last executing test programs: 27.035873208s ago: executing program 2 (id=3138): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226}, 0x21) 26.116336727s ago: executing program 2 (id=3141): syz_open_dev$dri(0x0, 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080), 0x0, 0x0, 0xffcd, 0x1, 0x0, 0x34}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x14) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) read$msr(r1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000100)={0x5}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @local}, 0x1c) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000620000/0x2000)=nil, 0x2000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 21.368254725s ago: executing program 2 (id=3148): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500000076000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 20.462560784s ago: executing program 2 (id=3152): io_setup(0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) syz_clone(0x2c200200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x6) unshare(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000940)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8f22611607a37c667fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d", @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES64], 0x1, 0x668, &(0x7f0000000b00)="$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") 19.152289112s ago: executing program 2 (id=3155): socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) syz_io_uring_setup(0x4b15, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x400c4152, &(0x7f0000000300)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000800)={0x4}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001800168014000180100006"], 0x40}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002222000400000000000000031f95fae8ade7e036042a9011070200000083000000000b09007a150b5d8c"], 0x0}, 0x0) 15.884487611s ago: executing program 2 (id=3163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20009015) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 10.404784337s ago: executing program 4 (id=3175): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 9.728071993s ago: executing program 1 (id=3176): io_setup(0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) r0 = syz_clone(0x2c200200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) unshare(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000940)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8f22611607a37c667fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d", @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES64], 0x1, 0x668, &(0x7f0000000b00)="$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") 9.488347142s ago: executing program 4 (id=3177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) 8.888623425s ago: executing program 4 (id=3178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x20, 0xd, 0xa, 0xe01, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x60000000}, 0x0) 8.734072943s ago: executing program 1 (id=3179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b4ce", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) 8.612256489s ago: executing program 3 (id=3181): r0 = syz_usbip_server_init(0x3) socket$l2tp6(0xa, 0x2, 0x73) write(r0, &(0x7f0000000f40), 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x8201) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0xfffffff7, 0x40, 0x3800000, 0x1, 0x7, 0xffffffff, 0x80, 0x8}}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) 8.230854042s ago: executing program 4 (id=3182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x8011a3, 0x6) socket$inet6(0xa, 0x0, 0x9) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) 7.899655829s ago: executing program 1 (id=3183): bpf$MAP_CREATE(0x0, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 6.817351122s ago: executing program 3 (id=3186): unshare(0x22020400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226}, 0x21) 6.527889621s ago: executing program 0 (id=3187): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x4, &(0x7f0000000480)) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc98}]) r1 = socket$kcm(0x21, 0x0, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x34, r2, 0x2, 0x70bd28, 0x0, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x60, 0x0, 0x80000000, "7e02a288ffda35c93535e6653454fc5610e69ed678eecd56a20ac85f36822e1ecc351141258b30c4def891ef80a15e93269208f54eaeca901dd265d646bb9da9711195fecc992245d3f58cfa1474"}, {0xc0, 0x1, 0x9, "2ec04fe8629e6f9b288e75aae116a16d0df9ea077f562e527f697e859237f32b19c91d88b3b3d8d3e6db32a683044d88231b2002911c969897b3b07b2c4a0c754141853b1c8b2e57fb11b1ea58fff6acb51f5ec650ccfc3f6727e9a55e98e7f654fb72f53b5025371c9d9739e818086ca24bf37a979d45437fc8d95a4d7cf936064ea88aba35ee9dc4301e5c00d619f78f51792e2e86e74179a69fa810b30c5aa84d2e5a7ef200321de384f09d"}], 0x120}, 0x0) 5.463896895s ago: executing program 3 (id=3189): io_setup(0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) r0 = syz_clone(0x2c200200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) unshare(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000940)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8f22611607a37c667fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYBLOB="bfe49d", @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES64], 0x1, 0x668, &(0x7f0000000b00)="$eJzs3V1rG9kdx/HfyLLsuGUpbVlCyMNJ0gWHpookbxxECu10NLJnK2nEjNzaUFjSjb2EyNk2SaHxzZKbPsD2Dezd3iylL6LQ676LXhaW9q7QmynzJNmWZMmJ7Oxuvx8R62jmP3P+Z8aZP2NJMwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALKcRqVStdTyOlvbZjKnEfjtcTOKh9e2qFtp49aYrj4/0q9kxf+0vKyL6aSL3x3Ofjv+cUOX01eXtRw/LevgG29/6/53ioV8+RMSfhWKpBnWWcqSNObZi4PHD/r93adzTuRLQIUZgjbcjhf6XtvecI0X+qa+vl65s9kMTdMrKdwJe27bOIFb6PmBWXVumWq9vmbc8o6/1dlo2C03n3jvB7VKZd28t5Rt2TvvlUNn02u1vM5GEhPPjmPumU9+kYa4dtuYvUf93bVpScZB1VmCatOCapVarVqt1arrd+t371UqxZEJlWM0EjH3X1p8xczjsA3MRSGu//+wpJaW1dGWtmXGPhw1FMhXe8L8TF7/37njntjv4fqfV/mLw9mXlNT/q+mrq5Pq/4RcjEyywLg51oTpr/Z4phc60GM9UF997erpfNZ7bX4Znu1jQypKnkL58tSWrQ25MtkUo7rWta6K3temmgpl1JSnllyF2lGonly1k30SyJWdtGKrcnRLRlXVVdeajFyVtSNfW+poQw3Z+k8URXt6lGz3tRNyVB5UnSWodkLQpPr/y4/TrKfWf0vU/6+1/Pg1SwzwxkXZ+f8pXTubbAAAAAAAwFmwkr++W8l791ckRWp6LbfyptMCAAAAAABzlLzzfzl+WoxbV2RNOP+Pzj83AAAAAAAwH1byHTtL0kryoX5r+E2oWT4EsHAOKQIAAAAAgNeUvP9/tSRFybXXrsk61fk/AAAAAAD4CvjDoWvsF/Nr7Eb52/oFSWF3yfrrv5YULFovu9vfs/bteI69n8WMfAKg17xkvZVdqDd5KklKXjnuZetKGpRdBNNKL+wrfbE37Vr/VnAsgdJC/ueLaQmsF7NX+kTX05jrWb8PDwpK5qS9rDS9llt2/Nb9qmz7rULP3e795smj30rBYJx7j/q75Q8+6j9McnkZT3q5H+fx8ZF0CtNyea5sW1wZO+ILauZd/rHTXrGSfiv5+Bdk7xcOdzTb+H+nG2nMjZX0eeUg3wPJ+Jfj8VfLyS4bjj4e1ad/Ho6+enzk43bEhCyWkyxupjE3V2+mT3l+WRbfX5Bq5eP7oBT/Cg63Re1wFtO3hfXvkW0xJYt4W6zFWfwtXtHgPhfBkSzWTpfFyB4BgDdlb1iFkouYj15j/3jdfZWj3PTq/uOjvTz/NEq/cLggFbP3JgY9jq0rio/oq8m6VVJyYC1eGhxl96/nR/RKVleWNaztR47oldeobnFffxneAym7nc1IXflvFEX3q0m/fxr0m1bVz+IFPpvYb9iqLcQjvPN8/1fJBfBjH+5+uPukVltbr7xbqdytaTEZRvZE7QEAjDH9HjtTI6x3B2fVD//5Tto6UvG+PfhIQVkf6CP19VC381sIXBu/1pVDH0O4PXrWGsdekI7HVnV74lldUkvT2J/vlH6UBiU/F5UvcrRSD9e7dqb7AACA83ajnjUm1OFZ6v/t5Lxb0uqlQ+fd+b1cj9fy43cInlRzq+e2DQAA+H/jBl9YK73fW0Hgdd+v1utVu7fpmsB3fmoCr7HhGq/TcwNn0+5suKYb+D3f8VumG2jJa7ihCbe6XT/omaYfmK4fetum6bVck936PXTbdqfnOWG35dqhaxy/07Odnml4oWO6Wz9peeGmGyQLh13X8ZqeY/c8v2NCfytw3LIxoeseCvQabqfnNb242THdwGvbwY75md/aarum4YZO4HV7frrCvC+v0/SDdrLasqJT3+gQAICvo2cvDh4/6Pd3n05qJGf0U2KGjdK4FeZ98Y4zAABfDqNVeqLlc0kIAAAAAAAAAAAAAAAAAAAAAACMmP6VvlM2Fsd9WVAaTPn1WzOtx9L0mG/OPfm8UXj1xf9+QsyFwZR88x+OeXlmw5ncUNoozn/NF07ztdE5NH64l27RiTHxzLGzlgb7ojj//w5x48nnE2ZFURSdvPjS0W1YOmmARxtFSU9Lr7EL3szxCMD5+V8AAAD//5d7O+g=") 5.432100534s ago: executing program 0 (id=3190): socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) syz_io_uring_setup(0x4b15, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x400c4152, &(0x7f0000000300)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000800)={0x4}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001800168014000180100006"], 0x40}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002222000400000000000000031f95fae8ade7e036042a9011070200000083000000000b09007a150b5d8c"], 0x0}, 0x0) 2.771668379s ago: executing program 4 (id=3191): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 2.438655743s ago: executing program 1 (id=3192): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void, {0x8847}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 2.43837864s ago: executing program 3 (id=3193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b4ce", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) 2.182397066s ago: executing program 0 (id=3194): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000340)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 1.66421979s ago: executing program 0 (id=3195): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.329360762s ago: executing program 1 (id=3196): r0 = syz_usbip_server_init(0x3) socket$l2tp6(0xa, 0x2, 0x73) write(r0, &(0x7f0000000f40)="b410a1e825", 0x5) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x8201) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0xfffffff7, 0x40, 0x3800000, 0x1, 0x7, 0xffffffff, 0x80, 0x8}}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) 1.241109475s ago: executing program 3 (id=3197): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x9}, 0x20) 1.020146792s ago: executing program 0 (id=3198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) 287.805936ms ago: executing program 4 (id=3199): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 169.589349ms ago: executing program 0 (id=3200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081"], 0x44}}, 0x0) 50.727513ms ago: executing program 3 (id=3201): syz_pidfd_open(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES32], 0x36) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=3202): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): dpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1573.856876][ T5238] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1573.867138][ T5238] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1573.879078][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.952087][T16024] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1574.012286][ T5238] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1574.241148][T16032] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2736'. [ 1574.467377][ T5243] usb 4-1: USB disconnect, device number 60 [ 1577.440116][ T1495] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1577.688815][ T7852] Bluetooth: hci1: Malformed Event: 0x2f [ 1577.718001][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1577.730648][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.741052][ T1495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1577.754185][ T1495] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1577.767887][ T1495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.786921][ T1495] usb 4-1: config 0 descriptor?? [ 1578.042841][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1579.530663][ T1495] usbhid 4-1:0.0: can't add hid device: -71 [ 1579.537402][ T1495] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1579.620976][ T1495] usb 4-1: USB disconnect, device number 61 [ 1580.405324][T16072] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2748'. [ 1580.870495][ T1495] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1581.096894][ T1495] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1581.108577][ T1495] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1581.134340][ T1495] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1581.145193][ T1495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.227126][T16075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1581.278820][ T1495] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1581.587798][ T4677] usb 4-1: USB disconnect, device number 62 [ 1581.810097][ T1495] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1582.018114][ T1495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.030665][ T1495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.040733][ T1495] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1582.053875][ T1495] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1582.070007][ T1495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.184223][ T1495] usb 2-1: config 0 descriptor?? [ 1582.870308][ T1495] waltop 0003:172F:0038.000F: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0 [ 1583.109722][ T4677] usb 2-1: USB disconnect, device number 62 [ 1583.570246][T16114] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1584.300223][ T1495] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1584.586589][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1584.598098][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.608685][ T1495] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1584.626457][ T1495] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1584.638775][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.695912][ T1495] usb 1-1: config 0 descriptor?? [ 1585.006178][T16116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1585.126224][T16131] fuse: Unknown parameter 'fd18446744073709551615' [ 1585.803549][T16134] loop3: detected capacity change from 0 to 512 [ 1585.974655][T16134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1585.989664][T16134] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.101746][ T4553] Bluetooth: hci10: unexpected event for opcode 0x2010 [ 1586.111420][ T1495] usbhid 1-1:0.0: can't add hid device: -71 [ 1586.118209][ T1495] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1586.132228][ T1495] usb 1-1: USB disconnect, device number 51 [ 1586.742520][T15379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1588.162943][ T1495] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1588.170702][T10700] Bluetooth: hci9: command 0x0406 tx timeout [ 1588.455314][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.466777][ T1495] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.476928][ T1495] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1588.490448][ T1495] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1588.499896][ T1495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.540652][ T1495] usb 1-1: config 0 descriptor?? [ 1589.075098][ T1495] waltop 0003:172F:0038.0010: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.0-1/input0 [ 1589.239696][T16170] loop4: detected capacity change from 0 to 512 [ 1589.375131][ T4677] usb 1-1: USB disconnect, device number 52 [ 1589.385794][T16170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1589.399821][T16170] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.250581][ T1495] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1590.500663][T15444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1590.604935][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1590.618053][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.628965][ T1495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1590.643491][ T1495] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1590.652950][ T1495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.673894][ T1495] usb 4-1: config 0 descriptor?? [ 1591.005423][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 1591.376800][ T5241] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1591.861599][ T5241] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1591.871183][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.879556][ T5241] usb 2-1: Product: syz [ 1591.883950][ T5241] usb 2-1: Manufacturer: syz [ 1591.888818][ T5241] usb 2-1: SerialNumber: syz [ 1591.906721][ T1495] usbhid 4-1:0.0: can't add hid device: -71 [ 1591.913598][ T1495] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1591.927412][ T5241] usb 2-1: config 0 descriptor?? [ 1591.934301][ T1495] usb 4-1: USB disconnect, device number 63 [ 1593.004167][ T5241] usb 2-1: Firmware version (0.0) predates our first public release. [ 1593.012791][ T5241] usb 2-1: Please update to version 0.2 or newer [ 1593.236961][ T5241] usb 2-1: USB disconnect, device number 63 [ 1593.749885][ T4677] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1594.032262][ T4677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.045387][ T4677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.056155][ T4677] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1594.069608][ T4677] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 1594.078950][ T4677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.111778][ T4677] usb 5-1: config 0 descriptor?? [ 1594.272663][T16222] loop1: detected capacity change from 0 to 512 [ 1594.404766][T16222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1594.418334][T16222] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.578636][ T7852] Bluetooth: hci9: unexpected event for opcode 0x2010 [ 1594.641675][ T4677] waltop 0003:172F:0038.0011: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0 [ 1594.877820][ T5238] usb 5-1: USB disconnect, device number 43 [ 1595.129755][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1597.441502][ T5238] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1597.666572][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1597.678201][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.688444][ T5238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1597.702425][ T5238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1597.712868][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.771991][ T5238] usb 5-1: config 0 descriptor?? [ 1598.005497][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 1598.290269][ T1495] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1598.478257][ T5238] usbhid 5-1:0.0: can't add hid device: -71 [ 1598.485148][ T5238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1598.519213][ T5238] usb 5-1: USB disconnect, device number 44 [ 1598.578138][ T1495] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1598.587804][ T1495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.596163][ T1495] usb 2-1: Product: syz [ 1598.600688][ T1495] usb 2-1: Manufacturer: syz [ 1598.605564][ T1495] usb 2-1: SerialNumber: syz [ 1598.656993][ T1495] usb 2-1: config 0 descriptor?? [ 1599.724157][ T1495] usb 2-1: Firmware version (0.0) predates our first public release. [ 1599.732718][ T1495] usb 2-1: Please update to version 0.2 or newer [ 1599.913239][ T1495] usb 2-1: USB disconnect, device number 64 [ 1601.271101][T16138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1601.307944][T16138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1601.330818][T16138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1601.378603][T16138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1601.390407][T16138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1601.409590][T16138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1602.741528][T16282] chnl_net:caif_netlink_parms(): no params data found [ 1603.280864][ T1495] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1603.409129][T16306] loop4: detected capacity change from 0 to 512 [ 1603.521397][ T7852] Bluetooth: hci3: command tx timeout [ 1603.558491][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1603.576939][ T1495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.588320][ T1495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1603.601419][ T1495] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1603.611004][ T1495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.641545][ T1495] usb 4-1: config 0 descriptor?? [ 1603.698249][T16306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1603.711444][T16306] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.998049][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1604.613519][T15444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1604.678514][T16282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.687133][T16282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.698005][T16282] bridge_slave_0: entered allmulticast mode [ 1604.706989][T16282] bridge_slave_0: entered promiscuous mode [ 1604.724093][T16282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.732358][T16282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.740610][T16282] bridge_slave_1: entered allmulticast mode [ 1604.751607][T16282] bridge_slave_1: entered promiscuous mode [ 1605.186545][T16282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1605.317212][T16282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.592936][T16282] team0: Port device team_slave_0 added [ 1605.605611][ T7852] Bluetooth: hci3: command tx timeout [ 1605.725162][T16282] team0: Port device team_slave_1 added [ 1605.805095][ T4677] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1606.000116][T16282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.007391][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.036147][T16282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.121215][ T1495] usbhid 4-1:0.0: can't add hid device: -71 [ 1606.137571][ T1495] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1606.172089][ T4677] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1606.181513][ T4677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.189957][ T4677] usb 1-1: Product: syz [ 1606.194248][ T4677] usb 1-1: Manufacturer: syz [ 1606.198959][ T4677] usb 1-1: SerialNumber: syz [ 1606.262896][ T1495] usb 4-1: USB disconnect, device number 64 [ 1606.279795][T16282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.287075][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.313529][T16282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.343987][ T4677] usb 1-1: config 0 descriptor?? [ 1606.854499][T16282] hsr_slave_0: entered promiscuous mode [ 1606.921868][T16282] hsr_slave_1: entered promiscuous mode [ 1606.960224][T16282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1606.968208][T16282] Cannot create hsr debugfs directory [ 1607.228000][ T4677] usb 1-1: Firmware version (0.0) predates our first public release. [ 1607.237153][ T4677] usb 1-1: Please update to version 0.2 or newer [ 1607.506383][T16340] loop1: detected capacity change from 0 to 512 [ 1607.510376][ T4677] usb 1-1: USB disconnect, device number 53 [ 1607.658177][T16340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1607.679826][T16138] Bluetooth: hci3: command tx timeout [ 1607.683468][T16340] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.912243][T16138] Bluetooth: hci9: unexpected event for opcode 0x2010 [ 1608.344616][T16282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.642756][T16138] Bluetooth: hci0: command 0x0406 tx timeout [ 1608.698585][T16282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.723675][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1608.998842][T16282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.222497][T16282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.570484][ T5243] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1609.755317][T16282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1609.765313][ T7852] Bluetooth: hci3: command tx timeout [ 1609.895198][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1609.906880][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.922551][ T5243] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1609.938136][ T5243] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1609.947278][T16282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1609.954732][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.025421][ T5243] usb 4-1: config 0 descriptor?? [ 1610.032105][T16282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1610.172986][T16282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1610.410469][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1611.090870][ T5241] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1611.441425][ T5241] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1611.464281][ T5241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.473082][ T5241] usb 2-1: Product: syz [ 1611.477931][ T5241] usb 2-1: Manufacturer: syz [ 1611.483262][ T5241] usb 2-1: SerialNumber: syz [ 1611.547794][ T5241] usb 2-1: config 0 descriptor?? [ 1611.876482][ T5243] usbhid 4-1:0.0: can't add hid device: -71 [ 1611.885317][ T5243] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1612.000253][ T5243] usb 4-1: USB disconnect, device number 65 [ 1612.297123][T16282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.457899][ T5241] usb 2-1: Firmware version (0.0) predates our first public release. [ 1612.467989][ T5241] usb 2-1: Please update to version 0.2 or newer [ 1612.597129][ T5241] usb 2-1: USB disconnect, device number 65 [ 1612.602925][T16282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.715245][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.723158][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.798463][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.806212][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1614.377872][T16415] serio: Serial port pts0 [ 1614.549915][ T5243] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1614.823467][ T5243] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1614.842531][ T5243] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1614.855909][ T5243] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1614.866970][ T5243] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1614.876659][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.980028][ T5243] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1615.119695][T16282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1615.351136][ T5243] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1615.458620][ T5243] usb 4-1: USB disconnect, device number 66 [ 1615.717961][T16282] veth0_vlan: entered promiscuous mode [ 1615.805854][T16282] veth1_vlan: entered promiscuous mode [ 1616.113072][T16282] veth0_macvtap: entered promiscuous mode [ 1616.154402][T16282] veth1_macvtap: entered promiscuous mode [ 1616.373424][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.384324][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.394452][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.405205][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.416844][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.428133][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.438380][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.449089][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.459201][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.478260][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.496023][T16282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.867770][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.881787][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.892427][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.903129][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.913167][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.923813][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.933866][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.944480][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.955177][T16282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.965924][T16282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.983563][T16282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.164934][T16282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.173960][T16282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.185300][T16282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.195159][T16282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.311527][ T5241] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1617.410598][ T4677] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1617.581464][ T5241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1617.599865][ T5241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.613207][ T5241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1617.626544][ T5241] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1617.636043][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.709166][ T5241] usb 4-1: config 0 descriptor?? [ 1617.731844][ T4677] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1617.741337][ T4677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.749717][ T4677] usb 1-1: Product: syz [ 1617.754161][ T4677] usb 1-1: Manufacturer: syz [ 1617.758996][ T4677] usb 1-1: SerialNumber: syz [ 1617.858372][ T4677] usb 1-1: config 0 descriptor?? [ 1618.024171][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'. [ 1618.474645][T16457] loop1: detected capacity change from 0 to 512 [ 1618.742553][T16457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.757152][T16457] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.863329][ T4677] usb 1-1: Firmware version (0.0) predates our first public release. [ 1618.873130][ T4677] usb 1-1: Please update to version 0.2 or newer [ 1619.220669][ T4677] usb 1-1: USB disconnect, device number 54 [ 1620.065460][ T5241] usbhid 4-1:0.0: can't add hid device: -71 [ 1620.072133][ T5241] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1620.122100][ T5241] usb 4-1: USB disconnect, device number 67 [ 1620.248628][T16475] : renamed from ipvlan1 [ 1620.268273][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.450136][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1620.695973][ T10] usb 5-1: config 0 has no interfaces? [ 1620.771560][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1620.781231][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.789751][ T10] usb 5-1: Product: syz [ 1620.794140][ T10] usb 5-1: Manufacturer: syz [ 1620.798960][ T10] usb 5-1: SerialNumber: syz [ 1620.861516][ T10] usb 5-1: config 0 descriptor?? [ 1621.131774][ T4677] usb 5-1: USB disconnect, device number 45 [ 1623.108149][ T5238] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1623.424934][ T5238] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1623.436207][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.445181][ T5238] usb 2-1: Product: syz [ 1623.449708][ T5238] usb 2-1: Manufacturer: syz [ 1623.454592][ T5238] usb 2-1: SerialNumber: syz [ 1623.500461][ T5238] usb 2-1: config 0 descriptor?? [ 1623.870084][ T5241] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1624.005413][T16138] Bluetooth: hci1: command 0x0406 tx timeout [ 1624.126905][ T5241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1624.138348][ T5241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.154904][ T5241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1624.171545][ T5241] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1624.181253][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.211204][ T5241] usb 4-1: config 0 descriptor?? [ 1624.489392][ T5238] usb 2-1: Firmware version (0.0) predates our first public release. [ 1624.499722][ T5238] usb 2-1: Please update to version 0.2 or newer [ 1624.521677][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1624.743429][ T5238] usb 2-1: USB disconnect, device number 66 [ 1626.061792][T16525] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1626.068616][T16525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1626.076820][T16525] vhci_hcd vhci_hcd.0: Device attached [ 1626.171683][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.179997][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.245593][T16526] vhci_hcd: connection closed [ 1626.247062][ T1263] vhci_hcd: stop threads [ 1626.256416][ T1263] vhci_hcd: release socket [ 1626.261151][ T1263] vhci_hcd: disconnect device [ 1626.285919][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.294173][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.781071][ T5241] usbhid 4-1:0.0: can't add hid device: -71 [ 1626.787822][ T5241] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1626.856359][ T5241] usb 4-1: USB disconnect, device number 68 [ 1628.227004][T16538] 9pnet: Could not find request transport: fd0x0000000000000008 [ 1629.299935][ T5241] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1629.591711][ T5241] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1629.601838][ T5241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.610785][ T5241] usb 4-1: Product: syz [ 1629.615080][ T5241] usb 4-1: Manufacturer: syz [ 1629.619904][ T5241] usb 4-1: SerialNumber: syz [ 1629.706375][ T5241] usb 4-1: config 0 descriptor?? [ 1630.253175][T16567] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1630.259973][T16567] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1630.268223][T16567] vhci_hcd vhci_hcd.0: Device attached [ 1630.354545][ T5243] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1630.492940][T16568] vhci_hcd: connection closed [ 1630.493977][ T4154] vhci_hcd: stop threads [ 1630.516633][ T4154] vhci_hcd: release socket [ 1630.521372][ T4154] vhci_hcd: disconnect device [ 1630.561753][ T5238] vhci_hcd: vhci_device speed not set [ 1630.642784][ T5241] usb 4-1: Firmware version (0.0) predates our first public release. [ 1630.651515][ T5241] usb 4-1: Please update to version 0.2 or newer [ 1630.727282][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1630.738766][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.748922][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1630.762053][ T5243] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1630.771558][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.828578][ T5243] usb 2-1: config 0 descriptor?? [ 1630.916070][ T5241] usb 4-1: USB disconnect, device number 69 [ 1631.094111][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'. [ 1632.272522][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1632.279180][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1632.379928][T16576] bridge0: port 3(vlan2) entered blocking state [ 1632.386904][T16576] bridge0: port 3(vlan2) entered disabled state [ 1632.394146][T16576] vlan2: entered allmulticast mode [ 1632.591905][T16576] vlan2: left allmulticast mode [ 1633.254042][ T5243] usbhid 2-1:0.0: can't add hid device: -71 [ 1633.271053][ T5243] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1633.350431][ T5243] usb 2-1: USB disconnect, device number 67 [ 1635.017228][ T7852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1635.039665][ T7852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1635.055384][ T7852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1635.124330][ T7852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1635.137591][ T7852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1635.146842][ T7852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1635.180046][ T5243] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1635.247929][T16604] loop2: detected capacity change from 0 to 512 [ 1635.504057][T16609] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1635.510877][T16609] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1635.522436][T16609] vhci_hcd vhci_hcd.0: Device attached [ 1635.572209][T16610] vhci_hcd: connection closed [ 1635.579023][ T1263] vhci_hcd: stop threads [ 1635.588925][ T1263] vhci_hcd: release socket [ 1635.593648][ T1263] vhci_hcd: disconnect device [ 1635.650045][ T5243] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1635.659403][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.667798][ T5243] usb 1-1: Product: syz [ 1635.673184][ T5243] usb 1-1: Manufacturer: syz [ 1635.679278][ T5243] usb 1-1: SerialNumber: syz [ 1635.693145][ T5243] usb 1-1: config 0 descriptor?? [ 1635.801830][T16604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1635.815345][T16604] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1636.280965][T16618] loop3: detected capacity change from 0 to 512 [ 1636.450406][T16602] chnl_net:caif_netlink_parms(): no params data found [ 1636.532393][T16618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1636.560068][T16618] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1636.666587][T16282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1636.721282][ T5243] usb 1-1: Firmware version (0.0) predates our first public release. [ 1636.729827][ T5243] usb 1-1: Please update to version 0.2 or newer [ 1636.874472][T16618] bridge0: port 3(vlan2) entered blocking state [ 1636.881348][T16618] bridge0: port 3(vlan2) entered disabled state [ 1636.888202][T16618] vlan2: entered allmulticast mode [ 1636.938589][ T5243] usb 1-1: USB disconnect, device number 55 [ 1636.964441][T16618] vlan2: left allmulticast mode [ 1637.297437][ T7852] Bluetooth: hci4: command tx timeout [ 1637.621696][T15379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.705381][ T5241] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1638.026520][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1638.038296][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.048389][ T5241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1638.061542][ T5241] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1638.071180][ T5241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.209165][ T5241] usb 2-1: config 0 descriptor?? [ 1638.264530][T16634] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2905'. [ 1638.862518][T16602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.871511][T16602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.879336][T16602] bridge_slave_0: entered allmulticast mode [ 1638.888941][T16602] bridge_slave_0: entered promiscuous mode [ 1638.917430][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1639.243510][T16602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.255141][T16602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.267363][T16602] bridge_slave_1: entered allmulticast mode [ 1639.278156][T16602] bridge_slave_1: entered promiscuous mode [ 1639.369798][ T7852] Bluetooth: hci4: command tx timeout [ 1639.468030][T16602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.604758][T16602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.710397][ T5241] usbhid 2-1:0.0: can't add hid device: -71 [ 1639.727329][ T5241] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1639.760574][ T5241] usb 2-1: USB disconnect, device number 68 [ 1639.976235][T16602] team0: Port device team_slave_0 added [ 1640.063742][T16602] team0: Port device team_slave_1 added [ 1640.302188][T16602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.309327][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.343502][T16602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.491975][T16602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.499151][T16602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.525726][T16602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.163650][T16602] hsr_slave_0: entered promiscuous mode [ 1641.220100][T16602] hsr_slave_1: entered promiscuous mode [ 1641.259668][T16602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1641.267591][T16602] Cannot create hsr debugfs directory [ 1641.321555][T16649] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1641.464864][ T7852] Bluetooth: hci4: command tx timeout [ 1641.808840][T16653] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1641.815666][T16653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1641.823831][T16653] vhci_hcd vhci_hcd.0: Device attached [ 1642.099928][ T5238] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 1642.103178][T16654] vhci_hcd: connection closed [ 1642.109176][ T4154] vhci_hcd: stop threads [ 1642.118564][ T4154] vhci_hcd: release socket [ 1642.124707][ T4154] vhci_hcd: disconnect device [ 1642.236959][T16658] loop1: detected capacity change from 0 to 512 [ 1642.387649][T16602] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.617181][T16602] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.663570][T16658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1642.676936][T16658] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.823857][T16602] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.862954][T16660] loop2: detected capacity change from 0 to 512 [ 1643.145737][T16602] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.261818][T16658] bridge0: port 3(vlan2) entered blocking state [ 1643.268628][T16658] bridge0: port 3(vlan2) entered disabled state [ 1643.275707][T16658] vlan2: entered allmulticast mode [ 1643.374786][T16658] vlan2: left allmulticast mode [ 1643.524524][T16138] Bluetooth: hci4: command tx timeout [ 1643.547343][T16660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1643.561703][T16660] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1643.729725][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1643.978680][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.069352][T16671] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1644.136210][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1644.145669][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.153901][ T10] usb 1-1: Product: syz [ 1644.158179][ T10] usb 1-1: Manufacturer: syz [ 1644.163561][ T10] usb 1-1: SerialNumber: syz [ 1644.173295][T16602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1644.211553][ T10] usb 1-1: config 0 descriptor?? [ 1644.233783][T16602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1644.336496][T16602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1644.401295][T16282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1644.411575][T16602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1644.479740][T16138] Bluetooth: hci2: command 0x0406 tx timeout [ 1645.388289][ T10] usb 1-1: Firmware version (0.0) predates our first public release. [ 1645.397942][ T10] usb 1-1: Please update to version 0.2 or newer [ 1645.615969][ T10] usb 1-1: USB disconnect, device number 56 [ 1646.049759][ T4677] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1646.344818][T16602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.444287][ T4677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1646.456233][ T4677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.466558][ T4677] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1646.481791][ T4677] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1646.491743][ T4677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.612227][ T4677] usb 4-1: config 0 descriptor?? [ 