last executing test programs: 21.597789381s ago: executing program 3 (id=58): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "b5"}, @global=@item_012={0x2, 0x1, 0x1, "cc58"}, @local=@item_012={0x1, 0x2, 0xa, "f5"}]}}, 0x0}, 0x0) 19.621375557s ago: executing program 3 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x406f413, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, 0x0) 17.58504709s ago: executing program 3 (id=65): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r3 = gettid() syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0) execve(0x0, &(0x7f00000005c0), &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) syz_emit_ethernet(0x93, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xa15cb}, {0x2}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe7}, {0x2, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x100, 0x0, 0x1}], @generic="0e489ef9fceb1f24f1b777e21fad84a10a8207800819ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b"}}}}, &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) r4 = syz_io_uring_setup(0xf04, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r7 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x40040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000840)=0xffffffffffffffff) poll(&(0x7f0000001200)=[{r8, 0x132}], 0x1, 0x2) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000) io_uring_enter(r4, 0x70db, 0x1, 0x1, 0x0, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000080)='macvlan1\x00', 0x10) 17.400138041s ago: executing program 0 (id=66): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 14.591899194s ago: executing program 1 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x18) 13.239478944s ago: executing program 1 (id=72): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 13.169888189s ago: executing program 2 (id=73): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x94000018) readv(r0, 0x0, 0x0) 12.275038818s ago: executing program 2 (id=74): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) 11.98995112s ago: executing program 4 (id=75): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x18, &(0x7f0000000000)={0x0, 0x11, 0x5, {0x5, 0x22, "ee0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.054221781s ago: executing program 0 (id=76): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.563450588s ago: executing program 2 (id=77): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r0 = open(0x0, 0x0, 0x6c) getpgrp(0x0) execveat$binfmt(r0, 0x0, &(0x7f0000000340)={[&(0x7f0000000080)='GPL\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000480)={[0x0]}, 0x1000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ff"], 0x110}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 10.446339445s ago: executing program 1 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xb, 0x7}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x0) 8.903881156s ago: executing program 1 (id=79): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x182) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) 8.671048939s ago: executing program 2 (id=80): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) 7.830739908s ago: executing program 4 (id=81): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 5.7209419s ago: executing program 4 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x18) 5.103106879s ago: executing program 3 (id=83): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x4}}, 0xe8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @tick=0x1}) 4.936563924s ago: executing program 0 (id=84): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x94000018) readv(0xffffffffffffffff, 0x0, 0x0) 4.788786411s ago: executing program 1 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_delneigh={0x20, 0x1e, 0x1, 0xfffffffc, 0x0, {0xa}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44010) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x2, @vbi={0x8001, 0x0, 0x6, 0x43353039, [0x7, 0x7ff], [0x1, 0x4]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x5, {0x3, 0x100, 0x81, 0x6}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7f28}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1e}]}}]}, 0x40}}, 0x4c840) 4.372022299s ago: executing program 2 (id=86): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000004c0)=0x0) fcntl$setown(r0, 0x8, r4) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4.32709829s ago: executing program 4 (id=87): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) 3.974828058s ago: executing program 3 (id=88): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 3.589139067s ago: executing program 0 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xb, 0x7}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x0) 3.247513261s ago: executing program 1 (id=90): creat(0x0, 0xd931d3864d39ddd8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') r4 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xfffffff7}, 0x0, 0x0, 0x8, 0x1, 0x72b, 0x4, 0x9, 0x3}}], 0x58}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) creat(0x0, 0x69) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipvlan0\x00'}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r7) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$inet6_sctp(0xa, 0x7, 0x84) 2.538322912s ago: executing program 4 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20050800) 2.05559359s ago: executing program 0 (id=92): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 1.401502261s ago: executing program 3 (id=93): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x9, 0x2, &(0x7f0000000040)={0xb, "810556c721393f4084cc9efc7ddb01702fb9a7f77d040b00"}}) 1.249692085s ago: executing program 4 (id=94): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 242.074327ms ago: executing program 0 (id=95): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x182) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) readv(r1, 0x0, 0x0) 0s ago: executing program 2 (id=96): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts. [ 