last executing test programs: 6.215692761s ago: executing program 4 (id=99): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 5.348625211s ago: executing program 4 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000081}]}) 5.186977758s ago: executing program 4 (id=109): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) 5.103643403s ago: executing program 4 (id=110): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x909, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='@\n,\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 2.763352466s ago: executing program 4 (id=135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.287847451s ago: executing program 2 (id=143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 2.045898498s ago: executing program 2 (id=146): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xcabd8245) 1.897594505s ago: executing program 3 (id=147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xfffb, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000000081, 0x9, 0x5f}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x4, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 1.873997385s ago: executing program 2 (id=148): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000000)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x40000000000038a, 0x9200000000000000) 1.739052685s ago: executing program 1 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10b, 0x0, 0x4}]}) 1.579153245s ago: executing program 3 (id=150): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x1) 1.443536173s ago: executing program 3 (id=151): socket(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) close(0x4) 1.3920934s ago: executing program 4 (id=152): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000006c0)='P') 1.378660958s ago: executing program 1 (id=153): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0xc020660b) 1.195546903s ago: executing program 1 (id=155): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000300)=0x5) 1.039858042s ago: executing program 1 (id=157): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 764.351084ms ago: executing program 0 (id=160): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 701.248099ms ago: executing program 0 (id=161): renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xffffffffffffffff, 0x0, 0x2) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_debug_messages', 0x28201, 0x1ca) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}]) 659.73874ms ago: executing program 2 (id=162): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000200)="ac0c7757", 0x4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)='>', 0x1}) close(r0) 573.123621ms ago: executing program 3 (id=163): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 502.922398ms ago: executing program 0 (id=164): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x2, 0x8000, 0x6}, 0xc) 480.978226ms ago: executing program 2 (id=165): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 480.293987ms ago: executing program 3 (id=166): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) 400.923191ms ago: executing program 1 (id=167): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 366.06351ms ago: executing program 0 (id=168): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x1, 0xfff3}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4041091}, 0x844) 189.493545ms ago: executing program 0 (id=169): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x40840) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x43}}], 0x40000000000003a, 0x0) 165.259902ms ago: executing program 3 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad386dd", 0x5e0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 160.418737ms ago: executing program 1 (id=171): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 106.627046ms ago: executing program 2 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x281, 0x0, 0x7ff}]}) 0s ago: executing program 0 (id=173): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 76.857039][ T5614] cgroup: Unknown subsys name 'net' [ 76.988641][ T5614] cgroup: Unknown subsys name 'cpuset' [ 76.997305][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.397714][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.569017][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.579837][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.590488][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.599723][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.599765][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.608935][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.617525][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.633306][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.634961][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.649604][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.650075][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.657965][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.665821][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.672062][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.679367][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.686988][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.692905][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.701674][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.708597][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.713302][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.722463][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.728957][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.743222][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.752743][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.762011][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.787000][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.795062][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.805814][ T5645] bridge_slave_0: entered allmulticast mode [ 81.813661][ T5645] bridge_slave_0: entered promiscuous mode [ 81.846606][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.853738][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.863013][ T5644] bridge_slave_0: entered allmulticast mode [ 81.873531][ T5644] bridge_slave_0: