last executing test programs: 1.326268505s ago: executing program 0 (id=1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.020660482s ago: executing program 0 (id=6): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 856.024894ms ago: executing program 0 (id=7): syz_open_dev$hidraw(0x0, 0x1, 0x200) listen(0xffffffffffffffff, 0x39b3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 648.115928ms ago: executing program 1 (id=2): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 634.477957ms ago: executing program 3 (id=4): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) 322.676029ms ago: executing program 0 (id=8): r0 = fanotify_init(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) 246.71787ms ago: executing program 0 (id=9): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 0s ago: executing program 0 (id=10): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 87.786534][ T5792] cgroup: Unknown subsys name 'net' [ 88.027638][ T5792] cgroup: Unknown subsys name 'cpuset' [ 88.092645][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.007755][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.002812][ T10] cfg80211: failed to load regulatory.db [ 92.341282][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.363607][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.365464][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.369743][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.371040][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.486960][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.488462][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.489262][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.490412][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.494009][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.572819][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.575778][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.589597][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.607955][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.619984][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.635269][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.651153][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.654560][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.656074][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.657463][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.675678][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.712905][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.727275][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.745048][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.748024][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.433933][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 93.710352][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 93.782565][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 93.883403][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.884483][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.884851][ T5805] bridge_slave_0: entered allmulticast mode [ 93.886833][ T5805] bridge_slave_0: entered promiscuous mode [ 93.891573][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 93.933696][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 93.969300][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.969401][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.969538][ T5805] bridge_slave_1: entered allmulticast mode [ 93.971430][ T5805] bridge_slave_1: entered promiscuous mode [ 94.155176][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.211702][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.247061][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.247269][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.247620][ T5808] bridge_slave_0: entered allmulticast mode [ 94.249424][ T5808] bridge_slave_0: entered promiscuous mode [ 94.318201][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.318329][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.318513][ T5808] bridge_slave_1: entered allmulticast mode [ 94.320344][ T5808] bridge_slave_1: entered promiscuous mode [ 94.342133][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.342258][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.342472][ T5810] bridge_slave_0: entered allmulticast mode [ 94.371617][ T5810] bridge_slave_0: entered promiscuous mode [ 94.463584][ T5807] Bluetooth: hci0: command tx timeout [ 94.522353][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.522517][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.522641][ T5810] bridge_slave_1: entered allmulticast mode [ 94.524422][ T5810] bridge_slave_1: entered promiscuous mode [ 94.527292][ T5805] team0: Port device team_slave_0 added [ 94.543280][ T5807] Bluetooth: hci1: command tx timeout [ 94.618671][ T5805] team0: Port device team_slave_1 added [ 94.619763][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.619902][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.620023][ T5811] bridge_slave_0: entered allmulticast mode [ 94.621791][ T5811] bridge_slave_0: entered promiscuous mode [ 94.638316][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.638628][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.639061][ T5812] bridge_slave_0: entered allmulticast mode [ 94.650674][ T5812] bridge_slave_0: entered promiscuous mode [ 94.677914][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.702159][ T5807] Bluetooth: hci2: command tx timeout [ 94.746428][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.746527][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.746657][ T5811] bridge_slave_1: entered allmulticast mode [ 94.748528][ T5811] bridge_slave_1: entered promiscuous mode [ 94.750873][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.750993][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.751127][ T5812] bridge_slave_1: entered allmulticast mode [ 94.782616][ T5807] Bluetooth: hci3: command tx timeout [ 94.804177][ T5812] bridge_slave_1: entered promiscuous mode [ 94.808498][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.811587][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.863077][ T5807] Bluetooth: hci4: command tx timeout [ 94.902161][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.903278][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.903289][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.903309][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.010779][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.010793][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.010813][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.059865][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.073186][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.076078][ T5808] team0: Port device team_slave_0 added [ 95.120995][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.133338][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.135926][ T5808] team0: Port device team_slave_1 added [ 95.138404][ T5810] team0: Port device team_slave_0 added [ 95.206107][ T5810] team0: Port device team_slave_1 added [ 95.284175][ T5811] team0: Port device team_slave_0 added [ 95.285298][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.285312][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.285340][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.288363][ T5812] team0: Port device team_slave_0 added [ 95.359741][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.359760][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.359789][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.365498][ T5811] team0: Port device team_slave_1 added [ 95.373186][ T5812] team0: Port device team_slave_1 added [ 95.401713][ T5805] hsr_slave_0: entered promiscuous mode [ 95.407696][ T5805] hsr_slave_1: entered promiscuous mode [ 