last executing test programs: 742.208772ms ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000800)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000840)="34000000070097ffffffffffff", 0xd) 634.240145ms ago: executing program 3 (id=5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x909, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 532.544856ms ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 429.157606ms ago: executing program 3 (id=6): syz_usb_connect(0x0, 0x24, &(0x7f00000069c0)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000006840), 0x1, 0x0) readv(r0, &(0x7f0000006880)=[{&(0x7f00000068c0)=""/183, 0xb7}], 0x1) 345.805773ms ago: executing program 0 (id=7): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 209.007284ms ago: executing program 2 (id=3): syz_usb_connect(0x5, 0x27, &(0x7f0000001700)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000001740), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001780)={&(0x7f00000017c0)=[{0x8e3e, 0x8001, 0x0, 0x0}, {0x0, 0x3201, 0x0, 0x0}, {0x7f, 0x4000, 0x0, 0x0}], 0x3}) 191.654278ms ago: executing program 1 (id=2): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x9000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000001780)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x89800, 0x0, 0x0, @by_dev={r1}, [@crypt={0x0, 0x800, 0x0, 0x78, 'crypt\x00', {'capi:gcm(aes)-random', 0x20, @none, 0x20, '128', 0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}, ' 1 submit_from_crypt_cpus'}}]}) 0s ago: executing program 1 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 83.990674][ T5624] cgroup: Unknown subsys name 'net' [ 84.101250][ T5624] cgroup: Unknown subsys name 'cpuset' [ 84.110997][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.724211][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.366422][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.378022][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.381363][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.382332][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.386767][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.487569][ T4955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.488638][ T4955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.489365][ T4955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.490427][ T4955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.491103][ T4955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.568474][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.569892][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.570512][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.574816][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.575871][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.676185][ T4955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.684893][ T4955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.685722][ T4955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.686691][ T4955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.691002][ T4955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.308379][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.310787][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.327304][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.434421][ T5640] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 90.569546][ T5643] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 90.646662][ T5648] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 90.776164][ T5635] infiniband rxe0: set active [ 90.777429][ T5635] infiniband rxe0: added rxe_eth0 [ 90.810691][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.810731][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.810773][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.864866][ T1194] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.898873][ T5635] RDS/IB: rxe0: added [ 90.899420][ T5635] smc: adding ib device rxe0 with port count 1 [ 90.899521][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 90.930385][ T1194] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.931594][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.254563][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.428595][ T5636] Bluetooth: hci0: command tx timeout [ 91.507230][ T5636] Bluetooth: hci1: command tx timeout [ 91.566200][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.581571][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.582585][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.582764][ T5640] bridge_slave_0: entered allmulticast mode [ 91.584781][ T5640] bridge_slave_0: entered promiscuous mode [ 91.637636][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.637877][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.638287][ T5643] bridge_slave_0: entered allmulticast mode [ 91.640073][ T5643] bridge_slave_0: entered promiscuous mode [ 91.668359][ T5636] Bluetooth: hci2: command tx timeout [ 91.689717][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.689857][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.690019][ T5640] bridge_slave_1: entered allmulticast mode [ 91.691884][ T5640] bridge_slave_1: entered promiscuous mode [ 91.726345][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.726593][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.727119][ T5643] bridge_slave_1: entered allmulticast mode [ 91.731887][ T5643] bridge_slave_1: entered promiscuous mode [ 91.747438][ T5636] Bluetooth: hci3: command tx timeout [ 91.826307][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.878556][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.904819][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.942996][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.961545][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.961731][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.962125][ T5648] bridge_slave_0: entered allmulticast mode [ 91.963622][ T5648] bridge_slave_0: entered promiscuous mode [ 91.979650][ T5640] team0: Port device team_slave_0 added [ 92.014380][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.014514][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.014644][ T5648] bridge_slave_1: entered allmulticast mode [ 92.016757][ T5648] bridge_slave_1: entered promiscuous mode [ 92.031272][ T5640] team0: Port device team_slave_1 added [ 92.061031][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.080983][ T1241] cfg80211: failed to load regulatory.db [ 92.138871][ T5643] team0: Port device team_slave_0 added [ 