entered promiscuous mode [ 81.898139][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.905707][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.912865][ T5645] bridge_slave_1: entered allmulticast mode [ 81.920123][ T5645] bridge_slave_1: entered promiscuous mode [ 81.932761][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.941053][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.948724][ T5644] bridge_slave_1: entered allmulticast mode [ 81.955892][ T5644] bridge_slave_1: entered promiscuous mode [ 82.016544][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.023754][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.031389][ T5643] bridge_slave_0: entered allmulticast mode [ 82.038667][ T5643] bridge_slave_0: entered promiscuous mode [ 82.076149][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.083576][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.091328][ T5643] bridge_slave_1: entered allmulticast mode [ 82.099799][ T5643] bridge_slave_1: entered promiscuous mode [ 82.132002][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.143887][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.164945][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.213755][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.225647][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.237791][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.247266][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.255156][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.262427][ T5647] bridge_slave_0: entered allmulticast mode [ 82.269666][ T5647] bridge_slave_0: entered promiscuous mode [ 82.285308][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.292750][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.300298][ T5648] bridge_slave_0: entered allmulticast mode [ 82.307668][ T5648] bridge_slave_0: entered promiscuous mode [ 82.338779][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.346029][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.353190][ T5647] bridge_slave_1: entered allmulticast mode [ 82.360868][ T5647] bridge_slave_1: entered promiscuous mode [ 82.369832][ T5645] team0: Port device team_slave_0 added [ 82.375772][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.383051][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.390432][ T5648] bridge_slave_1: entered allmulticast mode [ 82.397760][ T5648] bridge_slave_1: entered promiscuous mode [ 82.424705][ T5643] team0: Port device team_slave_0 added [ 82.442346][ T5645] team0: Port device team_slave_1 added [ 82.458996][ T5644] team0: Port device team_slave_0 added [ 82.466581][ T5643] team0: Port device team_slave_1 added [ 82.503446][ T5644] team0: Port device team_slave_1 added [ 82.521342][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.543548][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.573925][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.585784][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.592743][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.618816][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.632986][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.663651][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.670759][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.696739][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.716654][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.723728][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.750575][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.772337][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.779446][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.806006][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.817928][ T50] Bluetooth: hci0: command tx timeout [ 82.817934][ T5635] Bluetooth: hci3: command tx timeout [ 82.824159][ T5641] Bluetooth: hci2: command tx timeout [ 82.829972][ T5639] Bluetooth: hci4: command tx timeout [ 82.835557][ T5626] Bluetooth: hci1: command tx timeout [ 82.850457][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.857748][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.883806][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.912162][ T5648] team0: Port device team_slave_0 added [ 82.918511][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.925564][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.951588][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.978039][ T5647] team0: Port device team_slave_0 added [ 82.987604][ T5648] team0: Port device team_slave_1 added [ 83.013547][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.020553][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.046531][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.059879][ T5647] team0: Port device team_slave_1 added [ 83.086944][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.094021][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.120400][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.132757][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.139934][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.166064][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.177739][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.184744][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.211019][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.299884][ T5643] hsr_slave_0: entered promiscuous mode [ 83.306504][ T5643] hsr_slave_1: entered promiscuous mode [ 83.318189][ T5645] hsr_slave_0: entered promiscuous mode [ 83.324670][ T5645] hsr_slave_1: entered promiscuous mode [ 83.331499][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 83.337562][ T5645] Cannot create hsr debugfs directory [ 83.347934][ T5644] hsr_slave_0: entered promiscuous mode [ 83.354245][ T5644] hsr_slave_1: entered promiscuous mode [ 83.360606][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 83.366657][ T5644] Cannot create hsr debugfs directory [ 83.441137][ T5648] hsr_slave_0: entered promiscuous mode [ 83.447494][ T5648] hsr_slave_1: entered promiscuous mode [ 83.453587][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 83.459380][ T5648] Cannot create hsr debugfs directory [ 83.486533][ T5647] hsr_slave_0: entered promiscuous mode [ 83.492983][ T5647] hsr_slave_1: entered promiscuous