, 0x38) 436.21351ms ago: executing program 0 (id=102): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write(r0, &(0x7f0000000fc0), 0x0) 387.349433ms ago: executing program 3 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0xc3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x20, r1}, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 195.371509ms ago: executing program 0 (id=104): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x11, 0x80000001, 0x2}}) 253.985µs ago: executing program 0 (id=105): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100", @ANYRES16=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 0s ago: executing program 3 (id=106): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0x4f00) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 71.368655][ T5819] cgroup: Unknown subsys name 'net' [ 71.609196][ T5819] cgroup: Unknown subsys name 'cpuset' [ 71.665522][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.317947][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.895439][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.901757][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.903934][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.935039][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.972021][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.018610][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.039681][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.057933][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.063905][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.064682][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.072729][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.088151][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.103679][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.119328][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.129918][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.130727][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.142051][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.177100][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.179152][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.180325][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.969784][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.054120][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 78.142675][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 78.151201][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.291866][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.293242][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.293443][ T5831] bridge_slave_0: entered allmulticast mode [ 78.299389][ T5831] bridge_slave_0: entered promiscuous mode [ 78.345906][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.346169][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.346374][ T5831] bridge_slave_1: entered allmulticast mode [ 78.348543][ T5831] bridge_slave_1: entered promiscuous mode [ 78.423779][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.424048][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.424710][ T5837] bridge_slave_0: entered allmulticast mode [ 78.429225][ T5837] bridge_slave_0: entered promiscuous mode [ 78.485137][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.485395][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.485563][ T5837] bridge_slave_1: entered allmulticast mode [ 78.487418][ T5837] bridge_slave_1: entered promiscuous mode [ 78.498534][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.567059][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.567410][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.567568][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.567824][ T5838] bridge_slave_0: entered allmulticast mode [ 78.569661][ T5838] bridge_slave_0: entered promiscuous mode [ 78.575071][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.575326][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.575659][ T5835] bridge_slave_0: entered allmulticast mode [ 78.582865][ T5835] bridge_slave_0: entered promiscuous mode [ 78.631294][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.631558][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.632073][ T5838] bridge_slave_1: entered allmulticast mode [ 78.635668][ T5838] bridge_slave_1: entered promiscuous mode [ 78.641385][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.641675][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.641910][ T5835] bridge_slave_1: entered allmulticast mode [ 78.645836][ T5835] bridge_slave_1: entered promiscuous mode [ 78.656094][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.716824][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.719386][ T5831] team0: Port device team_slave_0 added [ 78.784339][ T5831] team0: Port device team_slave_1 added [ 78.791568][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.805806][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.839576][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.842497][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.857152][ T5837] team0: Port device team_slave_0 added [ 79.086411][ T5833] Bluetooth: hci0: command tx timeout [ 79.139064][ T5837] team0: Port device team_slave_1 added [ 79.140486][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.140496][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.140510][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.165068][ T5841] Bluetooth: hci1: command tx timeout [ 79.228053][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.228064][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.228079][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.231188][ T5838] team0: Port device team_slave_0 added [ 79.233819][ T5835] team0: Port device team_slave_0 added [ 79.245355][ T5833] Bluetooth: hci3: command tx timeout [ 79.245457][ T5833] Bluetooth: hci2: command tx timeout [ 79.280378][ T5838] team0: Port device team_slave_1 added [ 79.284512][ T5835] team0: Port device team_slave_1 added [ 79.288322][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.288336][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.288358][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.343023][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.343040][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.343063][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.415415][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.415471][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.415494][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.417768][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.417777][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.417790][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.448406][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.448421][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.448444][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.450629][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.450641][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.450662][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.468735][ T5831] hsr_slave_0: entered promiscuous mode [ 79.470931][ T5831] hsr_slave_1: entered promiscuous mode [ 79.581872][ T5837] hsr_slave_0: entered promiscuous mode [ 79.583810][ T5837] hsr_slave_1: entered promiscuous mode [ 79.586013][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 79.586135][ T5837] Cannot create hsr debugfs directory [ 79.699900][ T5835] hsr_slave_0: entered promiscuous mode [ 79.701045][ T5835] hsr_slave_1: entered promiscuous mode [ 79.701994][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 79.702015][ T5835] Cannot create hsr debugfs directory [ 79.711716][ T5838] hsr_slave_0: entered promiscuous mode [ 79.713663][ T5838] hsr_slave_1: entered promiscuous mode [ 79.716013][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 79.716035][ T5838] Cannot create hsr debugfs directory [ 80.562395][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.606025][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.608276][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.640633][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.643472][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.682377][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.702655][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.740874][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.863594][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.901864][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.904253][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.930213][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.934267][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.972034][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.998050][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.028173][ T5837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.165949][ T5841] Bluetooth: hci0: command tx timeout [ 81.193602][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.231140][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.241432][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.245053][ T5841] Bluetooth: hci1: command tx timeout [ 81.272340][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.277914][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.318978][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.325132][ T5841] Bluetooth: hci2: command tx timeout [ 81.325161][ T5841] Bluetooth: hci3: command tx timeout [ 81.353563][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.373144][ T5835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.490020][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.529971][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.546098][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.578294][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.582025][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.601969][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.608569][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.638758][ T5838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.672670][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.749193][ T10] cfg80211: failed to load regulatory.db [ 81.824623][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.913236][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.913475][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.978415][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.028442][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.031701][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.154496][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.195535][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.197021][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.222129][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.244226][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.244361][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.342596][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.397811][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.423599][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.423757][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.503043][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.503170][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.608295][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.690861][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.691101][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.729670][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.730037][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.880601][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.050291][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.223507][ T5831] veth0_vlan: entered promiscuous mode [ 83.246296][ T5833] Bluetooth: hci0: command tx timeout [ 83.300428][ T5831] veth1_vlan: entered promiscuous mode [ 83.330187][ T5833] Bluetooth: hci1: command tx timeout [ 83.412315][ T5837] veth0_vlan: entered promiscuous mode [ 83.415119][ T5833] Bluetooth: hci3: command tx timeout [ 83.415144][ T5833] Bluetooth: hci2: command tx timeout [ 83.429151][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.469046][ T5837] veth1_vlan: entered promiscuous mode [ 83.524156][ T5831] veth0_macvtap: entered promiscuous mode [ 83.551596][ T5831] veth1_macvtap: entered promiscuous mode [ 83.574561][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.664414][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.703464][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.703630][ T5835] veth0_vlan: entered promiscuous mode [ 83.718146][ T5837] veth0_macvtap: entered promiscuous mode [ 83.744310][ T5837] veth1_macvtap: entered promiscuous mode [ 83.768929][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.789164][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.813597][ T5835] veth1_vlan: entered promiscuous mode [ 83.822016][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.843004][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.967538][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.012777][ T5838] veth0_vlan: entered promiscuous mode [ 84.103616][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.177966][ T5838] veth1_vlan: entered promiscuous