1646.748881][T16602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.874365][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.882183][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.930925][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 1647.001306][T16689] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1647.129078][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.136798][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.310618][ T5238] vhci_hcd: vhci_device speed not set [ 1648.368796][T16695] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1649.465482][ T4677] usbhid 4-1:0.0: can't add hid device: -71 [ 1649.472373][ T4677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1649.591631][ T4677] usb 4-1: USB disconnect, device number 70 [ 1650.637463][ T7852] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1650.657180][T16602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.109990][T16716] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2930'. [ 1651.900946][ T5238] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1652.184324][T16724] loop3: detected capacity change from 0 to 1024 [ 1652.236555][ T5238] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1652.246090][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.254675][ T5238] usb 2-1: Product: syz [ 1652.259074][ T5238] usb 2-1: Manufacturer: syz [ 1652.264016][ T5238] usb 2-1: SerialNumber: syz [ 1652.291711][T16724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1652.393760][ T5238] usb 2-1: config 0 descriptor?? [ 1652.984514][T16733] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1653.608114][ T5238] usb 2-1: Firmware version (0.0) predates our first public release. [ 1653.616783][ T5238] usb 2-1: Please update to version 0.2 or newer [ 1653.784769][ T5238] usb 2-1: USB disconnect, device number 69 [ 1653.808582][T16738] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1654.206528][T16602] veth0_vlan: entered promiscuous mode [ 1654.324920][T16602] veth1_vlan: entered promiscuous mode [ 1654.864213][T16602] veth0_macvtap: entered promiscuous mode [ 1655.026200][T16602] veth1_macvtap: entered promiscuous mode [ 1655.181747][ T5244] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1655.307231][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.318194][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.328210][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.338825][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.348824][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.361785][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.372168][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.388058][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.399587][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.410171][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.420139][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1655.430800][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.446371][T16602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1655.506442][ T7852] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1655.632925][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1655.644686][ T5244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.651396][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1655.654748][ T5244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1655.665225][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.678221][ T5244] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1655.692692][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1655.692790][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.692886][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1655.692977][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.693062][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1655.693149][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.693232][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1655.693321][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.693400][T16602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1655.693487][T16602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1655.700452][T16602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1655.706097][ T5244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.026158][ T5244] usb 3-1: config 0 descriptor?? [ 1656.101067][T16751] netlink: 'syz.3.2941': attribute type 10 has an invalid length. [ 1656.168296][T16753] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2942'. [ 1656.196105][T16751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.216149][T16751] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1656.335122][T16602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.345269][T16602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.354468][T16602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.363597][T16602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.485536][T16742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1658.624525][T16766] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1658.807507][ T4421] bridge_slave_1: left allmulticast mode [ 1658.814514][ T4421] bridge_slave_1: left promiscuous mode [ 1658.821249][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.829921][ T5244] usbhid 3-1:0.0: can't add hid device: -71 [ 1658.836518][ T5244] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1658.925364][ T5244] usb 3-1: USB disconnect, device number 52 [ 1658.990438][ T4421] bridge_slave_0: left allmulticast mode [ 1658.996340][ T4421] bridge_slave_0: left promiscuous mode [ 1659.004147][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.543852][T16769] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1659.801344][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.905422][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.982080][ T4421] bond0 (unregistering): Released all slaves [ 1660.757174][T16780] loop1: detected capacity change from 0 to 512 [ 1660.971983][ T4421] hsr_slave_0: left promiscuous mode [ 1660.991877][T16780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1661.006845][T16780] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1661.050567][ T4421] hsr_slave_1: left promiscuous mode [ 1661.105336][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.118897][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.171918][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.180041][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.222466][ T7852] Bluetooth: hci9: unexpected event for opcode 0x2010 [ 1661.280272][ T4421] veth1_macvtap: left promiscuous mode [ 1661.286031][ T4421] veth0_macvtap: left promiscuous mode [ 1661.292196][ T4421] veth1_vlan: left promiscuous mode [ 1661.297604][ T4421] veth0_vlan: left promiscuous mode [ 1661.821354][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1662.352735][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 1662.442205][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 1664.024972][T16805] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2959'. [ 1664.049832][T16804] loop2: detected capacity change from 0 to 64 [ 1664.431987][ C1] eth0: bad gso: type: 1, size: 1408 [ 1664.809772][ T5244] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1665.064414][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1665.075765][ T5244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.085911][ T5244] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1665.099102][ T5244] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1665.112296][ T5244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.201470][ T5244] usb 2-1: config 0 descriptor?? [ 1665.567065][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1665.682803][T16815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1665.689602][T16815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1665.698069][T16815] vhci_hcd vhci_hcd.0: Device attached [ 1665.920497][T16817] vhci_hcd: connection closed [ 1665.921820][ T1263] vhci_hcd: stop threads [ 1665.934245][ T1263] vhci_hcd: release socket [ 1665.938863][ T1263] vhci_hcd: disconnect device [ 1666.015311][ T5238] vhci_hcd: vhci_device speed not set [ 1667.653685][ T5244] usbhid 2-1:0.0: can't add hid device: -71 [ 1667.660321][ T5244] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1667.750828][ T5244] usb 2-1: USB disconnect, device number 70 [ 1667.783656][T16834] loop2: detected capacity change from 0 to 64 [ 1667.868534][T16834] hfs: unable to locate alternate MDB [ 1667.884884][T16834] hfs: continuing without an alternate MDB [ 1668.271673][T16840] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1668.751182][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.759362][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.014634][ T4154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.022861][ T4154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.576583][T16847] loop1: detected capacity change from 0 to 16 [ 1669.604597][T16847] erofs: (device loop1): mounted with root inode @ nid 36. [ 1671.212170][T16858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1671.218990][T16858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1671.227405][T16858] vhci_hcd vhci_hcd.0: Device attached [ 1671.311284][T16859] vhci_hcd: connection closed [ 1671.315939][ T59] vhci_hcd: stop threads [ 1671.325888][ T59] vhci_hcd: release socket [ 1671.330615][ T59] vhci_hcd: disconnect device [ 1671.989846][ T5244] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1672.345279][ T5244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1672.357370][ T5244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.367685][ T5244] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1672.387613][ T5244] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1672.400507][ T5244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.498326][ T5244] usb 1-1: config 0 descriptor?? [ 1672.872099][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1672.945397][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'. [ 1673.362274][T16874] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1673.732184][ T5244] usbhid 1-1:0.0: can't add hid device: -71 [ 1673.739001][ T5244] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1673.806158][ T5244] usb 1-1: USB disconnect, device number 57 [ 1674.103484][T16882] loop1: detected capacity change from 0 to 512 [ 1674.153654][T16880] loop2: detected capacity change from 0 to 1024 [ 1674.179670][T16882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1674.193219][T16882] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1674.211913][T16880] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1674.356470][T16880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.722721][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1674.878986][T16282] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.969167][T16892] loop3: detected capacity change from 0 to 512 [ 1675.000357][T16892] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2991: invalid block [ 1675.097625][T16892] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2991: invalid indirect mapped block 4294967295 (level 1) [ 1675.236567][T16892] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2991: invalid indirect mapped block 4294967295 (level 1) [ 1675.321541][T16892] EXT4-fs (loop3): 2 truncates cleaned up [ 1675.328606][T16892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1675.434318][T16899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1675.441142][T16899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1675.452954][T16899] vhci_hcd vhci_hcd.0: Device attached [ 1675.572650][T16904] loop2: detected capacity change from 0 to 64 [ 1675.613328][T16904] hfs: unable to locate alternate MDB [ 1675.618835][T16904] hfs: continuing without an alternate MDB [ 1675.626113][T16900] vhci_hcd: connection closed [ 1675.633630][ T4421] vhci_hcd: stop threads [ 1675.643076][ T4421] vhci_hcd: release socket [ 1675.647752][ T4421] vhci_hcd: disconnect device [ 1675.662265][ T5238] vhci_hcd: vhci_device speed not set [ 1675.801857][T15379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.513074][T16912] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2999'. [ 1677.158381][ T7852] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1678.570055][ T5244] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1678.890168][ T5244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1678.901657][ T5244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.912717][ T5244] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1678.926014][ T5244] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1678.939184][ T5244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.024567][ T5244] usb 1-1: config 0 descriptor?? [ 1679.570940][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1679.641040][ T4154] bridge_slave_1: left allmulticast mode [ 1679.651980][ T4154] bridge_slave_1: left promiscuous mode [ 1679.658543][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.747656][ T4154] bridge_slave_0: left allmulticast mode [ 1679.759176][ T4154] bridge_slave_0: left promiscuous mode [ 1679.765900][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.611526][T16939] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1680.618337][T16939] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1680.626895][T16939] vhci_hcd vhci_hcd.0: Device attached [ 1680.704555][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.851105][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.937624][ T4154] bond0 (unregistering): Released all slaves [ 1680.998252][T16944] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3012'. [ 1681.075131][ T5243] usb 15-1: new high-speed USB device number 4 using vhci_hcd [ 1681.109158][T16940] vhci_hcd: connection reset by peer [ 1681.121914][ T59] vhci_hcd: stop threads [ 1681.126432][ T59] vhci_hcd: release socket [ 1681.132022][ T59] vhci_hcd: disconnect device [ 1681.261320][ T5244] usbhid 1-1:0.0: can't add hid device: -71 [ 1681.268088][ T5244] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1681.329090][ T5244] usb 1-1: USB