95.418715][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.418751][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.418824][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.943399][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.943412][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.943432][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.030408][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.030421][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.030441][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.091461][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.091474][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.091493][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.152794][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.152808][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.152836][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.209149][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.209163][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.209183][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.322399][ T5808] hsr_slave_0: entered promiscuous mode [ 96.323387][ T5808] hsr_slave_1: entered promiscuous mode [ 96.324174][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 96.324265][ T5808] Cannot create hsr debugfs directory [ 96.395710][ T5810] hsr_slave_0: entered promiscuous mode [ 96.396742][ T5810] hsr_slave_1: entered promiscuous mode [ 96.397447][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 96.397465][ T5810] Cannot create hsr debugfs directory [ 96.514211][ T5811] hsr_slave_0: entered promiscuous mode [ 96.515211][ T5811] hsr_slave_1: entered promiscuous mode [ 96.515868][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 96.515886][ T5811] Cannot create hsr debugfs directory [ 96.542758][ T5807] Bluetooth: hci0: command tx timeout [ 96.557335][ T5812] hsr_slave_0: entered promiscuous mode [ 96.558502][ T5812] hsr_slave_1: entered promiscuous mode [ 96.559158][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 96.559175][ T5812] Cannot create hsr debugfs directory [ 96.622258][ T5807] Bluetooth: hci1: command tx timeout [ 96.782099][ T5807] Bluetooth: hci2: command tx timeout [ 96.862257][ T5807] Bluetooth: hci3: command tx timeout [ 96.943458][ T5807] Bluetooth: hci4: command tx timeout [ 97.331203][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.381749][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.420020][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.470300][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.567006][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.601489][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.628206][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.683827][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.815816][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.864342][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.908547][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.965566][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.096948][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.140594][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.187122][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.247243][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.373333][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.419896][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.450974][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.453600][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.494296][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.598067][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.622063][ T5807] Bluetooth: hci0: command tx timeout [ 98.647977][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.648832][ T1424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.670158][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.699884][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.700043][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.712129][ T5807] Bluetooth: hci1: command tx timeout [ 98.778593][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.798059][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.828036][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.828299][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.863703][ T5807] Bluetooth: hci2: command tx timeout [ 98.895762][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.895853][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.942194][ T5807] Bluetooth: hci3: command tx timeout [ 98.948023][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.976047][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.995006][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.995137][ T1424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.023465][ T5807] Bluetooth: hci4: command tx timeout [ 99.057010][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.057115][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.135742][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.178827][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.205760][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.206101][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.257564][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.257732][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.327100][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.387393][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.387538][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.454119][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.454901][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.609400][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.918139][ T5805] veth0_vlan: entered promiscuous mode [ 99.943463][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.948060][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.019394][ T5805] veth1_vlan: entered promiscuous mode [ 100.149622][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.216907][ T5810] veth0_vlan: entered promiscuous mode [ 100.243114][ T5805] veth0_macvtap: entered promiscuous mode [ 100.263255][ T5808] veth0_vlan: entered promiscuous mode [ 100.282907][ T5805] veth1_macvtap: entered promiscuous mode [ 100.298353][ T5810] veth1_vlan: entered promiscuous mode [ 100.326234][ T5808] veth1_vlan: entered promiscuous mode [ 100.340266][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.395757][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.446092][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.518385][ T1424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.536070][ T1424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.554105][ T1424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.557808][ T5810] veth0_macvtap: entered promiscuous mode [ 100.572465][ T1424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.588997][ T5808] veth0_macvtap: entered promiscuous mode [ 100.649468][ T5810] veth1_macvtap: entered promiscuous mode [ 100.663876][ T5808] veth1_macvtap: entered promiscuous mode [ 100.703550][ T5807] Bluetooth: hci0: command tx timeout [ 100.765512][ T5812] veth0_vlan: entered promiscuous mode [ 100.782274][ T5807] Bluetooth: hci1: command tx timeout [ 100.857762][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.891029][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.897611][ T5812] veth1_vlan: entered promiscuous mode [ 100.925653][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.942044][ T5807] Bluetooth: hci2: command tx timeout [ 100.950247][ T1293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.950273][ T1293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.989091][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.014186][ T3631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.020966][ T3631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.022773][ T5807] Bluetooth: hci3: command tx timeout [ 101.052760][ T3631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.053589][ T5811] veth0_vlan: entered promiscuous mode [ 101.086270][ T3631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.090694][ T3631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102048][ T5807] Bluetooth: hci4: command tx timeout [ 101.119161][ T3631] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.145322][ T3631] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.200508][ T3631] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.217071][ T1293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.217092][ T1293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.218958][ T5811] veth1_vlan: entered promiscuous mode [ 101.434652][ T5812] veth0_macvtap: entered promiscuous mode [ 101.525489][ T5812] veth1_macvtap: entered promiscuous mode [ 101.567029][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.567051][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.722482][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.722504][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.761173][ T5811] veth0_macvtap: entered promiscuous mode [ 101.789044][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.789064][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.817876][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.843253][ T5811] veth1_macvtap: entered promiscuous mode [ 101.917291][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.919017][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.919037][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.992215][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.997273][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.997694][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.998044][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.054980][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.120684][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.150607][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.272660][ T1424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.366324][ T1424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.397548][ T1424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.401223][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.635445][ T3599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.635466][ T3599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.682212][ T5893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.746043][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.845770][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.845792][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.868417][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 102.887024][ T5893] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 102.887065][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.931372][ T5893] usb 4-1: config 0 descriptor?? [ 102.956895][ T5939] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 102.971776][ T5814] usb 2-1: config 0 has no interfaces? [ 102.971813][ T5814] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.971838][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.017270][ T5814] usb 2-1: config 0 descriptor?? [ 103.088682][ T5893] as10x_usb: device has been detected [ 103.105349][ T5893] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 103.155227][ T5893] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 103.158461][ T5931] INFO: trying to register non-static key. [ 103.158475][ T5931] The code is fine but needs lockdep annotation, or maybe [ 103.158483][ T5931] you didn't initialize this object before use? [ 103.158491][ T5931] turning off the locking correctness validator. [ 103.158517][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.158543][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.158561][ T5931] Call Trace: [ 103.158569][ T5931] [ 103.158577][ T5931] dump_stack_lvl+0xe8/0x150 [ 103.158619][ T5931] assign_lock_key+0x133/0x150 [ 103.158643][ T5931] register_lock_class+0xcc/0x2e0 [ 103.158666][ T5931] __lock_acquire+0xad/0x2cf0 [ 103.158686][ T5931] ? __lock_acquire+0x6b5/0x2cf0 [ 103.158710][ T5931] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.158743][ T5931] lock_acquire+0xf0/0x2e0 [ 103.158760][ T5931] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 103.158784][ T5931] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 103.158808][ T5931] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 103.158831][ T5931] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 103.158859][ T5931] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 103.158880][ T5931] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.158913][ T5931] as102_dvb_dmx_start_feed+0x70/0x290 [ 103.158938][ T5931] dmx_section_feed_start_filtering+0x518/0x6c0 [ 103.158976][ T5931] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 103.159006][ T5931] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 103.159034][ T5931] dvb_demux_do_ioctl+0x473/0x540 [ 103.159063][ T5931] dvb_usercopy+0x199/0x2e0 [ 103.159088][ T5931] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 103.159115][ T5931] ? __pfx_dvb_usercopy+0x10/0x10 [ 103.159143][ T5931] ? __fget_files+0x3a6/0x420 [ 103.159186][ T5931] ? __fget_files+0x2a/0x420 [ 103.159216][ T5931] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 103.159243][ T5931] dvb_demux_ioctl+0x29/0x40 [ 103.159270][ T5931] __se_sys_ioctl+0xff/0x170 [ 103.159304][ T5931] do_syscall_64+0x14d/0xf80 [ 103.159323][ T5931] ? trace_irq_disable+0x3b/0x150 [ 103.159349][ T5931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.159370][ T5931] ? clear_bhb_loop+0x40/0x90 [ 103.159394][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.159416][ T5931] RIP: 0033:0x7f01767fc799 [ 103.159443][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.159461][ T5931] RSP: 002b:00007f0174a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.159485][ T5931] RAX: ffffffffffffffda RBX: 00007f0176a75fa0 RCX: 00007f01767fc799 [ 103.159502][ T5931] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 103.159515][ T5931] RBP: 00007f0176892c99 R08: 0000000000000000 R09: 0000000000000000 [ 103.159528][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.159540][ T5931] R13: 00007f0176a76038 R14: 00007f0176a75fa0 R15: 00007ffd7dc967e8 [ 103.159563][ T5931] [ 103.258133][ T808] usb 2-1: USB disconnect, device number 2 [ 103.298304][ T5893] as10x_usb: error during firmware upload part1 [ 103.299750][ T5893] Registered device nBox DVB-T Dongle [ 103.384451][ T5893] usb 4-1: USB disconnect, device number 2 [ 103.497935][ T5939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.498585][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.498603][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.500149][ T5893] Unregistered device nBox DVB-T Dongle [ 103.524991][ T5893] as10x_usb: device has been disconnected [ 103.702774][ T5811] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 103.850093][ T5938] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.850117][ T5938] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 104.016505][ T5938] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.016531][ T5938] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 104.187887][ T5938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.187917][ T5938] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 104.355002][ T5938] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.355031][ T5938] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 107.375103][ T1462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.625211][ T1462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.825296][ T1462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.025226][ T1462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.243496][ T1462] bridge_slave_1: left allmulticast mode [ 108.243525][ T1462] bridge_slave_1: left promiscuous mode [ 108.243702][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.314509][ T1462] bridge_slave_0: left allmulticast mode [ 108.314536][ T1462] bridge_slave_0: left promiscuous mode [ 108.314718][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.062433][ T1462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.143138][ T1462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.163658][ T1462] bond0 (unregistering): Released all slaves [ 109.862732][ T1462] hsr_slave_0: left promiscuous mode [ 109.906193][ T1462] hsr_slave_1: left promiscuous mode [ 109.907577][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.907610][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.952670][ T1462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.952706][ T1462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.042520][ T1462] veth1_macvtap: left promiscuous mode [ 110.042589][ T1462] veth0_macvtap: left promiscuous mode [ 110.042731][ T1462] veth1_vlan: left promiscuous mode [ 110.042830][ T1462] veth0_vlan: left promiscuous mode [ 110.632442][ T1462] team0 (unregistering): Port device team_slave_1 removed [ 110.672644][ T1462] team0 (unregistering): Port device team_slave_0 removed