191.150497][ T5756] cgroup: Unknown subsys name 'net' [ 191.284548][ T5756] cgroup: Unknown subsys name 'cpuset' [ 191.300142][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 198.363030][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.317907][ T5075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.335373][ T5075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.344976][ T5075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.368916][ T5075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.381036][ T5075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.445170][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.447293][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.455052][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.464238][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.469364][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.477114][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.488300][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.496138][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.500280][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.515893][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.617600][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.635205][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.645746][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.655657][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.664681][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.677169][ T5075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.691987][ T5075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.706748][ T5075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.770718][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.787120][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.240954][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.247918][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.412887][ T5784] Bluetooth: hci0: command tx timeout [ 205.573589][ T5776] Bluetooth: hci2: command tx timeout [ 205.577358][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 205.579611][ T5784] Bluetooth: hci1: command tx timeout [ 205.725823][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 205.812893][ T5784] Bluetooth: hci4: command tx timeout [ 205.854899][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 205.893402][ T5784] Bluetooth: hci3: command tx timeout [ 206.086141][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 206.396231][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 206.940455][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.948529][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.958268][ T5777] bridge_slave_0: entered allmulticast mode [ 206.969783][ T5777] bridge_slave_0: entered promiscuous mode [ 207.067763][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.076061][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.086563][ T5777] bridge_slave_1: entered allmulticast mode [ 207.097855][ T5777] bridge_slave_1: entered promiscuous mode [ 207.110586][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.120403][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.129260][ T5779] bridge_slave_0: entered allmulticast mode [ 207.140959][ T5779] bridge_slave_0: entered promiscuous mode [ 207.291354][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.323113][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.330800][ T5779] bridge_slave_1: entered allmulticast mode [ 207.386643][ T5779] bridge_slave_1: entered promiscuous mode [ 207.479382][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.487346][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.495889][ T5774] bridge_slave_0: entered allmulticast mode [ 207.504590][ T5784] Bluetooth: hci0: command tx timeout [ 207.506722][ T5774] bridge_slave_0: entered promiscuous mode [ 207.535575][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.600090][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.607983][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.615947][ T5774] bridge_slave_1: entered allmulticast mode [ 207.625340][ T5774] bridge_slave_1: entered promiscuous mode [ 207.643007][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.652985][ T5776] Bluetooth: hci2: command tx timeout [ 207.659029][ T5784] Bluetooth: hci1: command tx timeout [ 207.716619][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.724367][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.731833][ T5785] bridge_slave_0: entered allmulticast mode [ 207.741440][ T5785] bridge_slave_0: entered promiscuous mode [ 207.846528][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.857107][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.864920][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.872363][ T5785] bridge_slave_1: entered allmulticast mode [ 207.881776][ T5785] bridge_slave_1: entered promiscuous mode [ 207.893076][ T5784] Bluetooth: hci4: command tx timeout [ 207.949033][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.956878][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.964631][ T5787] bridge_slave_0: entered allmulticast mode [ 207.972981][ T5784] Bluetooth: hci3: command tx timeout [ 207.975218][ T5787] bridge_slave_0: entered promiscuous mode [ 208.000379][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.046958][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.066034][ T5777] team0: Port device team_slave_0 added [ 208.072364][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.080374][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.088432][ T5787] bridge_slave_1: entered allmulticast mode [ 208.097688][ T5787] bridge_slave_1: entered promiscuous mode [ 208.171969][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.217938][ T5777] team0: Port device team_slave_1 added [ 208.293884][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.395111][ T5779] team0: Port device team_slave_0 added [ 