disconnect, device number 58 [ 1681.572484][ T7852] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1681.966650][ T4154] hsr_slave_0: left promiscuous mode [ 1682.012130][ T4154] hsr_slave_1: left promiscuous mode [ 1682.048700][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.056858][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.072205][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.080463][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.141684][ T4154] veth1_macvtap: left promiscuous mode [ 1682.147583][ T4154] veth0_macvtap: left promiscuous mode [ 1682.154146][ T4154] veth1_vlan: left promiscuous mode [ 1682.159882][ T4154] veth0_vlan: left promiscuous mode [ 1683.168036][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 1683.306805][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 1683.600423][ T5238] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1684.066961][ T5238] usb 5-1: device not accepting address 46, error -71 [ 1684.840310][T16973] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3025'. [ 1685.230366][T14246] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1685.463195][T14246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1685.474739][T14246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.488665][T14246] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1685.503023][T14246] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1685.512509][T14246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.576864][T14246] usb 4-1: config 0 descriptor?? [ 1685.810722][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1686.302420][ T5243] vhci_hcd: vhci_device speed not set [ 1686.504030][T16978] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1686.510842][T16978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1686.526478][T16978] vhci_hcd vhci_hcd.0: Device attached [ 1686.645559][T16980] vhci_hcd: connection closed [ 1686.647635][ T4421] vhci_hcd: stop threads [ 1686.657446][ T4421] vhci_hcd: release socket [ 1686.662133][ T4421] vhci_hcd: disconnect device [ 1686.719758][ T7852] Bluetooth: hci9: unexpected event for opcode 0x2010 [ 1687.070466][T14246] usbhid 4-1:0.0: can't add hid device: -71 [ 1687.077217][T14246] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1687.153460][T14246] usb 4-1: USB disconnect, device number 71 [ 1688.125805][T16997] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3036'. [ 1688.220304][T16996] loop3: detected capacity change from 0 to 512 [ 1689.108932][T17008] loop1: detected capacity change from 0 to 512 [ 1689.253123][T17008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1689.266692][T17008] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.349825][T17013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1689.356649][T17013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1689.364894][T17013] vhci_hcd vhci_hcd.0: Device attached [ 1689.425981][T17014] vhci_hcd: connection closed [ 1689.431671][ T4154] vhci_hcd: stop threads [ 1689.441333][ T4154] vhci_hcd: release socket [ 1689.446060][ T4154] vhci_hcd: disconnect device [ 1689.627040][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1690.157853][T17022] loop1: detected capacity change from 0 to 256 [ 1691.019961][ T5238] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1691.067222][T17034] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3049'. [ 1691.315230][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1691.330046][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.341432][ T5238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1691.354709][ T5238] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1691.364192][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.451745][ T5238] usb 5-1: config 0 descriptor?? [ 1691.791841][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1692.700027][T17046] loop2: detected capacity change from 0 to 512 [ 1693.599206][ T5238] usbhid 5-1:0.0: can't add hid device: -71 [ 1693.606091][ T5238] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1693.631214][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1693.638190][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1693.690789][ T5238] usb 5-1: USB disconnect, device number 48 [ 1693.766508][T17050] loop1: detected capacity change from 0 to 512 [ 1693.941934][T17050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1693.955179][T17050] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1694.109976][ T29] audit: type=1326 audit(1722490107.437:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17053 comm="syz.4.3056" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 1694.318073][T15377] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1694.639306][T17057] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1694.646134][T17057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1694.654356][T17057] vhci_hcd vhci_hcd.0: Device attached [ 1694.772639][T17058] vhci_hcd: connection closed [ 1694.782751][ T4154] vhci_hcd: stop threads [ 1694.792197][ T4154] vhci_hcd: release socket [ 1694.796789][ T4154] vhci_hcd: disconnect device [ 1695.366276][T17063] loop4: detected capacity change from 0 to 512 [ 1696.636203][T17071] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3061'. [ 1697.668278][T17076] loop1: detected capacity change from 0 to 128 [ 1697.706871][T17076] vfat: Unknown parameter '_S[] ʆBLU5;iN[S41\ՃTƉ0WओUE`UW.P5' [ 1697.834272][ T29] audit: type=1326 audit(1722490111.207:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.1.3063" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x0 [ 1699.584106][T16138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1699.593667][T16138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1699.602959][T16138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1699.687534][T16138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1699.698494][T16138] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1699.750302][T16138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1699.940873][ T7852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1699.980214][ T7852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1699.990016][ T7852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1700.003711][ T7852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1700.015182][ T7852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1700.031498][ T7852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1700.063907][ T5238] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1700.357674][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1700.369244][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.379338][ T5238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1700.392669][ T5238] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1700.402103][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.572253][ T5238] usb 2-1: config 0 descriptor?? [ 1701.011056][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 1701.540063][ T5238] usbhid 2-1:0.0: can't add hid device: -71 [ 1701.546712][ T5238] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1701.600820][ T5238] usb 2-1: USB disconnect, device number 71 [ 1701.738876][T17088] chnl_net:caif_netlink_parms(): no params data found [ 1701.842251][ T7852] Bluetooth: hci0: command tx timeout [ 1701.853206][T17085] chnl_net:caif_netlink_parms(): no params data found [ 1702.083292][ T7852] Bluetooth: hci1: command tx timeout [ 1702.743733][ T4154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.865023][ T29] audit: type=1326 audit(1722490116.207:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17101 comm="syz.1.3068" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x0 [ 1702.975249][ T4154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.258204][ T4154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.496865][ T4154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.674018][T16138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1703.695294][T16138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1703.747946][T16138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1703.806155][T16138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1703.837643][T16138] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1703.849274][T16138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1703.924619][ T7852] Bluetooth: hci0: command tx timeout [ 1703.994830][T17088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.002969][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.010886][T17088] bridge_slave_0: entered allmulticast mode [ 1704.025964][T17088] bridge_slave_0: entered promiscuous mode [ 1704.088194][T17085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.096251][T17085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.104262][T17085] bridge_slave_0: entered allmulticast mode [ 1704.113468][T17085] bridge_slave_0: entered promiscuous mode [ 1704.202782][ T7852] Bluetooth: hci1: command tx timeout [ 1704.213215][T17088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.221145][T17088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.234221][T17088] bridge_slave_1: entered allmulticast mode [ 1704.243349][T17088] bridge_slave_1: entered promiscuous mode [ 1704.340163][T17109] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1704.346987][T17109] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1704.355894][T17109] vhci_hcd vhci_hcd.0: Device attached [ 1704.373297][T17085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.383084][T17085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.391151][T17085] bridge_slave_1: entered allmulticast mode [ 1704.400314][T17085] bridge_slave_1: entered promiscuous mode [ 1704.409965][ T4154] bridge_slave_1: left allmulticast mode [ 1704.415845][ T4154] bridge_slave_1: left promiscuous mode [ 1704.422490][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.505812][ T4154] bridge_slave_0: left allmulticast mode [ 1704.511791][ T4154] bridge_slave_0: left promiscuous mode [ 1704.518332][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.690852][ T5238] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 1704.996711][T17110] vhci_hcd: connection reset by peer [ 1705.010212][ T3569] vhci_hcd: stop threads [ 1705.014657][ T3569] vhci_hcd: release socket [ 1705.019270][ T3569] vhci_hcd: disconnect device [ 1705.117454][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.180912][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.234213][ T4154] bond0 (unregistering): Released all slaves [ 1705.408714][T17088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.498129][T17088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.932981][ T7852] Bluetooth: hci2: command tx timeout [ 1706.003220][ T7852] Bluetooth: hci0: command tx timeout [ 1706.161921][T17085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.240112][ T7852] Bluetooth: hci1: command tx timeout [ 1706.363947][T17088] team0: Port device team_slave_0 added [ 1706.516739][T17088] team0: Port device team_slave_1 added [ 1706.774295][T17085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1706.863537][T16138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1706.930566][T16138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1706.951364][T16138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1707.018997][T16138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1707.046875][T16138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1707.064562][T16138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1707.080320][T17123] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3072'. [ 1707.224267][T17088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.231656][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.258205][T17088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.427401][ T4154] hsr_slave_0: left promiscuous mode [ 1707.458377][ T4154] hsr_slave_1: left promiscuous mode [ 1707.486076][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.494304][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.517600][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.525614][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.558537][ T4154] veth1_macvtap: left promiscuous mode [ 1707.564466][ T4154] veth0_macvtap: left promiscuous mode [ 1707.570514][ T4154] veth1_vlan: left promiscuous mode [ 1707.576065][ T4154] veth0_vlan: left promiscuous mode [ 1708.007769][T16138] Bluetooth: hci2: command tx timeout [ 1708.109844][T16138] Bluetooth: hci0: command tx timeout [ 1708.258140][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 1708.286085][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 1708.370231][T16138] Bluetooth: hci1: command tx timeout [ 1708.560884][T17085] team0: Port device team_slave_0 added [ 1708.633438][T17085] team0: Port device team_slave_1 added [ 1708.712244][T17088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.719670][T17088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1708.749048][T17088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.068651][T17129] loop1: detected capacity change from 0 to 128 [ 1709.077772][T17129] vfat: Unknown parameter '_S[] ʆBLU5;iN[S41\ՃTƉ0WओUE`UW.P5' [ 1709.124222][T16138] Bluetooth: hci3: command tx timeout [ 1709.163417][ T29] audit: type=1326 audit(1722490122.557:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.1.3074" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x0 [ 1709.223688][T17085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.231140][T17085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.260437][T17085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.304647][T17085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.312262][T17085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.338651][T17085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.370251][T17106] chnl_net:caif_netlink_parms(): no params data found [ 1709.670396][T17088] hsr_slave_0: entered promiscuous mode [ 1709.685208][T17088] hsr_slave_1: entered promiscuous mode [ 1709.850308][ T5238] vhci_hcd: vhci_device speed not