mode [ 84.200113][ T3585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.203513][ T3585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.227940][ T3585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.257622][ T3585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.286894][ T5835] veth0_macvtap: entered promiscuous mode [ 84.310123][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.310140][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.363946][ T5835] veth1_macvtap: entered promiscuous mode [ 84.596005][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.596024][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.827864][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.865882][ T5838] veth0_macvtap: entered promiscuous mode [ 84.884687][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.894319][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.894338][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.952232][ T5838] veth1_macvtap: entered promiscuous mode [ 84.986520][ T3585] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007907][ T3585] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.037837][ T3585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.063449][ T3585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079588][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.079606][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.178549][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.250949][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.338381][ T5841] Bluetooth: hci0: command tx timeout [ 85.413189][ T5841] Bluetooth: hci1: command tx timeout [ 85.437951][ T3585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.438120][ T3585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.466010][ T3585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.485626][ T5841] Bluetooth: hci2: command tx timeout [ 85.485658][ T5841] Bluetooth: hci3: command tx timeout [ 85.503054][ T3585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.796486][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.796505][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.439530][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.439548][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.559742][ T823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.798420][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 86.851653][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.851672][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.883292][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.883323][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.883361][ T823] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.883381][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.054193][ T823] usb 1-1: config 0 descriptor?? [ 87.275458][ T1539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.275478][ T1539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.957863][ T823] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 88.737512][ T5886] usb 1-1: USB disconnect, device number 2 [ 91.314014][ T5985] netlink: 5036 bytes leftover after parsing attributes in process `syz.3.23'. [ 91.322378][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.347930][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.545787][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 91.554432][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.554461][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.554496][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 91.554518][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.736373][ T10] usb 3-1: config 0 descriptor?? [ 92.232175][ T10] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 92.574560][ T10] usb 3-1: USB disconnect, device number 2 [ 93.587165][ T6016] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 93.950098][ T6024] raw_sendmsg: syz.2.32 forgot to set AF_INET. Fix it! [ 94.355057][ T6026] capability: warning: `syz.3.33' uses 32-bit capabilities (legacy support in use) [ 94.815034][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.964924][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 94.967223][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.967252][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.967283][ T5821] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 94.967304][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.990909][ T5821] usb 4-1: config 0 descriptor?? [ 95.546585][ T5821] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 95.838239][ T5821] usb 4-1: USB disconnect, device number 2 [ 96.324892][ T5945] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.475662][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 96.479749][ T5945] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 96.498890][ T5945] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 96.498918][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.498944][ T5945] usb 3-1: Product: syz [ 96.498958][ T5945] usb 3-1: Manufacturer: syz [ 96.498972][ T5945] usb 3-1: SerialNumber: syz [ 96.550024][ T5945] usb 3-1: config 0 descriptor?? [ 96.566864][ T5945] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 96.566925][ T5945] usb 3-1: setting power ON [ 96.587812][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 96.632214][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.633095][ T5945] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 96.633188][ T5945] usb 3-1: media controller created [ 96.710713][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.761040][ T5945] usb 3-1: selecting invalid altsetting 6 [ 96.761072][ T5945] usb 3-1: digital interface selection failed (-22) [ 96.761093][ T5945] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 96.763792][ T6071] dvb-usb: bulk message failed: -22 (3/0) [ 96.763812][ T6071] cxusb: i2c rd: len=8192 is too big! [ 96.763812][ T6071] [ 96.809134][ T5945] usb 3-1: setting power OFF [ 96.809245][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 96.809262][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 96.809273][ T5945] (NULL device *): no alternate interface [ 96.931563][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 96.992317][ T5945] usb 3-1: USB disconnect, device number 3 [ 97.443224][ T6092] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.60'. [ 97.945246][ T5945] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.104898][ T5945] usb 1-1: Using ep0 maxpacket: 8 [ 98.139561][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 98.139591][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 98.139614][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9164, setting to 