mode [ 83.499481][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 83.505581][ T5647] Cannot create hsr debugfs directory [ 84.006894][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.020161][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.029255][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.040368][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.048285][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.058416][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.067191][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.079064][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.152838][ T5643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.162578][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.170971][ T5643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.180790][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.188850][ T5643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.199102][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.211277][ T5643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.221251][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.313322][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.324254][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.332624][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.342758][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.350934][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.360842][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.369162][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.379583][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.503276][ T5648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.514193][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.547317][ T5648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.558350][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.566382][ T5648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.577260][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.586394][ T5648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.597947][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.651465][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.686215][ T5647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.697693][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.706924][ T5647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.717781][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.748638][ T5647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.760395][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.769408][ T5647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.779057][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.795666][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.839282][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.847036][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.871259][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.890932][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.898082][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.905162][ T5626] Bluetooth: hci0: command tx timeout [ 84.907390][ T5641] Bluetooth: hci4: command tx timeout [ 84.910799][ T50] Bluetooth: hci1: command tx timeout [ 84.910826][ T50] Bluetooth: hci2: command tx timeout [ 84.910845][ T50] Bluetooth: hci3: command tx timeout [ 84.972343][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.992570][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.030730][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.037981][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.066015][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.073168][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.092853][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.126230][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.133397][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.143762][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.150952][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.242761][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.262174][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.300438][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.340494][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.347640][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.373581][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.380750][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.408806][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.458336][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.501239][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.508400][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.523795][ T5644] veth0_vlan: entered promiscuous mode [ 85.534277][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.541534][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.557941][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.569034][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.615055][ T5644] veth1_vlan: entered promiscuous mode [ 85.705507][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.736685][ T5645] veth0_vlan: entered promiscuous mode [ 85.752692][ T5644] veth0_macvtap: entered promiscuous mode [ 85.772196][ T5644] veth1_macvtap: entered promiscuous mode [ 85.784123][ T5643] veth0_vlan: entered promiscuous mode [ 85.799873][ T5645] veth1_vlan: entered promiscuous mode [ 85.818093][ T5643] veth1_vlan: entered promiscuous mode [ 85.857474][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.886564][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.923220][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933441][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.955459][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.966797][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.976416][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.990339][ T5648] veth0_vlan: entered promiscuous mode [ 86.001639][ T5643] veth0_macvtap: entered promiscuous mode [ 86.021983][ T5645] veth0_macvtap: entered promiscuous mode [ 86.039641][ T5643] veth1_macvtap: entered promiscuous mode [ 86.052763][ T5645] veth1_macvtap: entered promiscuous mode [ 86.069428][ T5648] veth1_vlan: entered