set [ 1709.976725][ T4154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.089118][T16138] Bluetooth: hci2: command tx timeout [ 1710.293795][ T4154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.348366][T17085] hsr_slave_0: entered promiscuous mode [ 1710.366453][T17085] hsr_slave_1: entered promiscuous mode [ 1710.383607][T17085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1710.391779][T17085] Cannot create hsr debugfs directory [ 1710.515293][ T4154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.726477][ T4154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.846638][T17106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.854704][T17106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.862480][T17106] bridge_slave_0: entered allmulticast mode [ 1710.871672][T17106] bridge_slave_0: entered promiscuous mode [ 1710.996769][ T10] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1711.053059][T17106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.060956][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.068728][T17106] bridge_slave_1: entered allmulticast mode [ 1711.076953][T17106] bridge_slave_1: entered promiscuous mode [ 1711.204849][T16138] Bluetooth: hci3: command tx timeout [ 1711.217858][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1711.229341][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.239710][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1711.252982][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1711.262422][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.276059][ T10] usb 2-1: config 0 descriptor?? [ 1711.365200][T17106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.399110][T17106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.594298][T17106] team0: Port device team_slave_0 added [ 1711.655064][T17106] team0: Port device team_slave_1 added [ 1711.663177][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 1711.752167][T17088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.943934][T17088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.036530][ T4154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.057423][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1712.064214][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1712.091401][ T10] usb 2-1: USB disconnect, device number 72 [ 1712.132310][T17120] chnl_net:caif_netlink_parms(): no params data found [ 1712.170503][T16138] Bluetooth: hci2: command tx timeout [ 1712.188054][T17106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.195452][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.223807][T17106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.264589][T17088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.309332][ T4154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.364361][T17106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.373030][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.400596][T17106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.476405][T17088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.568258][ T4154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.786508][ T4154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.910061][ T29] audit: type=1326 audit(1722490126.297:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17143 comm="syz.1.3076" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x0 [ 1712.951347][T17106] hsr_slave_0: entered promiscuous mode [ 1712.984774][T17106] hsr_slave_1: entered promiscuous mode [ 1713.011065][T17106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1713.018950][T17106] Cannot create hsr debugfs directory [ 1713.179267][T17088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1713.251613][ T4154] bridge_slave_1: left allmulticast mode [ 1713.257498][ T4154] bridge_slave_1: left promiscuous mode [ 1713.264394][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.281018][ T7852] Bluetooth: hci3: command tx timeout [ 1713.297130][ T4154] bridge_slave_0: left allmulticast mode [ 1713.304047][ T4154] bridge_slave_0: left promiscuous mode [ 1713.311074][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.328742][ T4154] bridge_slave_1: left allmulticast mode [ 1713.335661][ T4154] bridge_slave_1: left promiscuous mode [ 1713.345841][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.367202][ T4154] bridge_slave_0: left allmulticast mode [ 1713.374570][ T4154] bridge_slave_0: left promiscuous mode [ 1713.381158][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.395624][ T4154] bridge_slave_1: left allmulticast mode [ 1713.401728][ T4154] bridge_slave_1: left promiscuous mode [ 1713.407970][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.426923][ T4154] bridge_slave_0: left allmulticast mode [ 1713.433325][ T4154] bridge_slave_0: left promiscuous mode [ 1713.447413][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.941551][T17148] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1713.948377][T17148] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1713.959062][T17148] vhci_hcd vhci_hcd.0: Device attached [ 1714.736831][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.753887][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.767759][T17149] vhci_hcd: connection closed [ 1714.768889][ T1263] vhci_hcd: stop threads [ 1714.781685][ T1263] vhci_hcd: release socket [ 1714.786361][ T1263] vhci_hcd: disconnect device [ 1714.791401][T14246] usb 11-1: new high-speed USB device number 5 using vhci_hcd [ 1714.795619][ T4154] bond0 (unregistering): Released all slaves [ 1714.799138][T14246] usb 11-1: enqueue for inactive port 0 [ 1714.827315][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.844113][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.858918][ T4154] bond0 (unregistering): Released all slaves [ 1714.895477][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1714.905371][T14246] vhci_hcd: vhci_device speed not set [ 1714.919976][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1714.938312][ T4154] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1714.953640][ T4154] bond0 (unregistering): Released all slaves [ 1714.986626][T17088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1715.147357][T17088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1715.269754][T17088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1715.361084][ T7852] Bluetooth: hci3: command tx timeout [ 1715.556593][T17120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.564500][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.572389][T17120] bridge_slave_0: entered allmulticast mode [ 1715.581637][T17120] bridge_slave_0: entered promiscuous mode [ 1715.623215][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.632121][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.640128][T17120] bridge_slave_1: entered allmulticast mode [ 1715.649155][T17120] bridge_slave_1: entered promiscuous mode [ 1715.904050][T17120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.912114][T17156] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3079'. [ 1716.073284][T17120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.407948][T17120] team0: Port device team_slave_0 added [ 1716.439572][T17120] team0: Port device team_slave_1 added [ 1716.596113][T17085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1716.657860][T17085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1716.754446][T17085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1716.860452][T17085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1716.976042][T17120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.983505][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.009897][T17120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.098881][T17120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.107364][T17120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.133962][T17120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.540654][ T4154] hsr_slave_0: left promiscuous mode [ 1717.561101][ T4154] hsr_slave_1: left promiscuous mode [ 1717.570021][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.577823][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.602478][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.610391][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.639013][ T4154] hsr_slave_0: left promiscuous mode [ 1717.648064][ T4154] hsr_slave_1: left promiscuous mode [ 1717.670079][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.677763][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.706709][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.714582][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.748230][ T4154] hsr_slave_0: left promiscuous mode [ 1717.758892][ T4154] hsr_slave_1: left promiscuous mode [ 1717.778215][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.786084][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.805795][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.814266][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.866718][ T4154] veth1_macvtap: left promiscuous mode [ 1717.873062][ T4154] veth0_macvtap: left promiscuous mode [ 1717.878951][ T4154] veth1_vlan: left promiscuous mode [ 1717.884647][ T4154] veth0_vlan: left promiscuous mode [ 1717.900694][ T4154] veth1_macvtap: left promiscuous mode [ 1717.906434][ T4154] veth0_macvtap: left promiscuous mode [ 1717.912741][ T4154] veth1_vlan: left promiscuous mode [ 1717.918290][ T4154] veth0_vlan: left promiscuous mode [ 1717.935897][ T4154] veth1_macvtap: left promiscuous mode [ 1717.941886][ T4154] veth0_macvtap: left promiscuous mode [ 1717.947768][ T4154] veth1_vlan: left promiscuous mode [ 1717.953455][ T4154] veth0_vlan: left promiscuous mode [ 1719.325698][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 1719.442255][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 1720.175787][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 1720.221445][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 1720.851778][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 1720.923931][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 1721.236935][T17120] hsr_slave_0: entered promiscuous mode [ 1721.277004][T17120] hsr_slave_1: entered promiscuous mode [ 1721.333609][T17120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1721.342892][T17120] Cannot create hsr debugfs directory [ 1721.832561][T17088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.885541][T17106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1721.985181][T17088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.028779][T17106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1722.078340][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.086145][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.176819][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.184618][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.228290][T17106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1722.333105][T17106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1722.870834][ T1495] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1722.912273][T17085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.169977][ T1495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1723.181595][ T1495] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.192590][ T1495] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1723.205947][ T1495] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1723.215469][ T1495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.250008][ T1495] usb 2-1: config 0 descriptor?? [ 1723.347501][T17085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.566343][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'. [ 1723.596769][T17120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1723.624299][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.632165][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1723.664996][T17120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1723.745677][T17120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1723.862908][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.870709][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1723.921846][T17120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1724.471020][T17106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.809959][T17106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.888830][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.896639][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.026736][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.034477][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1725.301753][ T1495] usbhid 2-1:0.0: can't add hid device: -71 [ 1725.308410][ T1495] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1725.400830][ T1495] usb 2-1: USB disconnect, device number 73 [ 1725.711749][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.853835][T17120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.856991][ T29] audit: type=1326 audit(1722490139.137:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17174 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1725.883921][ T29] audit: type=1326 audit(1722490139.137:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17174 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1725.906455][ T29] audit: type=1326 audit(1722490139.177:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17174 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1725.929099][ T29] audit: type=1326 audit(1722490139.177:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17174 comm="syz.1.3083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1726.132886][T17120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.203299][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.211108][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.327182][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.334964][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.366390][T17088] veth0_vlan: entered promiscuous mode [ 