92.144013][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.145132][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.145147][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.145183][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.162864][ T5643] team0: Port device team_slave_1 added [ 92.172507][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.176560][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.176601][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.176676][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.324246][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.324265][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.324292][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.332812][ T5648] team0: Port device team_slave_0 added [ 92.342849][ T5648] team0: Port device team_slave_1 added [ 92.351002][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.351059][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.351173][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.452387][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.452406][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.452433][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.522103][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.522122][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.522150][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.576499][ T5640] hsr_slave_0: entered promiscuous mode [ 92.580695][ T5640] hsr_slave_1: entered promiscuous mode [ 92.650254][ T5648] hsr_slave_0: entered promiscuous mode [ 92.651062][ T5648] hsr_slave_1: entered promiscuous mode [ 92.651628][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 92.651656][ T5648] Cannot create hsr debugfs directory [ 92.718044][ T5643] hsr_slave_0: entered promiscuous mode [ 92.718805][ T5643] hsr_slave_1: entered promiscuous mode [ 92.719341][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 92.719357][ T5643] Cannot create hsr debugfs directory [ 93.178028][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.186071][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.203971][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.218174][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.240605][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.255292][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.270381][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.273886][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.381192][ T5648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.385376][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.415370][ T5648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.428198][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.429164][ T5648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.432622][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.433812][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.433893][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.434171][ T5635] bridge_slave_0: entered allmulticast mode [ 93.435472][ T5635] bridge_slave_0: entered promiscuous mode [ 93.493329][ T5648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.496712][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.513354][ T5636] Bluetooth: hci0: command tx timeout [ 93.514167][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.514270][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.514423][ T5635] bridge_slave_1: entered allmulticast mode [ 93.517819][ T5635] bridge_slave_1: entered promiscuous mode [ 93.587066][ T5636] Bluetooth: hci1: command tx timeout [ 93.596231][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.621800][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.676490][ T5635] team0: Port device team_slave_0 added [ 93.685336][ T5635] team0: Port device team_slave_1 added [ 93.718067][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.718084][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.718107][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.719138][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.722722][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.744823][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.744868][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.744941][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.753273][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.757470][ T5636] Bluetooth: hci2: command tx timeout [ 93.778862][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.827532][ T5636] Bluetooth: hci3: command tx timeout [ 93.844522][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.862316][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.875778][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.885302][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.929929][ T5635] hsr_slave_0: entered promiscuous mode [ 93.930886][ T5635] hsr_slave_1: entered promiscuous mode [ 93.931418][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 93.931434][ T5635] Cannot create hsr debugfs directory [ 94.189379][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.228821][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.232761][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.233698][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.236839][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.269120][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.273145][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.276261][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.303189][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.306549][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.318234][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.342772][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.342970][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.376584][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.385962][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.386052][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.423779][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.423862][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.454191][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.454266][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.486056][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.552733][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.604111][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.604202][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.638647][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.638758][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.757498][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.824431][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.856605][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.856720][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.902499][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.902611][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.588129][ T5636] Bluetooth: hci0: command tx timeout [ 95.667375][ T5636] Bluetooth: hci1: command tx timeout [ 95.740710][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.827864][ T5636] Bluetooth: hci2: command tx timeout [ 95.888808][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.896274][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.909270][ T5636] Bluetooth: hci3: command tx timeout [ 95.943036][ T5640] veth0_vlan: entered promiscuous mode [ 95.983649][ T5640] veth1_vlan: entered promiscuous mode [ 96.010076][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.084668][ T5635] veth0_vlan: entered promiscuous mode [ 96.092974][ T5648] veth0_vlan: entered promiscuous mode [ 96.121711][ T5640] veth0_macvtap: entered promiscuous mode [ 96.130051][ T5635] veth1_vlan: entered promiscuous mode [ 96.138695][ T5648] veth1_vlan: entered promiscuous mode [ 96.162790][ T5640] veth1_macvtap: entered promiscuous mode [ 96.202461][ T5643] veth0_vlan: entered promiscuous mode [ 96.236455][ T5643] veth1_vlan: entered promiscuous mode [ 96.246455][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.273806][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.304535][ T5635] veth0_macvtap: entered promiscuous mode [ 96.316400][ T5635] veth1_macvtap: entered promiscuous mode [ 96.340460][ T5648] veth0_macvtap: entered promiscuous mode [ 96.372514][ T5648] veth1_macvtap: entered promiscuous mode [ 96.392138][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.393141][ T5643] veth0_macvtap: entered promiscuous mode [ 96.439004][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.439177][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.439219][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.441162][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.488301][ T5643] veth1_macvtap: entered promiscuous mode [ 96.512461][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.541697][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.541724][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.578448][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.602376][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.642440][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.663622][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.663644][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.769147][ T5640] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.777864][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.777952][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.777992][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.778030][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.778127][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.778250][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.778349][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.778447][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.778541][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.826645][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.827353][ T1013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.838999][ T156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.840693][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.891899][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.891962][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.042404][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.042429][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.042559][ T5790] Bluetooth: MGMT ver 1.23 [ 97.152347][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.152372][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.229999][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.230022][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.313799][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.313825][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.403749][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.403772][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.617721][ T2250] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.667569][ T5636] Bluetooth: hci0: command tx timeout [ 97.667638][ T5803] device-mapper: table: 248:0: crypt: Error allocating crypto tfm (-EINVAL) [ 97.667659][ T5803] device-mapper: ioctl: error adding target to table [ 97.700360][ T5744] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.748102][ T5636] Bluetooth: hci1: command tx timeout [ 97.777613][ T2250] usb 4-1: Using ep0 maxpacket: 32 [ 97.778838][ T2250] usb 4-1: New USB device found: idVendor=2040, idProduct=c603, bcdDevice=1.8e [ 97.780714][ T2250] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.780759][ T2250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.783750][ T2250] usb 4-1: config 0 descriptor?? [ 97.829044][ T2250] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 97.835082][ T2250] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.835710][ T2250] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 97.835770][ T2250] usb 4-1: media controller created [ 97.871117][ T5744] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 97.874445][ T5744] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.874473][ T5744] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.874497][ T5744] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.886361][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.908039][ T5636] Bluetooth: hci2: command tx timeout [ 97.935762][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.935790][ T5744] usb 1-1: Product: syz [ 97.935812][ T5744] usb 1-1: Manufacturer: syz [ 97.935823][ T5744] usb 1-1: SerialNumber: syz [ 97.971951][ T5744] hub 1-1:1.0: bad descriptor, ignoring hub [ 97.971971][ T5744] hub 1-1:1.0: probe with driver hub failed with error -5 [ 97.979489][ T2250] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.999223][ T5636] Bluetooth: hci3: command tx timeout [ 98.023132][ T5797] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 98.035098][ T5797] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 98.043579][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 98.052645][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 98.062753][ T5797] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 98.068202][ T5797] Code: c0 00 ea f3 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 1b 4e d9 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 92 c8 25 f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 98.087852][ T5797] RSP: 0018:ffffc9000488f220 EFLAGS: 00010206 [ 98.093973][ T5797] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bf3ea03 [ 98.101984][ T5797] RDX: 0000000000000000 RSI: ffffffff8ea7ab24 RDI: 00000000000000c0 [ 98.110032][ T5797] RBP: ffffc9000488f3b8 R08: ffffc9000488f327 R09: 0000000000000000 [ 98.118055][ T5797] R10: ffffc9000488f300 R11: fffff52000911e65 R12: 0000000000000068 [ 98.121404][ T11] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 98.135114][ T5797] R13: 0000000000000000 R14: 1ffff92000911e58 R15: 0000000000000000 [ 98.136078][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.136195][ T11] usb 3-1: Product: syz [ 98.136237][ T11] usb 3-1: Manufacturer: syz [ 98.136279][ T11] usb 3-1: SerialNumber: syz [ 98.148834][ T11] usb 3-1: config 0 descriptor?? [ 98.169582][ T5797] FS: 00007fe335fda6c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 98.178549][ T5797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.185160][ T5797] CR2: 0000001b2d41fff8 CR3: 00000000269e2000 CR4: 00000000003526f0 [ 98.193253][ T5797] Call Trace: [ 98.196563][ T5797] [ 98.199518][ T5797] ? __mutex_lock+0x305/0x15a0 [ 98.204324][ T5797] ? dvb_usbv2_generic_write+0x26/0x60 [ 98.209808][ T5797] ? __mutex_trylock_common+0x15f/0x270 [ 98.215391][ T5797] ? __pfx___mutex_lock+0x10/0x10 [ 98.220470][ T5797] ? __pfx___mutex_lock+0x10/0x10 [ 98.225539][ T5797] ? trace_contention_end+0x3d/0x140 [ 98.230858][ T5797] ? __mutex_lock+0x305/0x15a0 [ 98.235657][ T5797] dvb_usbv2_generic_write+0x26/0x60 [ 98.240977][ T5797] mxl111sf_ctrl_msg+0x160/0x2f0 [ 98.245953][ T5797] mxl111sf_write_reg+0xa9/0x1b0 [ 98.250952][ T5797] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 98.256528][ T5797] ? __lock_acquire+0x747/0x2de0 [ 98.261493][ T5797] mxl111sf_i2c_xfer+0x463/0x5060 [ 98.266541][ T5797] ? rcu_is_watching+0x16/0xb0 [ 98.271342][ T5797] ? __kasan_check_byte+0x12/0x40 [ 98.276408][ T5797] ? rcu_is_watching+0x16/0xb0 [ 98.281207][ T5797] ? __kasan_check_byte+0x12/0x40 [ 98.286266][ T5797] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 98.291749][ T5797] ? is_bpf_text_address+0x292/0x2b0 [ 98.297077][ T5797] ? is_bpf_text_address+0x26/0x2b0 [ 98.302313][ T5797] ? kernel_text_address+0xa5/0xe0 [ 98.307447][ T5797] ? __kernel_text_address+0xd/0x30 [ 98.312680][ T5797] ? unwind_get_return_address+0x4d/0x90 [ 98.318339][ T5797] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 98.324522][ T5797] ? arch_stack_walk+0xfb/0x150 [ 98.329411][ T5797] ? stack_trace_save+0xa9/0x100 [ 98.334383][ T5797] ? __pfx_stack_trace_save+0x10/0x10 [ 98.339779][ T5797] ? check_path+0x21/0x40 [ 98.344143][ T5797] ? check_noncircular+0xdb/0x150 [ 98.349199][ T5797] ? add_lock_to_list+0xc7/0x100 [ 98.354166][ T5797] ? lockdep_unlock+0x5c/0xd0 [ 98.358859][ T5797] ? __lock_acquire+0x1511/0x2de0 [ 98.363906][ T5797] ? kasan_save_track+0x4f/0x80 [ 98.368799][ T5797] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.373856][ T5797] __i2c_transfer+0x7bf/0x1fe0 [ 98.378654][ T5797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.384489][ T5797] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.390327][ T5797] ? rt_mutex_lock_nested+0x149/0x1c0 [ 98.395724][ T5797] ? i2c_transfer+0xc7/0x2d0 [ 98.400349][ T5797] i2c_transfer+0x1cb/0x2d0 [ 98.404882][ T5797] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 98.410583][ T5797] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 98.416770][ T5797] ? i2cdev_read+0xe8/0x250 [ 98.421301][ T5797] ? i2cdev_read+0xe8/0x250 [ 98.425838][ T5797] i2cdev_read+0x10d/0x250 [ 98.430291][ T5797] vfs_readv+0x57b/0x840 [ 98.434568][ T5797] ? __pfx_i2cdev_read+0x10/0x10 [ 98.439535][ T5797] ? __pfx_vfs_readv+0x10/0x10 [ 98.444344][ T5797] ? __fget_files+0x2a/0x420 [ 98.448992][ T5797] ? __fget_files+0x3a2/0x420 [ 98.453692][ T5797] ? fdget+0x1ac/0x250 [ 98.457790][ T5797] do_readv+0x154/0x2e0 [ 98.461979][ T5797] ? __pfx_do_readv+0x10/0x10 [ 98.466696][ T5797] do_syscall_64+0x166/0x520 [ 98.471321][ T5797] ? trace_irq_disable+0x3b/0x140 [ 98.476377][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.482474][ T5797] ? clear_bhb_loop+0x70/0xc0 [ 98.487177][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.493098][ T5797] RIP: 0033:0x7fe33519f559 [ 98.497594][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.517505][ T5797] RSP: 002b:00007fe335fda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 98.525972][ T5797] RAX: ffffffffffffffda RBX: 00007fe335425fa0 RCX: 00007fe33519f559 [ 98.533988][ T5797] RDX: 0000000000000001 RSI: 0000200000006880 RDI: 0000000000000004 [ 98.541978][ T5797] RBP: 00007fe335236b50 R08: 0000000000000000 R09: 0000000000000000 [ 98.549971][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.557971][ T5797] R13: 00007fe335426038 R14: 00007fe335425fa0 R15: 00007ffd3ce855f8 [ 98.565978][ T5797] [ 98.569021][ T5797] Modules linked in: [ 98.576398][ T11] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 98.578092][ T5797] ---[ end trace 0000000000000000 ]--- [ 98.581249][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.583416][ T11] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 98.583570][ T11] usb 3-1: media controller created [ 98.637510][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.678575][ T5797] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 98.678622][ T5797] Code: c0 00 ea f3 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 1b 4e d9 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 92 c8 25 f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 98.678641][ T5797] RSP: 0018:ffffc9000488f220 EFLAGS: 00010206 [ 98.678660][ T5797] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bf3ea03 [ 98.678676][ T5797] RDX: 0000000000000000 RSI: ffffffff8ea7ab24 RDI: 00000000000000c0 [ 98.678690][ T5797] RBP: ffffc9000488f3b8 R08: ffffc9000488f327 R09: 0000000000000000 [ 98.678745][ T5797] R10: ffffc9000488f300 R11: fffff52000911e65 R12: 0000000000000068 [ 98.678764][ T5797] R13: 0000000000000000 R14: 1ffff92000911e58 R15: 0000000000000000 [ 98.678779][ T5797] FS: 00007fe335fda6c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 98.678798][ T5797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.678814][ T5797] CR2: 0000001b2d31fff8 CR3: 00000000269e2000 CR4: 00000000003526f0 [ 98.679359][ T5797] Kernel panic - not syncing: Fatal exception [ 98.780794][ T5797] Kernel Offset: disabled [ 98.785141][ T5797] Rebooting in 86400 seconds..