promiscuous mode [ 86.164184][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.192523][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.209761][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.221228][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.231548][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.261480][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.277638][ T3301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.287833][ T3301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.315989][ T3301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.327798][ T3301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.345516][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.354341][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.366556][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.375958][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.387559][ T5647] veth0_vlan: entered promiscuous mode [ 86.397877][ T5648] veth0_macvtap: entered promiscuous mode [ 86.405520][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.415747][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.461091][ T5648] veth1_macvtap: entered promiscuous mode [ 86.490635][ T5647] veth1_vlan: entered promiscuous mode [ 86.529006][ T5644] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.583335][ T5644] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.596192][ T5644] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.609519][ T5644] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.621568][ T5644] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.627940][ T3301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.639677][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.653695][ T3301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.713864][ T5647] veth0_macvtap: entered promiscuous mode [ 86.725772][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.784279][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.796983][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.821455][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.831704][ T5647] veth1_macvtap: entered promiscuous mode [ 86.835108][ T186] cfg80211: failed to load regulatory.db [ 86.867194][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.930288][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.940722][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.953856][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.961691][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.986167][ T5641] Bluetooth: hci4: command tx timeout [ 86.992200][ T5635] Bluetooth: hci0: command tx timeout [ 86.998705][ T5641] Bluetooth: hci3: command tx timeout [ 87.004668][ T5626] Bluetooth: hci2: command tx timeout [ 87.004701][ T5626] Bluetooth: hci1: command tx timeout [ 87.072374][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.158929][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.182644][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.230181][ T30] audit: type=1326 audit(1785164735.647:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.233579][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.268446][ T30] audit: type=1326 audit(1785164735.647:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.308914][ T30] audit: type=1326 audit(1785164735.687:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.333053][ T1178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.340072][ T30] audit: type=1326 audit(1785164735.717:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.366308][ T30] audit: type=1326 audit(1785164735.717:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.367521][ T1178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.448025][ T5735] netlink: 'syz.2.7': attribute type 3 has an invalid length. [ 87.453311][ T30] audit: type=1326 audit(1785164735.717:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.516099][ T1178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.529245][ T30] audit: type=1326 audit(1785164735.717:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.545655][ T1178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.585552][ T30] audit: type=1326 audit(1785164735.717:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.610896][ T30] audit: type=1326 audit(1785164735.717:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.640996][ T30] audit: type=1326 audit(1785164735.717:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.3.4" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 87.666413][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.680683][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.800108][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.846384][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.018231][ T5750] sg_read: process 4 (syz.1.13) changed security contexts after opening file descriptor, this is not allowed. [ 88.042302][ T3301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.068748][ T3301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.207623][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.242348][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.246085][ T5759] ======================================================= [ 88.246085][ T5759] WARNING: The mand mount option has been deprecated and [ 88.246085][ T5759] and is ignored by this kernel. Remove the mand [ 88.246085][ T5759] option from the mount to silence this warning. [ 88.246085][ T5759] ======================================================= [ 88.315070][ T5755] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.493561][ T5764] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 89.054883][ T5626] Bluetooth: hci1: command tx timeout [ 89.056565][ T5639] Bluetooth: hci2: command tx timeout [ 89.060356][ T5626] Bluetooth: hci4: command tx timeout [ 89.066276][ T5641] Bluetooth: hci3: command tx timeout [ 89.076676][ T5635] Bluetooth: hci0: command tx timeout [ 90.079146][ T5815] process 'syz.3.40' launched '/dev/fd/3' with NULL argv: empty string added [ 90.356942][ T5819] macvlan0: entered promiscuous mode [ 90.389824][ T5819] netlink: 'syz.4.42': attribute type 2 has an invalid length. [ 90.591591][ T5828] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 90.931299][ T5839] netlink: 