1726.556694][T17181] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1726.563498][T17181] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1726.571903][T17181] vhci_hcd vhci_hcd.0: Device attached [ 1726.608896][T17088] veth1_vlan: entered promiscuous mode [ 1726.711245][T17182] vhci_hcd: connection closed [ 1726.737484][ T3569] vhci_hcd: stop threads [ 1726.747490][ T3569] vhci_hcd: release socket [ 1726.752922][ T3569] vhci_hcd: disconnect device [ 1726.806322][T17085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1727.094030][T17088] veth0_macvtap: entered promiscuous mode [ 1727.186232][T17088] veth1_macvtap: entered promiscuous mode [ 1727.471543][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.484118][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.500896][T17088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.529961][T17085] veth0_vlan: entered promiscuous mode [ 1727.575592][T17106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1727.610260][T17088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.621070][T17088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.635993][T17088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1727.762977][T17085] veth1_vlan: entered promiscuous mode [ 1727.788936][T17088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.799847][T17088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.808869][T17088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.818026][T17088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.307145][T17106] veth0_vlan: entered promiscuous mode [ 1728.329042][T17085] veth0_macvtap: entered promiscuous mode [ 1728.408575][T17106] veth1_vlan: entered promiscuous mode [ 1728.461309][T17085] veth1_macvtap: entered promiscuous mode [ 1728.494253][T17196] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3086'. [ 1728.733040][T17085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.743921][T17085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.754119][T17085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.764845][T17085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.781154][T17085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.871653][T17106] veth0_macvtap: entered promiscuous mode [ 1728.896822][T17106] veth1_macvtap: entered promiscuous mode [ 1728.964579][T17106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.975438][T17106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.985553][T17106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.996477][T17106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.006578][T17106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1729.017273][T17106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.032984][T17106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1729.053294][T17120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.079014][T17085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.090817][T17085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.100976][T17085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.111743][T17085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.128094][T17085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1729.203324][T17085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.212653][T17085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.221824][T17085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.230933][T17085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.257771][T17106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.270929][T17106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.282633][T17106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.294834][T17106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.305168][T17106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.318025][T17106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.334110][T17106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1729.463554][T17106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.472707][T17106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.481929][T17106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.491482][T17106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1731.613160][T17120] veth0_vlan: entered promiscuous mode [ 1731.757890][T17120] veth1_vlan: entered promiscuous mode [ 1732.051343][T17120] veth0_macvtap: entered promiscuous mode [ 1732.169242][T17120] veth1_macvtap: entered promiscuous mode [ 1732.301605][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.312439][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.323267][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.334480][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.345006][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.355737][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.365842][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.376631][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.392213][T17120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1732.559973][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.572218][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.583663][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.594377][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.604474][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.615268][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.625411][T17120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.636163][T17120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.651701][T17120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1732.912853][T17120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.922023][T17120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.931147][T17120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.940332][T17120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.284375][T10847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.292755][T10847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.366558][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.374836][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.523789][T13564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.532536][T13564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.683554][T13564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.691831][T13564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.723700][ T4154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.732803][ T4154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.902096][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.910344][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.394269][T14152] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1736.681058][T14152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1736.694120][T14152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.705022][T14152] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1736.718357][T14152] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1736.727691][T14152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.783083][T14152] usb 2-1: config 0 descriptor?? [ 1737.077447][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 1737.491758][T17288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1737.498505][T17288] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1737.511541][T17288] vhci_hcd vhci_hcd.0: Device attached [ 1737.673275][T17289] vhci_hcd: connection closed [ 1737.677451][ T59] vhci_hcd: stop threads [ 1737.687107][ T59] vhci_hcd: release socket [ 1737.691910][ T59] vhci_hcd: disconnect device [ 1737.732405][T17097] vhci_hcd: vhci_device speed not set [ 1738.714494][T17297] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3093'. [ 1738.869853][T14152] usbhid 2-1:0.0: can't add hid device: -71 [ 1738.876436][T14152] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1738.942890][T14152] usb 2-1: USB disconnect, device number 74 [ 1739.399268][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.407723][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1739.716549][T13564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1739.725320][T13564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.959942][T17326] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1741.966770][T17326] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1741.974990][T17326] vhci_hcd vhci_hcd.0: Device attached [ 1742.001613][T17330] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3105'. [ 1742.063812][T17327] vhci_hcd: connection closed [ 1742.064564][ T3569] vhci_hcd: stop threads [ 1742.073986][ T3569] vhci_hcd: release socket [ 1742.078494][ T3569] vhci_hcd: disconnect device [ 1742.606616][T17334] loop2: detected capacity change from 0 to 512 [ 1742.660731][T17334] ext4: Unknown parameter 'dont_hash' [ 1742.891509][ T5243] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1743.253122][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1743.264548][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.274934][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1743.288423][ T5243] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1743.298010][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.371947][ T5243] usb 2-1: config 0 descriptor?? [ 1743.621679][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 1744.700989][ T5243] usbhid 2-1:0.0: can't add hid device: -71 [ 1744.707620][ T5243] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1744.717247][T17344] ptrace attach of "./syz-executor exec"[17085] was attempted by "./syz-executor exec"[17344] [ 1744.817851][ T5243] usb 2-1: USB disconnect, device number 75 [ 1745.128257][T14152] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1745.309664][T14152] usb 1-1: device descriptor read/64, error -71 [ 1745.671073][T14152] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1745.889769][T14152] usb 1-1: device descriptor read/64, error -71 [ 1746.024046][T14152] usb usb1-port1: attempt power cycle [ 1746.184494][T17097] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1746.439719][T17097] usb 2-1: Using ep0 maxpacket: 32 [ 1746.464620][T17097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1746.476384][T17097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1746.488046][T17097] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1746.497482][T17097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.529614][T14152] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1746.557830][T17097] usb 2-1: config 0 descriptor?? [ 1746.565444][T17350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1746.586715][T14152] usb 1-1: device descriptor read/8, error -71 [ 1746.949928][T14152] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1747.002980][T14152] usb 1-1: device descriptor read/8, error -71 [ 1747.046463][T17097] hid-rmi 0003:0461:4E72.0012: unknown main item tag 0x0 [ 1747.054664][T17097] hid-rmi 0003:0461:4E72.0012: unknown main item tag 0x0 [ 1747.062579][T17097] hid-rmi 0003:0461:4E72.0012: unknown main item tag 0x0 [ 1747.070072][T17097] hid-rmi 0003:0461:4E72.0012: unknown main item tag 0x0 [ 1747.077471][T17097] hid-rmi 0003:0461:4E72.0012: unknown main item tag 0x0 [ 1747.187405][T14152] usb usb1-port1: unable to enumerate USB device [ 1747.245893][T17097] hid-rmi 0003:0461:4E72.0012: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 1747.310446][T17097] usb 2-1: USB disconnect, device number 76 [ 1747.434796][T16138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1747.459142][T16138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1747.468101][T16138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1747.581523][T16138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1747.594526][T16138] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1747.620652][T16138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1747.670017][T17361] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1747.676837][T17361] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1747.685028][T17361] vhci_hcd vhci_hcd.0: Device attached [ 1747.760703][T17362] vhci_hcd: connection closed [ 1747.769617][ T4154] vhci_hcd: stop threads [ 1747.778953][ T4154] vhci_hcd: release socket [ 1747.783689][ T4154] vhci_hcd: disconnect device [ 1749.031200][T17358] chnl_net:caif_netlink_parms(): no params data found [ 1749.391660][ T5243] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1749.663453][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1749.675185][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.690055][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1749.700470][T16138] Bluetooth: hci4: command tx timeout [ 1749.710302][ T5243] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1749.724280][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.871844][ T5243] usb 2-1: config 0 descriptor?? [ 1750.168980][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1751.383359][T17358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.391771][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.404631][T17358] bridge_slave_0: entered allmulticast mode [ 1751.422339][T17358] bridge_slave_0: entered promiscuous mode [ 1751.529591][ T5243] usbhid 2-1:0.0: can't add hid device: -71 [ 1751.536220][T17358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.536772][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.537444][T17358] bridge_slave_1: entered allmulticast mode [ 1751.540871][T17358] bridge_slave_1: entered promiscuous mode [ 1751.571887][ T5243] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1751.686840][ T5243] usb 2-1: USB disconnect, device number 77 [ 1751.761749][T16138] Bluetooth: hci4: command tx timeout [ 1751.921357][T17358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.007645][T17358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.421201][T17358] team0: Port device team_slave_0 added [ 1752.518425][T17358] team0: Port device team_slave_1 added [ 1752.853341][T17358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1752.860611][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.891502][T17358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.062987][T17409] ptrace