208.409904][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.428104][ T5774] team0: Port device team_slave_0 added [ 208.474093][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.491955][ T5779] team0: Port device team_slave_1 added [ 208.533615][ T5774] team0: Port device team_slave_1 added [ 208.542076][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.549438][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.575974][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.597373][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.716363][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.723541][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.750045][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.824017][ T5785] team0: Port device team_slave_0 added [ 208.914660][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.921758][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.949192][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.969338][ T5785] team0: Port device team_slave_1 added [ 208.977935][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.985550][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.012309][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.031986][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.039984][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.066440][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.086579][ T5787] team0: Port device team_slave_0 added [ 209.096358][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.103601][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.130385][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.205319][ T5787] team0: Port device team_slave_1 added [ 209.376128][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.383441][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.409744][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.467408][ T5777] hsr_slave_0: entered promiscuous mode [ 209.476532][ T5777] hsr_slave_1: entered promiscuous mode [ 209.494514][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.501577][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.528634][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.544037][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.551235][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.578532][ T5784] Bluetooth: hci0: command tx timeout [ 209.578961][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.658245][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.665542][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.691870][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.733032][ T5776] Bluetooth: hci2: command tx timeout [ 209.739093][ T5784] Bluetooth: hci1: command tx timeout [ 209.742329][ T5774] hsr_slave_0: entered promiscuous mode [ 209.754140][ T5774] hsr_slave_1: entered promiscuous mode [ 209.761891][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 209.768464][ T5774] Cannot create hsr debugfs directory [ 209.887292][ T5779] hsr_slave_0: entered promiscuous mode [ 209.896666][ T5779] hsr_slave_1: entered promiscuous mode [ 209.905675][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 209.911572][ T5779] Cannot create hsr debugfs directory [ 209.972865][ T5784] Bluetooth: hci4: command tx timeout [ 210.052986][ T5784] Bluetooth: hci3: command tx timeout [ 210.238592][ T5785] hsr_slave_0: entered promiscuous mode [ 210.247985][ T5785] hsr_slave_1: entered promiscuous mode [ 210.256616][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 210.262476][ T5785] Cannot create hsr debugfs directory [ 210.397130][ T5787] hsr_slave_0: entered promiscuous mode [ 210.406499][ T5787] hsr_slave_1: entered promiscuous mode [ 210.415194][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 210.421052][ T5787] Cannot create hsr debugfs directory [ 211.645289][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.654776][ T5784] Bluetooth: hci0: command tx timeout [ 211.687899][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.714725][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.753034][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.815349][ T5784] Bluetooth: hci1: command tx timeout [ 211.821012][ T5784] Bluetooth: hci2: command tx timeout [ 211.885383][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.928477][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.951407][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.977037][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.054667][ T5784] Bluetooth: hci4: command tx timeout [ 212.133349][ T5784] Bluetooth: hci3: command tx timeout [ 212.290440][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.326341][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.366483][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.451010][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.698876][ T5785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.748793][ T5785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.771321][ T5785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.820032][ T5785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.207714][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.322462][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.371311][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.411729][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.455353][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.505179][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.577658][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.660215][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.667943][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.808747][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.816551][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.909683][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.016704][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.058348][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.065988][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