'syz.3.50': attribute type 4 has an invalid length. [ 90.957426][ T5839] netlink: 17 bytes leftover after parsing attributes in process `syz.3.50'. [ 91.335156][ T5855] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 91.426863][ T5716] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.597649][ T5864] loop9: detected capacity change from 0 to 2640 [ 91.634340][ T5646] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.654308][ T5864] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.681386][ T5716] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 91.695976][ T5646] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.701990][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.721491][ T5864] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.745347][ T5716] usb 3-1: Product: syz [ 91.758669][ T5716] usb 3-1: Manufacturer: syz [ 91.758807][ T5864] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.773571][ T5716] usb 3-1: SerialNumber: syz [ 91.822984][ T5716] usb 3-1: config 0 descriptor?? [ 91.835621][ T5864] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.866140][ T5646] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.877735][ T5646] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.908919][ T5864] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.940840][ T5646] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.966811][ T5864] ldm_validate_partition_table(): Disk read failed. [ 91.985266][ T5864] Dev loop9: unable to read RDB block 0 [ 91.991499][ T5864] loop9: unable to read partition table [ 92.002460][ T5864] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 92.266214][ T5716] usb 3-1: Firmware: major: 141, minor: 82, hardware type: ATUSB (2) [ 92.470761][ T5716] usb 3-1: failed to fetch extended address, random address set [ 92.544583][ T5628] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.643449][ T5716] usb 3-1: USB disconnect, device number 2 [ 92.705044][ T5628] usb 2-1: Using ep0 maxpacket: 8 [ 92.721637][ T5628] usb 2-1: config 0 has no interfaces? [ 92.744585][ T5628] usb 2-1: config 0 has no interfaces? [ 92.757311][ T5628] usb 2-1: config 0 has no interfaces? [ 92.768875][ T5628] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.784182][ T5628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.801163][ T5628] usb 2-1: Product: syz [ 92.817633][ T5628] usb 2-1: Manufacturer: syz [ 92.827045][ T5628] usb 2-1: SerialNumber: syz [ 92.845057][ T5628] usb 2-1: config 0 descriptor?? [ 93.115139][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.123158][ T5902] input: syz0 as /devices/virtual/input/input5 [ 93.150039][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.200903][ T5716] usb 2-1: USB disconnect, device number 2 [ 93.669768][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 93.702776][ T5928] caif0: tun_chr_ioctl cmd 1074025672 [ 93.711389][ T5928] caif0: ignored: set checksum disabled [ 93.745266][ T5726] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.754631][ T5716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.915506][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 93.928257][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 93.947707][ T5726] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 93.971560][ T5716] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.988220][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.999807][ T5716] usb 2-1: config 1 interface 0 has no altsetting 0 [ 94.014095][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.031610][ T5716] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 94.044566][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.063846][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.072324][ T5726] usb 1-1: Product: syz [ 94.077116][ T5716] usb 2-1: Product: syz [ 94.084537][ T5726] usb 1-1: Manufacturer: syz [ 94.089675][ T5716] usb 2-1: Manufacturer: syz [ 94.099678][ T5726] usb 1-1: SerialNumber: syz [ 94.108801][ T5716] usb 2-1: SerialNumber: syz [ 94.118146][ T5726] usb 1-1: config 0 descriptor?? [ 94.137877][ T5938] input: syz0 as /devices/virtual/input/input6 [ 94.146016][ T5726] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.170723][ T5726] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 94.262514][ T5940] netlink: 260 bytes leftover after parsing attributes in process `syz.4.97'. [ 94.380694][ T5716] hub 2-1:1.0: USB hub found [ 94.398417][ T5716] hub 2-1:1.0: config failed, can't read hub descriptor (err -22) [ 94.439257][ T5716] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 94.492964][ T5716] usb 2-1: USB disconnect, device number 3 [ 94.749827][ T5726] em28xx 1-1:0.0: chip ID is em2870 [ 94.901611][ T5953] program syz.3.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.041160][ T5716] usb 1-1: USB disconnect, device number 2 [ 95.078654][ T5716] em28xx 1-1:0.0: Disconnecting em28xx [ 95.128796][ T5716] em28xx 1-1:0.0: Freeing device [ 95.285375][ T5717] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.446433][ T5717] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.461501][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.509490][ T5717] usb 4-1: config 0 descriptor?? [ 95.529965][ T5717] cp210x 4-1:0.0: cp210x converter detected [ 95.669037][ T5977] cifs: Unknown parameter 'fd' [ 95.894785][ T5716] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 96.117734][ T5716] usb 5-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 96.137596][ T5716] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.145623][ T5716] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 96.155241][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.182500][ T5716] usb 5-1: config 0 descriptor?? [ 96.189903][ T5975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.350771][ T5717] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 96.377098][ T5717] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 96.399567][ T6000] sg_write: data in/out 373125/136 bytes for SCSI command 0x0-- guessing data in; [ 96.399567][ T6000] program syz.2.120 not setting count and/or reply_len properly [ 96.429031][ T5717] usb 4-1: cp210x converter now attached to ttyUSB0 [ 96.451024][ T5717] usb 4-1: USB disconnect, device number 2 [ 96.499212][ T5717] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 