1024 [ 98.139651][ T5945] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.139672][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.211930][ T5945] usb 1-1: config 0 descriptor?? [ 98.840279][ T5945] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 98.912821][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 99.015062][ T5821] usb 1-1: USB disconnect, device number 3 [ 99.122496][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 99.122518][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.339217][ T6164] KVM: debugfs: duplicate directory 6164-5 [ 100.491841][ T37] audit: type=1804 audit(1776713850.057:2): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.92" name="/newroot/19/file1" dev="tmpfs" ino=114 res=1 errno=0 [ 100.847176][ T5945] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.006616][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.035433][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 101.047512][ T5945] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 101.047540][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.088659][ T5945] usb 2-1: config 0 descriptor?? [ 101.118926][ T5945] as10x_usb: device has been detected [ 101.119759][ T5945] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 101.184905][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 101.186793][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.186821][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.186856][ T5821] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 101.186874][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.252144][ T5821] usb 3-1: config 0 descriptor?? [ 101.283391][ T5945] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 101.408167][ T6173] INFO: trying to register non-static key. [ 101.408182][ T6173] The code is fine but needs lockdep annotation, or maybe [ 101.408189][ T6173] you didn't initialize this object before use? [ 101.408196][ T6173] turning off the locking correctness validator. [ 101.408232][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 101.408264][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.408285][ T6173] Call Trace: [ 101.408293][ T6173] [ 101.408302][ T6173] dump_stack_lvl+0xe8/0x150 [ 101.408329][ T6173] assign_lock_key+0x133/0x150 [ 101.408359][ T6173] register_lock_class+0xcc/0x2e0 [ 101.408387][ T6173] __lock_acquire+0xad/0x2cf0 [ 101.408416][ T6173] ? __lock_acquire+0x6b5/0x2cf0 [ 101.408444][ T6173] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.408466][ T6173] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.408488][ T6173] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 101.408517][ T6173] lock_acquire+0x106/0x350 [ 101.408541][ T6173] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 101.408571][ T6173] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 101.408601][ T6173] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 101.408627][ T6173] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 101.408656][ T6173] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 101.408683][ T6173] ? lockdep_hardirqs_on+0x7a/0x110 [ 101.408705][ T6173] as102_dvb_dmx_start_feed+0x70/0x290 [ 101.408735][ T6173] dmx_section_feed_start_filtering+0x518/0x6c0 [ 101.408763][ T6173] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 101.408785][ T6173] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 101.408806][ T6173] dvb_demux_do_ioctl+0x473/0x540 [ 101.408826][ T6173] dvb_usercopy+0x199/0x2e0 [ 101.408853][ T6173] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 101.408872][ T6173] ? __pfx_dvb_usercopy+0x10/0x10 [ 101.408904][ T6173] ? __fget_files+0x3a6/0x420 [ 101.408927][ T6173] ? __fget_files+0x2a/0x420 [ 101.408951][ T6173] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 101.408982][ T6173] dvb_demux_ioctl+0x29/0x40 [ 101.409012][ T6173] __se_sys_ioctl+0xff/0x170 [ 101.409040][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.409060][ T6173] do_syscall_64+0x15f/0xf80 [ 101.409080][ T6173] ? trace_irq_disable+0x3b/0x140 [ 101.409102][ T6173] ? clear_bhb_loop+0x40/0x90 [ 101.409124][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.409144][ T6173] RIP: 0033:0x7fac1151c819 [ 101.409171][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.409188][ T6173] RSP: 002b:00007fac0f776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.409210][ T6173] RAX: ffffffffffffffda RBX: 00007fac11795fa0 RCX: 00007fac1151c819 [ 101.409226][ T6173] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 101.409246][ T6173] RBP: 00007fac115b2c91 R08: 0000000000000000 R09: 0000000000000000 [ 101.409260][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.409272][ T6173] R13: 00007fac11796038 R14: 00007fac11795fa0 R15: 00007ffca2ec1488 [ 101.409294][ T6173] [ 101.468422][ T5945] as10x_usb: error during firmware upload part1 [ 101.471799][ T5945] Registered device nBox DVB-T Dongle [ 101.482109][ T5945] usb 2-1: USB disconnect, device number 2 [ 101.557218][ T5945] Unregistered device nBox DVB-T Dongle [ 101.562308][ T5945] as10x_usb: device has been disconnected [ 101.755982][ T5821] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 101.774853][ T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.934884][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 101.936661][ T32] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 101.938492][ T32] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 101.938518][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.938536][ T32] usb 4-1: Product: syz [ 101.938550][ T32] usb 4-1: Manufacturer: syz [ 101.938564][ T32] usb 4-1: SerialNumber: syz [ 101.939989][ T32] usb 4-1: config 0 descriptor?? [ 101.944111][ T32] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 101.944132][ T32] usb 4-1: setting power ON [ 101.944140][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 101.946106][ T5821] usb 3-1: USB disconnect, device number 4 [ 102.021167][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.021608][ T32] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 102.021646][ T32] usb 4-1: media controller created [ 102.057388][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.062314][ T32] usb 4-1: selecting invalid altsetting 6 [ 102.062334][ T32] usb 4-1: digital interface selection failed (-22) [ 102.062347][ T32] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 102.062832][ T32] usb 4-1: setting power OFF [ 102.062842][ T32] dvb-usb: bulk message failed: -22 (2/0) [ 102.062850][ T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 102.062856][ T32] (NULL device *): no alternate interface [ 102.122447][ T32] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 102.165607][ T5894] usb 4-1: USB disconnect, device number 3