.241517][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.249258][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.320475][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.388405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.396079][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.530349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.538033][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.872830][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.140900][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.281239][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.438907][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.591960][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.599657][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.707435][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.715134][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.756457][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.764231][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.886313][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.894028][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.201530][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.559973][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.922131][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.270781][ T5777] veth0_vlan: entered promiscuous mode [ 217.338573][ T5774] veth0_vlan: entered promiscuous mode [ 217.569986][ T5777] veth1_vlan: entered promiscuous mode [ 217.608038][ T5774] veth1_vlan: entered promiscuous mode [ 217.758569][ T5779] veth0_vlan: entered promiscuous mode [ 217.869069][ T5779] veth1_vlan: entered promiscuous mode [ 218.001042][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.096353][ T5774] veth0_macvtap: entered promiscuous mode [ 218.190057][ T5777] veth0_macvtap: entered promiscuous mode [ 218.232097][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.260876][ T5774] veth1_macvtap: entered promiscuous mode [ 218.308241][ T5777] veth1_macvtap: entered promiscuous mode [ 218.558883][ T5779] veth0_macvtap: entered promiscuous mode [ 218.609162][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.666348][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.728466][ T5779] veth1_macvtap: entered promiscuous mode [ 218.772496][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.826254][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.945486][ T2927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.080214][ T2927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.118606][ T2927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.213896][ T2927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.282923][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.311336][ T2927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.321526][ T2927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.353854][ T2927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.381236][ T5787] veth0_vlan: entered promiscuous mode [ 219.401933][ T2927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.450257][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.629352][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.660395][ T5787] veth1_vlan: entered promiscuous mode [ 219.698942][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.743741][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.806429][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.118301][ T5785] veth0_vlan: entered promiscuous mode [ 220.289923][ T5785] veth1_vlan: entered promiscuous mode [ 220.361791][ T5787] veth0_macvtap: entered promiscuous mode [ 220.478451][ T5787] veth1_macvtap: entered promiscuous mode [ 220.784676][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.980924][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.110339][ T5785] veth0_macvtap: entered promiscuous mode [ 221.187393][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.218354][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.322458][ T5785] veth1_macvtap: entered promiscuous mode [ 221.372974][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.424175][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.566608][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.682159][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.861485][ T177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.878564][ T177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.960948][ T177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.015490][ T177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.283800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.291878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.643447][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.652103][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.285517][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.336718][ T5774] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.350771][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.790546][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.834965][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.193259][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.227728][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.412108][ T5952] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1'. [ 227.698411][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.727090][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.696710][ T5961] loop5: detected capacity change from 0 to 7 [ 228.781921][ T5961] Dev loop5: unable to read RDB block 7 [ 228.803154][ T5961] loop5: AHDI p1 p2 p3 [ 228.843067][ T5961] loop5: partition table partially beyond EOD, truncated [ 228.883905][ T5961] loop5: p1 start 1601398130 is beyond EOD, truncated [ 228.891090][ T5961] loop5: p2 start 1702059890 is beyond EOD, truncated [ 