96.519681][ T5717] cp210x 4-1:0.0: device disconnected [ 96.579334][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 96.579351][ T30] audit: type=1326 audit(1785164744.997:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 96.653936][ T30] audit: type=1326 audit(1785164744.997:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 96.660965][ T5716] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0001/input/input8 [ 96.694386][ T30] audit: type=1326 audit(1785164745.037:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 96.781182][ T30] audit: type=1326 audit(1785164745.047:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 96.844163][ T30] audit: type=1326 audit(1785164745.047:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 96.863020][ T5716] uclogic 0003:28BD:0909.0001: input,hidraw0: USB HID v0.09 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 96.933591][ T30] audit: type=1326 audit(1785164745.047:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 96.964313][ T5716] usb 5-1: USB disconnect, device number 2 [ 96.988921][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 97.034152][ T6012] netlink: 'syz.1.125': attribute type 5 has an invalid length. [ 97.087951][ T30] audit: type=1326 audit(1785164745.047:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 97.116129][ T6012] netlink: 'syz.1.125': attribute type 8 has an invalid length. [ 97.150159][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 97.185770][ T30] audit: type=1326 audit(1785164745.057:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 97.252933][ T6010] fido_id[6010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 97.271247][ T30] audit: type=1326 audit(1785164745.057:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 97.356979][ T6012] geneve2: entered promiscuous mode [ 97.386001][ T30] audit: type=1326 audit(1785164745.057:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fc30ec code=0x7ffc0000 [ 97.387096][ T6021] loop9: detected capacity change from 0 to 8 [ 97.414317][ T6012] geneve2: entered allmulticast mode [ 97.443815][ T1117] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 50257 - 0 [ 97.470325][ T1117] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50257 - 0 [ 97.497159][ T6021] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 97.502646][ T6021] loop9: partition table partially beyond EOD, truncated [ 97.511357][ T6021] loop9: p1 size 81768186 extends beyond EOD, truncated [ 97.519884][ T1117] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50257 - 0 [ 97.556187][ T1117] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50257 - 0 [ 97.855449][ T1226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.034498][ T1226] usb 1-1: Using ep0 maxpacket: 32 [ 98.056963][ T1226] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 98.098042][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.124173][ T1226] usb 1-1: config 0 descriptor?? [ 98.372253][ T1226] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 98.372592][ T6050] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.143'. [ 98.433370][ T6052] netlink: 'syz.1.144': attribute type 9 has an invalid length. [ 98.442994][ T1226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.475959][ T1226] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 98.488739][ T1226] usb 1-1: media controller created [ 98.530945][ T1226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.531760][ T6052] macvlan2: entered promiscuous mode [ 98.584578][ T6052] macvlan2: entered allmulticast mode [ 98.638914][ T1226] az6027: usb out operation failed. (-71) [ 98.663395][ T1226] az6027: usb out operation failed. (-71) [ 98.673081][ T1226] stb0899_attach: Driver disabled by Kconfig [ 98.679437][ T1226] az6027: no front-end attached [ 98.679437][ T1226] [ 98.687337][ T1226] az6027: usb out operation failed. (-71) [ 98.694059][ T1226] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 98.722281][ T1226] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 98.777418][ T1226] dvb-usb: schedule remote query interval to 400 msecs. [ 98.804887][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 98.828425][ T1226] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 98.842285][ T1226] usb 1-1: USB disconnect, device number 3 [ 98.860079][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 99.025836][ T1226] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 99.527006][ T1226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.627375][ T6086] netlink: 'syz.1.157': attribute type 32 has an invalid length. [ 99.656317][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 99.700466][ T1226] usb 5-1: Using ep0 maxpacket: 16 [ 99.716563][ T6086] bond1: option coupled_control: invalid value (46) [ 99.720654][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.753345][ T6086] bond1 (unregistering): Released all slaves [ 99.777919][ T1226] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.833354][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.906179][ T1226] usb 5-1: config 0 descriptor?? [ 99.991332][ T6086] Zero length message leads to an empty skb [ 100.233302][ T6108] hub 9-0:1.0: USB hub found [ 100.262501][ T6108] hub 9-0:1.0: 1 port detected [ 100.383791][ T1226] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 100.570704][ C1] ================================================================== [ 100.578828][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x10b0/0x12a0 [ 100.586851][ C1] Read of size 1 at addr ffff88807720bfff by task udevd/5646 [ 100.594279][ C1] [ 100.596671][ C1] CPU: 1 UID: 0 PID: 5646 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 100.596700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.596723][ C1] Call Trace: [ 100.596731][ C1] [ 100.596740][ C1] dump_stack_lvl+0xe8/0x150 [ 100.596775][ C1] print_address_description+0x55/0x1e0 [ 100.596805][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 100.596827][ C1] print_report+0x58/0x70 [ 100.596851][ C1] kasan_report+0x117/0x150 [ 100.596883][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 100.596908][ C1] mcp2221_raw_event+0x10b0/0x12a0 [ 100.596929][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.596949][ C1] ? down_trylock+0x50/0xb0 [ 100.596976][ C1] __hid_input_report+0x41c/0x580 [ 