229.279425][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.302018][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.930597][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.976539][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.298193][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.343138][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.749824][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.782238][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.925494][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.162641][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 232.188104][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 232.223108][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.254565][ T9] usb 1-1: config 0 descriptor?? [ 232.263904][ T5980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.674887][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 232.681704][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 232.770024][ T9] usb 1-1: USB disconnect, device number 2 [ 233.113067][ T5832] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 233.280703][ T5993] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 233.342866][ T5832] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 233.351336][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.390217][ T5832] usb 4-1: config 0 has no interface number 0 [ 233.422872][ T5832] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 233.467646][ T5832] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 233.544683][ T5832] usb 4-1: config 0 interface 106 has no altsetting 0 [ 233.551822][ T5832] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 233.631470][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.716328][ T5832] usb 4-1: config 0 descriptor?? [ 233.820325][ T5832] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 234.467836][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.599352][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.632697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 234.673199][ T5832] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 234.859003][ T2973] usb 4-1: Failed to submit usb control message: -110 [ 234.902377][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.930754][ T2973] usb 4-1: unable to send the bmi data to the device: -110 [ 234.982413][ T2973] usb 4-1: unable to get target info from device [ 234.989268][ T2973] usb 4-1: could not get target info (-110) [ 235.011840][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.055244][ T2973] usb 4-1: could not probe fw (-110) [ 235.064021][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 235.105737][ T5832] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 235.133205][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.211136][ T6005] team0: Device gtp0 is of different type [ 235.309050][ T5832] usb 1-1: config 0 descriptor?? [ 235.908995][ T5832] usbhid 1-1:0.0: can't add hid device: -71 [ 235.945082][ T5832] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 236.113868][ T5832] usb 1-1: USB disconnect, device number 3 [ 236.308107][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 236.599797][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.656263][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.704884][ T9] usb 3-1: Product: syz [ 236.749335][ T9] usb 3-1: Manufacturer: syz [ 236.783231][ T9] usb 3-1: SerialNumber: syz [ 236.841703][ T9] usb 3-1: config 0 descriptor?? [ 237.022916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 237.238515][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.638582][ T5312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 238.892914][ T5312] usb 5-1: Using ep0 maxpacket: 32 [ 238.959689][ T5312] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.988174][ T5312] usb 5-1: config 0 has no interface number 0 [ 239.004277][ T5312] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 239.022859][ T5312] usb 5-1: config 0 interface 1 has no altsetting 0 [ 239.050189][ T5312] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 239.100653][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.130466][ T5312] usb 5-1: Product: syz [ 239.140738][ T5312] usb 5-1: Manufacturer: syz [ 239.189106][ T5312] usb 5-1: SerialNumber: syz [ 239.247781][ T5312] usb 5-1: config 0 descriptor?? [ 239.641025][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 239.654174][ T5312] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 239.659562][ T5312] cx231xx 5-1:0.1: Failed to read PCB config [ 239.659816][ T5312] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 239.741482][ T5312] usb 5-1: USB disconnect, device number 2 [ 240.096802][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 240.218230][ T5312] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.285855][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 240.336964][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 240.380166][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.403012][ T5312] usb 5-1: Using ep0 maxpacket: 32 [ 240.443416][ T5312] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.462360][ T5312] usb 5-1: config 0 has no interface number 0 [ 240.503320][ T5312] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 240.508390][ T9] usb 2-1: config 0 descriptor?? [ 240.554811][ T5312] usb 5-1: config 0 interface 1 has no altsetting 0 [ 240.584499][ T6039] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 240.652981][ T5312] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 240.715498][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.725086][ T5312] usb 5-1: Product: syz [ 240.737875][ T5312] usb 5-1: Manufacturer: syz [ 240.746323][ T5312] usb 5-1: SerialNumber: syz [ 240.844228][ T5312] usb 5-1: config 0 descriptor?? [ 241.087924][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 241.130691][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.248859][ T9] usb 2-1: USB disconnect, device number 2 [ 241.454092][ T5312] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 241.513442][ T5312] cx231xx 5-1:0.1: Failed to read PCB config [ 