100.597010][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 100.597036][ C1] hid_irq_in+0x492/0x710 [ 100.597064][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 100.597092][ C1] dummy_timer+0xa91/0x4cf0 [ 100.597114][ C1] ? update_se+0x90/0x1020 [ 100.597161][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.597185][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.597207][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.597231][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 100.597260][ C1] hrtimer_run_softirq+0x17a/0x240 [ 100.597287][ C1] handle_softirqs+0x225/0x840 [ 100.597312][ C1] ? __irq_exit_rcu+0xca/0x220 [ 100.597340][ C1] __irq_exit_rcu+0xca/0x220 [ 100.597363][ C1] irq_exit_rcu+0x9/0x30 [ 100.597387][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 100.597412][ C1] [ 100.597420][ C1] [ 100.597426][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.597448][ C1] RIP: 0010:unwind_get_return_address+0x3b/0x90 [ 100.597472][ C1] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 7b 17 bd 00 48 8b 3b e8 e3 e2 18 00 85 c0 74 14 [ 100.597489][ C1] RSP: 0018:ffffc900044178e8 EFLAGS: 00000246 [ 100.597506][ C1] RAX: 0000000000000000 RBX: ffffc90004417950 RCX: 0000000000000046 [ 100.597521][ C1] RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffc90004417908 [ 100.597536][ C1] RBP: ffffc90004417990 R08: ffffc90004417ee0 R09: 0000000000000000 [ 100.597551][ C1] R10: ffffc90004417958 R11: fffff52000882f2d R12: ffff88802bf53e00 [ 100.597567][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000882f2a [ 100.597592][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 100.597632][ C1] arch_stack_walk+0xfb/0x150 [ 100.597656][ C1] ? do_syscall_64+0x174/0x580 [ 100.597683][ C1] stack_trace_save+0xa9/0x100 [ 100.597710][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 100.597737][ C1] ? __lock_acquire+0x683/0x2cf0 [ 100.597766][ C1] kasan_save_track+0x3e/0x80 [ 100.597792][ C1] ? kasan_save_track+0x3e/0x80 [ 100.597819][ C1] ? kasan_save_free_info+0x40/0x50 [ 100.597842][ C1] ? __kasan_slab_free+0x5c/0x80 [ 100.597871][ C1] ? kmem_cache_free+0x182/0x650 [ 100.597900][ C1] ? vfs_fstatat+0x13d/0x170 [ 100.597925][ C1] ? __x64_sys_newfstatat+0x151/0x200 [ 100.597973][ C1] ? vfs_fstatat+0x13d/0x170 [ 100.597999][ C1] kasan_save_free_info+0x40/0x50 [ 100.598023][ C1] __kasan_slab_free+0x5c/0x80 [ 100.598053][ C1] kmem_cache_free+0x182/0x650 [ 100.598086][ C1] vfs_fstatat+0x13d/0x170 [ 100.598113][ C1] __x64_sys_newfstatat+0x151/0x200 [ 100.598142][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 100.598185][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.598208][ C1] do_syscall_64+0x174/0x580 [ 100.598233][ C1] ? clear_bhb_loop+0x40/0x90 [ 100.598254][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.598272][ C1] RIP: 0033:0x7f573c511b0a [ 100.598302][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 100.598319][ C1] RSP: 002b:00007ffdc69caf88 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 100.598340][ C1] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f573c511b0a [ 100.598354][ C1] RDX: 00007ffdc69caf90 RSI: 00007ffdc69cb060 RDI: 00000000ffffff9c [ 100.598368][ C1] RBP: 00007ffdc69cc0a0 R08: 00007ffdc69cccd0 R09: 0000000000000000 [ 100.598380][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc69cccd0 [ 100.598391][ C1] R13: 0000000000000000 R14: 00007ffdc69cc8d0 R15: 00007ffdc69cc4d0 [ 100.598409][ C1] [ 100.598415][ C1] [ 101.029287][ C1] Allocated by task 5634: [ 101.033605][ C1] kasan_save_track+0x3e/0x80 [ 101.038322][ C1] __kasan_kmalloc+0x93/0xb0 [ 101.042919][ C1] __kmalloc_cache_noprof+0x32d/0x660 [ 101.048292][ C1] kmem_cache_free+0x156/0x650 [ 101.053132][ C1] fput_close_sync+0x11f/0x240 [ 101.057902][ C1] __x64_sys_close+0x7e/0x110 [ 101.062582][ C1] do_syscall_64+0x174/0x580 [ 101.067169][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.073057][ C1] [ 101.075375][ C1] Freed by task 5634: [ 101.079341][ C1] kasan_save_track+0x3e/0x80 [ 101.084021][ C1] kasan_save_free_info+0x40/0x50 [ 101.089128][ C1] __kasan_slab_free+0x5c/0x80 [ 101.093891][ C1] kfree+0x1c5/0x640 [ 101.097792][ C1] slab_free_after_rcu_debug+0x62/0x220 [ 101.103341][ C1] rcu_core+0x78b/0x10a0 [ 101.107633][ C1] handle_softirqs+0x225/0x840 [ 101.112412][ C1] __irq_exit_rcu+0xca/0x220 [ 101.117031][ C1] irq_exit_rcu+0x9/0x30 [ 101.121290][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.126918][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.132895][ C1] [ 101.135210][ C1] Last potentially related work creation: [ 101.140942][ C1] kasan_save_stack+0x3e/0x60 [ 101.145641][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 101.150846][ C1] call_rcu+0xee/0x8b0 [ 101.154935][ C1] kmem_cache_free+0x462/0x650 [ 101.159699][ C1] fput_close_sync+0x11f/0x240 [ 101.164463][ C1] __x64_sys_close+0x7e/0x110 [ 101.169154][ C1] do_syscall_64+0x174/0x580 [ 101.173873][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.179784][ C1] [ 101.182104][ C1] The buggy address belongs to the object at ffff88807720bfc0 [ 101.182104][ C1] which belongs to the cache kmalloc-32 of size 32 [ 101.196025][ C1] The buggy address is located 31 bytes to the right of [ 101.196025][ C1] allocated 32-byte region [ffff88807720bfc0, ffff88807720bfe0) [ 101.210543][ C1] [ 101.212884][ C1] The buggy address belongs to the physical page: [ 101.219338][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7720b [ 101.228107][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 101.235240][ C1] page_type: f5(slab) [ 101.239238][ C1] raw: 00fff00000000000 ffff88801b004780 dead000000000100 dead000000000122 [ 101.247861][ C1] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 101.256443][ C1] page dumped because: kasan: bad access detected [ 101.262861][ C1] page_owner tracks the page as allocated [ 101.268574][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5493, tgid 5493 (rm), ts 63322882566, free_ts 63321803342 [ 101.287785][ C1] post_alloc_hook+0x1f9/0x250 [ 101.292629][ C1] get_page_from_freelist+0x21fa/0x2270 [ 101.298186][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 101.304004][ C1] allocate_slab+0x79/0x5e0 [ 101.308507][ C1] refill_objects+0x2d5/0x350 [ 101.313204][ C1] __pcs_replace_empty_main+0x2bf/0x6b0 [ 101.319041][ C1] __kmalloc_cache_noprof+0x3a7/0x660 [ 101.324866][ C1] kmem_cache_free+0x156/0x650 [ 101.329764][ C1] tear_down_vmas+0x312/0x520 [ 101.334474][ C1] exit_mmap+0x4ca/0x9f0 [ 101.338738][ C1] __mmput+0x118/0x420 [ 101.342822][ C1] setup_new_exec+0x30d/0x360 [ 101.347522][ C1] load_elf_binary+0xbcf/0x2950 [ 101.352409][ C1] bprm_execve+0x9c7/0x1630 [ 101.356926][ C1] do_execveat_common+0x4f4/0x670 [ 101.361949][ C1] __x64_sys_execve+0x97/0xc0 [ 101.366635][ C1] page last free pid 5493 tgid 5493 stack trace: [ 101.373000][ C1] __free_frozen_pages+0xc1e/0xd10 [ 101.378145][ C1] tlb_finish_mmu+0x13e/0x220 [ 101.382954][ C1] exit_mmap+0x4b2/0x9f0 [ 101.387203][ C1] __mmput+0x118/0x420 [ 101.391293][ C1] setup_new_exec+0x30d/0x360 [ 101.395975][ C1] load_elf_binary+0xbcf/0x2950 [ 101.400827][ C1] bprm_execve+0x9c7/0x1630 [ 101.405412][ C1] do_execveat_common+0x4f4/0x670 [ 101.410453][ C1] __x64_sys_execve+0x97/0xc0 [ 101.415165][ C1] do_syscall_64+0x174/0x580 [ 101.419755][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.425656][ C1] [ 101.427993][ C1] Memory state around the buggy address: [ 101.433624][ C1] ffff88807720be80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 101.441875][ C1] ffff88807720bf00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 101.449988][ C1] >ffff88807720bf80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 101.458061][ C1] ^ [ 101.466059][ C1] ffff88807720c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.474150][ C1] ffff88807720c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.482241][ C1] ================================================================== [ 101.490490][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.497715][ C1] CPU: 1 UID: 0 PID: 5646 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 101.506745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 101.516820][ C1] Call Trace: [ 101.520187][ C1] [ 101.523228][ C1] vpanic+0x56c/0xa60 [ 101.527238][ C1] ? __pfx_vpanic+0x10/0x10 [ 101.531871][ C1] panic+0xc5/0xd0 [ 101.535633][ C1] ? __pfx_panic+0x10/0x10 [ 101.540089][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 101.545431][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 101.550750][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 101.556045][ C1] check_panic_on_warn+0x89/0xb0 [ 101.560996][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 101.566367][ C1] end_report+0x73/0x170 [ 101.570617][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 101.575912][ C1] kasan_report+0x128/0x150 [ 101.580422][ C1] ? mcp2221_raw_event+0x10b0/0x12a0 [ 101.585713][ C1] mcp2221_raw_event+0x10b0/0x12a0 [ 101.590821][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 101.596623][ C1] ? down_trylock+0x50/0xb0 [ 101.601128][ C1] __hid_input_report+0x41c/0x580 [ 101.606160][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 101.611617][ C1] hid_irq_in+0x492/0x710 [ 101.615943][ C1] __usb_hcd_giveback_urb+0x374/0x530 [ 101.621330][ C1] dummy_timer+0xa91/0x4cf0 [ 101.625830][ C1] ? update_se+0x90/0x1020 [ 101.630326][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 101.635266][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 101.641066][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 101.646003][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 101.651207][ C1] hrtimer_run_softirq+0x17a/0x240 [ 101.656332][ C1] handle_softirqs+0x225/0x840 [ 101.661104][ C1] ? __irq_exit_rcu+0xca/0x220 [ 101.665869][ C1] __irq_exit_rcu+0xca/0x220 [ 101.670461][ C1] irq_exit_rcu+0x9/0x30 [ 101.674702][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.680331][ C1] [ 101.683253][ C1] [ 101.686199][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.692173][ C1] RIP: 0010:unwind_get_return_address+0x3b/0x90 [ 101.698415][ C1] Code: 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 <74> 08 48 89 df e8 7b 17 bd 00 48 8b 3b e8 e3 e2 18 00 85 c0 74 14 [ 101.718050][ C1] RSP: 0018:ffffc900044178e8 EFLAGS: 00000246 [ 101.724127][ C1] RAX: 0000000000000000 RBX: ffffc90004417950 RCX: 0000000000000046 [ 101.732107][ C1] RDX: 0000000000000000 RSI: ffffffff8e4b28e4 RDI: ffffc90004417908 [ 101.740091][ C1] RBP: ffffc90004417990 R08: ffffc90004417ee0 R09: 0000000000000000 [ 101.748063][ C1] R10: ffffc90004417958 R11: fffff52000882f2d R12: ffff88802bf53e00 [ 101.756068][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000882f2a [ 101.764063][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.770363][ C1] arch_stack_walk+0xfb/0x150 [ 101.775069][ C1] ? do_syscall_64+0x174/0x580 [ 101.779834][ C1] stack_trace_save+0xa9/0x100 [ 101.784598][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 101.789970][ C1] ? __lock_acquire+0x683/0x2cf0 [ 101.794918][ C1] kasan_save_track+0x3e/0x80 [ 101.799597][ C1] ? kasan_save_track+0x3e/0x80 [ 101.804469][ C1] ? kasan_save_free_info+0x40/0x50 [ 101.809668][ C1] ? __kasan_slab_free+0x5c/0x80 [ 101.814608][ C1] ? kmem_cache_free+0x182/0x650 [ 101.819553][ C1] ? vfs_fstatat+0x13d/0x170 [ 101.824156][ C1] ? __x64_sys_newfstatat+0x151/0x200 [ 101.829548][ C1] ? vfs_fstatat+0x13d/0x170 [ 101.834136][ C1] kasan_save_free_info+0x40/0x50 [ 101.839162][ C1] __kasan_slab_free+0x5c/0x80 [ 101.843942][ C1] kmem_cache_free+0x182/0x650 [ 101.848723][ C1] vfs_fstatat+0x13d/0x170 [ 101.853141][ C1] __x64_sys_newfstatat+0x151/0x200 [ 101.858341][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 101.864070][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.870132][ C1] do_syscall_64+0x174/0x580 [ 101.874718][ C1] ? clear_bhb_loop+0x40/0x90 [ 101.879392][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.885280][ C1] RIP: 0033:0x7f573c511b0a [ 101.889688][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 101.909297][ C1] RSP: 002b:00007ffdc69caf88 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 101.917719][ C1] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f573c511b0a [ 101.925687][ C1] RDX: 00007ffdc69caf90 RSI: 00007ffdc69cb060 RDI: 00000000ffffff9c [ 101.933676][ C1] RBP: 00007ffdc69cc0a0 R08: 00007ffdc69cccd0 R09: 0000000000000000 [ 101.941648][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc69cccd0 [ 101.949622][ C1] R13: 0000000000000000 R14: 00007ffdc69cc8d0 R15: 00007ffdc69cc4d0 [ 101.957602][ C1] [ 101.960756][ C1] Kernel Offset: disabled [ 101.965074][ C1] Rebooting in 86400 seconds..