241.561771][ T5312] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 241.682950][ T5312] usb 5-1: USB disconnect, device number 3 [ 241.705228][ T5832] usb 3-1: USB disconnect, device number 2 [ 242.511505][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30'. [ 242.523200][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30'. [ 242.752993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 243.047323][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 243.172235][ T6057] bond_slave_0: entered promiscuous mode [ 243.178511][ T6057] bond_slave_1: entered promiscuous mode [ 243.194294][ T6057] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 243.264190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.354605][ T6057] bond_slave_0: left promiscuous mode [ 243.360376][ T6057] bond_slave_1: left promiscuous mode [ 246.306665][ T5312] usb 4-1: USB disconnect, device number 2 [ 246.586738][ T6072] netlink: 'syz.4.36': attribute type 5 has an invalid length. [ 246.633287][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 249.723292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 250.102913][ T5832] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 250.354864][ T5832] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 250.444914][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.468062][ T5832] usb 5-1: Product: syz [ 250.472402][ T5832] usb 5-1: Manufacturer: syz [ 250.523009][ T5832] usb 5-1: SerialNumber: syz [ 250.607350][ T5832] usb 5-1: config 0 descriptor?? [ 250.909490][ T5832] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.340520][ T5832] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 254.643223][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 254.794808][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 254.854620][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 254.888873][ T9] usb 5-1: USB disconnect, device number 4 [ 254.895892][ T5832] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 254.959923][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.026837][ T5832] usb 3-1: config 0 descriptor?? [ 255.076211][ T6088] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.644082][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 255.691994][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.824063][ T5832] usb 3-1: USB disconnect, device number 3 [ 257.272981][ T5312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 257.283082][ T795] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.514823][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 257.555895][ T795] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 257.564646][ T5312] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 257.593151][ T5312] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 257.613081][ T795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.630665][ T795] usb 3-1: config 0 has no interface number 0 [ 257.637593][ T5312] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 257.649266][ T795] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 257.662790][ T5312] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 257.693649][ T795] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 257.721941][ T5312] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 257.753044][ T795] usb 3-1: config 0 interface 106 has no altsetting 0 [ 257.761930][ T5312] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.836190][ T795] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 257.863333][ T5312] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.893311][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.923767][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.969959][ T795] usb 3-1: config 0 descriptor?? [ 258.170703][ T795] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 258.396940][ T5312] usb 2-1: usb_control_msg returned -32 [ 258.441800][ T5312] usbtmc 2-1:16.0: can't read capabilities [ 258.742642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 258.856745][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.867664][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.944735][ T6113] team0: Device gtp0 is of different type [ 259.520526][ T13] usb 3-1: Failed to submit usb control message: -110 [ 259.689870][ T13] usb 3-1: unable to send the bmi data to the device: -110 [ 259.794647][ T13] usb 3-1: unable to get target info from device [ 259.838559][ T13] usb 3-1: could not get target info (-110) [ 259.891718][ T13] usb 3-1: could not probe fw (-110) [ 260.428167][ T5832] usb 2-1: USB disconnect, device number 3 [ 261.162019][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 261.243155][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 261.625658][ T5832] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 261.912715][ T5832] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.968524][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.013154][ T5832] usb 1-1: Product: syz [ 262.024291][ T5832] usb 1-1: Manufacturer: syz [ 262.029127][ T5832] usb 1-1: SerialNumber: syz [ 262.080002][ T5832] usb 1-1: config 0 descriptor?? [ 262.403123][ T5832] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 263.173439][ T5312] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 263.370111][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 263.406838][ T5312] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 263.431952][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.516878][ T5312] usb 2-1: config 0 descriptor?? [ 263.548904][ T6136] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 264.023245][ T5312] usbhid 2-1:0.0: can't add hid device: -71 [ 264.082038][ T5312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.133431][ T5312] usb 2-1: USB disconnect, device number 4 [ 264.512598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 264.858155][ T5832] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 265.672628][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.679726][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.558225][ T5832] usb 1-1: USB disconnect, device number 4 [ 266.756527][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.972990][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 267.017265][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 267.082869][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 267.108848][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.196818][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 267.270070][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 267.299569][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.361802][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.403247][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.683268][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 267.719206][ T9] usb 2-1: usb_control_msg returned -32 [ 267.747443][ T9] usbtmc 2-1:16.0: can't read capabilities [ 267.763818][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 268.140067][ T6168] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 269.334674][ T9] usb 2-1: USB disconnect, device number 5 [ 269.735751][ T5312] usb 3-1: USB disconnect, device number 4 [ 271.622959][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 271.888914][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 271.985985][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 272.050193][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.131047][ T9] usb 2-1: config 0 descriptor?? [ 272.195167][ T6186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.568349][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 272.602418][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 272.676391][ T9] usb 2-1: USB disconnect, device number 6 [ 272.933846][ T794] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 273.138259][ T794] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.171694][ T794] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 273.212869][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.296989][ T794] usb 5-1: config 0 descriptor?? [ 273.356810][ T794] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 273.793178][ T794] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 274.013252][ T794] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 274.040084][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.064368][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 274.079405][ T794] usb 1-1: Product: syz [ 274.113935][ T794] usb 1-1: Manufacturer: syz [ 274.118997][ T794] usb 1-1: SerialNumber: syz [ 274.121335][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 274.160219][ T6199] netlink: 112 bytes leftover after parsing attributes in process `syz.2.77'. [ 274.201140][ T794] usb 1-1: config 0 descriptor?? [ 274.475752][ T794] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.864293][ T5312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.067788][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 276.123306][ T795] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 276.151783][ T5312] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 276.204572][ T5312] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 276.226401][ T40] usb 5-1: USB disconnect, device number 5 [ 276.269498][ T5312] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 276.327840][ T5312] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 276.395577][ T795] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.407935][ T5312] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 276.443312][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.462819][ T5312] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.498534][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 276.522913][ T5312] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.554395][ T795] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.609715][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.654390][ T795] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.708833][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.807844][ T795] usb 3-1: config 0 descriptor?? [ 276.984536][ T5312] usb 2-1: usb_control_msg returned -32 [ 276.990696][ T5312] usbtmc 2-1:16.0: can't read capabilities [ 277.080717][ T794] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 277.485426][ T6212] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 277.685448][ T795] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 278.970170][ T795] usb 1-1: USB disconnect, device number 5 [ 279.117702][ T794] usb 2-1: USB disconnect, device number 7 [ 279.500874][ T794] usb 3-1: USB disconnect, device number 5 [ 280.784154][ T795] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 280.899925][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 280.923789][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 280.978639][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 281.006089][ T795] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 281.072481][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.144871][ T795] usb 4-1: config 0 descriptor?? [ 281.178630][ T6238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.539599][ T795] usbhid 4-1:0.0: can't add hid device: -71 [ 281.554569][ T795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 281.613958][ T795] usb 4-1: USB disconnect, device number 3 [ 283.522910][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 283.693075][ T795] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 283.804126][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.833169][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.863129][ T9] usb 5-1: Product: syz [ 283.867613][ T9] usb 5-1: Manufacturer: syz [ 283.882962][ T9] usb 5-1: SerialNumber: syz [ 283.903641][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 283.931483][ T9] usb 5-1: config 0 descriptor?? [ 283.983024][ T795] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 284.036531][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.087106][ T795] usb 4-1: config 0 descriptor?? [ 284.273630][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 284.413372][ T795] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 284.478481][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.559477][ T795] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 284.610480][ T795] usb 4-1: media controller created [ 284.614135][ T6261] ===================================================== [ 284.624188][ T6261] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 284.638958][ T6261] _copy_to_user+0xcc/0x120 [ 284.643967][ T5312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.654072][ T6261] i2cdev_ioctl_smbus+0x586/0x660 [ 284.659520][ T6261] compat_i2cdev_ioctl+0x48f/0xb40 [ 284.665448][ T6261] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 284.675652][ T6261] ia32_sys_call+0x2854/0x4360 [ 284.680617][ T6261] __do_fast_syscall_32+0x17f/0x3f0 [ 284.686266][ T6261] do_fast_syscall_32+0x37/0x80 [ 284.691341][ T6261] do_SYSENTER_32+0x1f/0x30 [ 284.696237][ T6261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.703457][ T6261] [ 284.705901][ T6261] Uninit was stored to memory at: [ 284.711303][ T6261] __i2c_smbus_xfer+0x25b3/0x3120 [ 284.718122][ T6261] i2c_smbus_xfer+0x2d8/0x480 [ 284.723424][ T6261] i2cdev_ioctl_smbus+0x4a1/0x660 [ 284.728725][ T6261] compat_i2cdev_ioctl+0x48f/0xb40 [ 284.738678][ T6261] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 284.745949][ T6261] ia32_sys_call+0x2854/0x4360 [ 284.750951][ T6261] __do_fast_syscall_32+0x17f/0x3f0 [ 284.756561][ T6261] do_fast_syscall_32+0x37/0x80 [ 284.761708][ T6261] do_SYSENTER_32+0x1f/0x30 [ 284.766668][ T6261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.773530][ T6261] [ 284.776103][ T6261] Local variable msgbuf1.i created at: [ 284.782027][ T6261] __i2c_smbus_xfer+0x853/0x3120 [ 284.787373][ T6261] i2c_smbus_xfer+0x2d8/0x480 [ 284.792270][ T6261] [ 284.794848][ T6261] Byte 0 of 1 is uninitialized [ 284.799824][ T6261] Memory access of size 1 starts at ffff8880584bbc76 [ 284.807420][ T6261] Data copied to user address 0000000080000040 [ 284.813741][ T6261] [ 284.816301][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT(full) [ 284.825695][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.842368][ T6261] ===================================================== [ 284.851566][ T6261] Disabling lock debugging due to kernel taint [ 284.912906][ T5312] usb 1-1: Using ep0 maxpacket: 8 [ 284.944502][ T5312] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 284.977898][ T5312] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 285.012398][ T6261] Kernel panic - not syncing: kmsan.panic set ... [ 285.019028][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.3.93 Tainted: G B syzkaller #0 PREEMPT(full) [ 285.029932][ T6261] Tainted: [B]=BAD_PAGE [ 285.034293][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 285.044597][ T6261] Call Trace: [ 285.048004][ T6261] [ 285.051147][ T6261] __dump_stack+0x26/0x30 [ 285.055715][ T6261] dump_stack_lvl+0x50/0x1c0 [ 285.060513][ T6261] ? dump_stack+0x12/0x25 [ 285.065057][ T6261] dump_stack+0x1e/0x25 [ 285.069430][ T6261] vpanic+0x7b4/0x1430 [ 285.073752][ T6261] panic+0x15d/0x160 [ 285.077941][ T6261] kmsan_report+0x31a/0x320 [ 285.082700][ T6261] ? kmsan_internal_check_memory+0x1e8/0x240 [ 285.088934][ T6261] ? kmsan_copy_to_user+0xef/0x190 [ 285.094296][ T6261] ? _copy_to_user+0xcc/0x120 [ 285.099208][ T6261] ? i2cdev_ioctl_smbus+0x586/0x660 [ 285.105106][ T6261] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 285.110648][ T6261] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 285.116611][ T6261] ? ia32_sys_call+0x2854/0x4360 [ 285.121736][ T6261] ? __do_fast_syscall_32+0x17f/0x3f0 [ 285.127361][ T6261] ? do_fast_syscall_32+0x37/0x80 [ 285.132728][ T6261] ? do_SYSENTER_32+0x1f/0x30 [ 285.137644][ T6261] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.144380][ T6261] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 285.149932][ T6261] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 285.155463][ T6261] ? __i2c_transfer+0x1179/0x3280 [ 285.160804][ T6261] ? kmsan_get_metadata+0xf1/0x160 [ 285.166197][ T6261] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 285.172792][ T6261] ? kmsan_get_metadata+0xf1/0x160 [ 285.178096][ T6261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 285.184097][ T6261] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 285.189591][ T6261] ? kmsan_get_metadata+0xf1/0x160 [ 285.194898][ T6261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 285.201453][ T6261] kmsan_internal_check_memory+0x1e8/0x240 [ 285.207542][ T6261] kmsan_copy_to_user+0xef/0x190 [ 285.212721][ T6261] _copy_to_user+0xcc/0x120 [ 285.217501][ T6261] i2cdev_ioctl_smbus+0x586/0x660 [ 285.222814][ T6261] compat_i2cdev_ioctl+0x48f/0xb40 [ 285.228210][ T6261] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 285.234102][ T6261] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 285.240001][ T6261] ? fpregs_restore_userregs+0x213/0x3e0 [ 285.245915][ T6261] ? kmsan_get_metadata+0xf1/0x160 [ 285.251232][ T6261] ? kmsan_get_metadata+0xf1/0x160 [ 285.256572][ T6261] ia32_sys_call+0x2854/0x4360 [ 285.261550][ T6261] __do_fast_syscall_32+0x17f/0x3f0 [ 285.266979][ T6261] do_fast_syscall_32+0x37/0x80 [ 285.272133][ T6261] do_SYSENTER_32+0x1f/0x30 [ 285.276863][ T6261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.283421][ T6261] RIP: 0023:0xf706ef6c [ 285.287665][ T6261] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 285.307451][ T6261] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 285.316052][ T6261] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 285.324169][ T6261] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.332283][ T6261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.340468][ T6261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 285.348574][ T6261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.356742][ T6261] [ 285.360291][ T6261] Kernel Offset: disabled [ 285.364823][ T6261] Rebooting in 86400 seconds..