attach of "./syz-executor exec"[15377] was attempted by "./syz-executor exec"[17409] [ 1753.109253][T17358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.117071][T17358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.145940][T17358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.453367][T17358] hsr_slave_0: entered promiscuous mode [ 1753.486325][T17412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1753.493148][T17412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1753.501696][T17412] vhci_hcd vhci_hcd.0: Device attached [ 1753.507614][ T5243] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1753.525270][T17358] hsr_slave_1: entered promiscuous mode [ 1753.558492][T17358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1753.566547][T17358] Cannot create hsr debugfs directory [ 1753.602966][T17413] vhci_hcd: connection closed [ 1753.603760][ T1263] vhci_hcd: stop threads [ 1753.613134][ T1263] vhci_hcd: release socket [ 1753.617649][ T1263] vhci_hcd: disconnect device [ 1753.758799][ T5243] usb 2-1: device descriptor read/64, error -71 [ 1753.849868][T16138] Bluetooth: hci4: command tx timeout [ 1754.104690][ T5243] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1754.279858][ T5243] usb 2-1: device descriptor read/64, error -71 [ 1754.364248][T17358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.439968][ T5243] usb usb2-port1: attempt power cycle [ 1754.618897][T17358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.836288][T17358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.899690][ T5243] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1754.972658][ T5243] usb 2-1: device descriptor read/8, error -71 [ 1755.055183][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 1755.061970][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 1755.085626][T17358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.263157][ T5243] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1755.400971][ T5243] usb 2-1: device descriptor read/8, error -71 [ 1755.581893][ T5243] usb usb2-port1: unable to enumerate USB device [ 1755.744699][T17358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1755.805091][T17358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1755.921944][T16138] Bluetooth: hci4: command tx timeout [ 1755.931579][T17358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1756.074246][T17358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1757.430626][T17097] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1757.770353][T17097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1757.785155][T17097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.796294][T17097] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1757.809756][T17097] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1757.819088][T17097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.858335][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.925831][T17097] usb 1-1: config 0 descriptor?? [ 1758.217808][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 1758.412620][T17358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.526143][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.533890][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1758.707473][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.715372][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1760.219960][T17097] usbhid 1-1:0.0: can't add hid device: -71 [ 1760.226605][T17097] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1760.375813][T17097] usb 1-1: USB disconnect, device number 63 [ 1760.403052][T17453] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1760.409846][T17453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1760.419012][T17453] vhci_hcd vhci_hcd.0: Device attached [ 1760.615916][T17454] vhci_hcd: connection closed [ 1760.626536][ T3569] vhci_hcd: stop threads [ 1760.635899][ T3569] vhci_hcd: release socket [ 1760.640599][ T3569] vhci_hcd: disconnect device [ 1761.627621][T17358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.177239][T17358] veth0_vlan: entered promiscuous mode [ 1762.250749][T17470] ptrace attach of "./syz-executor exec"[17120] was attempted by "./syz-executor exec"[17470] [ 1762.297672][T17358] veth1_vlan: entered promiscuous mode [ 1762.653086][T17358] veth0_macvtap: entered promiscuous mode [ 1762.680318][T14152] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1762.790086][T17358] veth1_macvtap: entered promiscuous mode [ 1762.884573][T14152] usb 5-1: device descriptor read/64, error -71 [ 1762.913719][T17478] loop2: detected capacity change from 0 to 164 [ 1763.040846][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.051581][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.061691][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.072371][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.082768][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.093492][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.107842][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.120079][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.131386][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1763.142126][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.157284][T17358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.199666][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.217561][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.229472][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.240307][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.250375][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.261197][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.271368][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.283014][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.293015][T17358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.303841][T17358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.323368][T17358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.382025][T14152] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1763.509027][T17358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.524664][T17358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.535513][T17358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.544570][T17358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.654537][T14152] usb 5-1: device descriptor read/64, error -71 [ 1763.798644][T14152] usb usb5-port1: attempt power cycle [ 1764.259727][T14152] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1764.339074][T14152] usb 5-1: device descriptor read/8, error -71 [ 1764.645856][T17097] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1764.654801][T14152] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1764.748070][T14152] usb 5-1: device descriptor read/8, error -71 [ 1764.810715][T17498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1764.817526][T17498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1764.825616][T17498] vhci_hcd vhci_hcd.0: Device attached [ 1764.890801][T17097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1764.892966][T17499] vhci_hcd: connection closed [ 1764.902406][T17097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1764.904393][ T4154] vhci_hcd: stop threads [ 1764.907290][T17097] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1764.917805][ T4154] vhci_hcd: release socket [ 1764.917867][ T4154] vhci_hcd: disconnect device [ 1764.945256][T17097] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1764.958002][T17097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.076339][T14152] usb usb5-port1: unable to enumerate USB device [ 1765.139876][T17097] usb 3-1: config 0 descriptor?? [ 1765.373899][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1765.928301][T17097] usbhid 3-1:0.0: can't add hid device: -71 [ 1765.935652][T17097] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1766.080398][T17097] usb 3-1: USB disconnect, device number 53 [ 1767.923522][T17522] loop4: detected capacity change from 0 to 164 [ 1770.037864][T17539] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1770.044679][T17539] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1770.053255][T17539] vhci_hcd vhci_hcd.0: Device attached [ 1770.092115][T17541] vhci_hcd: connection closed [ 1770.092898][ T4154] vhci_hcd: stop threads [ 1770.102257][ T4154] vhci_hcd: release socket [ 1770.106768][ T4154] vhci_hcd: disconnect device [ 1771.889850][T13564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.897976][T13564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.954097][T17097] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1772.226920][T17097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1772.238446][T17097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.248619][T17097] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1772.262037][T17097] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1772.271539][T17097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.283065][T13564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.291376][T13564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.462425][T17097] usb 1-1: config 0 descriptor?? [ 1772.677830][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1773.227462][T17097] usbhid 1-1:0.0: can't add hid device: -71 [ 1773.234034][T17097] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1773.310914][T17097] usb 1-1: USB disconnect, device number 64 [ 1773.660870][T17561] loop1: detected capacity change from 0 to 164 [ 1774.869895][T17576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1774.876704][T17576] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1774.891215][T17576] vhci_hcd vhci_hcd.0: Device attached [ 1775.044476][T17578] vhci_hcd: connection closed [ 1775.060464][ T4421] vhci_hcd: stop threads [ 1775.069933][ T4421] vhci_hcd: release socket [ 1775.074619][ T4421] vhci_hcd: disconnect device [ 1778.171138][ T7852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1778.190302][ T7852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1778.204166][ T7852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1778.211782][T17097] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1778.226646][ T7852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1778.249990][ T7852] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1778.291474][ T7852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1778.499832][T17097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1778.511179][T17097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.521158][T17097] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1778.534205][T17097] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1778.543508][T17097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.751858][T17097] usb 1-1: config 0 descriptor?? [ 1779.041385][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3190'. [ 1779.148283][T17602] loop3: detected capacity change from 0 to 164 [ 1779.654033][T17097] usbhid 1-1:0.0: can't add hid device: -71 [ 1779.662771][T17097] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1779.761534][T17097] usb 1-1: USB disconnect, device number 65 [ 1780.070292][T17603] chnl_net:caif_netlink_parms(): no params data found [ 1780.399798][T16138] Bluetooth: hci5: command tx timeout [ 1781.862284][T17626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1781.868972][T17626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1781.877149][T17626] vhci_hcd vhci_hcd.0: Device attached [ 1782.090112][T17627] vhci_hcd: connection closed [ 1782.104620][ T4421] vhci_hcd: stop threads [ 1782.114004][ T4421] vhci_hcd: release socket [ 1782.118552][ T4421] vhci_hcd: disconnect device [ 1782.189025][ T5244] vhci_hcd: vhci_device speed not set [ 1782.247665][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.264916][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.272959][T17603] bridge_slave_0: entered allmulticast mode [ 1782.282296][T17603] bridge_slave_0: entered promiscuous mode [ 1782.480052][T16138] Bluetooth: hci5: command tx timeout [ 1782.491207][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.498914][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.506982][T17603] bridge_slave_1: entered allmulticast mode [ 1782.516590][T17603] bridge_slave_1: entered promiscuous mode [ 1782.642802][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1782.779913][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.054669][T17603] team0: Port device team_slave_0 added [ 1783.139952][T17603] team0: Port device team_slave_1 added [ 1783.243965][T17640] netlink: 'syz.0.3200': attribute type 8 has an invalid length. [ 1783.253176][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1783.313802][ C0] ===================================================== [ 1783.321198][ C0] BUG: KMSAN: uninit-value in cfg80211_inform_bss_frame_data+0x3e3/0x9e0 [ 1783.329921][ C0] cfg80211_inform_bss_frame_data+0x3e3/0x9e0 [ 1783.336216][ C0] ieee80211_bss_info_update+0x900/0xad0 [ 1783.342166][ C0] ieee80211_scan_rx+0x8f6/0xbd0 [ 1783.347332][ C0] ieee80211_rx_list+0x55c9/0x6690 [ 1783.352723][ C0] ieee80211_rx_napi+0x84/0x3f0 [ 1783.357871][ C0] ieee80211_handle_queued_frames+0x1a8/0x340 [ 1783.364244][ C0] ieee80211_tasklet_handler+0x25/0x30 [ 1783.369954][ C0] tasklet_action_common+0x395/0xd50 [ 1783.375359][ C0] tasklet_action+0x2d/0x40 [ 1783.380050][ C0] handle_softirqs+0x1ce/0x800 [ 1783.385018][ C0] __do_softirq+0x14/0x1a [ 1783.389592][ C0] do_softirq+0x9a/0x100 [ 1783.393939][ C0] __local_bh_enable_ip+0x9f/0xb0 [ 1783.399064][ C0] __dev_queue_xmit+0x2692/0x5610 [ 1783.404238][ C0] __netlink_deliver_tap+0x84c/0xc90 [ 1783.409700][ C0] netlink_sendskb+0x23c/0x270 [ 1783.414605][ C0] netlink_unicast+0x70e/0x1260 [ 1783.419581][ C0] netlink_ack+0xb04/0xe80 [ 1783.424083][ C0] netlink_rcv_skb+0x510/0x650 [ 1783.428936][ C0] genl_rcv+0x40/0x60 [ 1783.433058][ C0] netlink_unicast+0xf52/0x1260 [ 1783.437987][ C0] netlink_sendmsg+0x10da/0x11e0 [ 1783.443055][ C0] __sock_sendmsg+0x30f/0x380 [ 1783.447836][ C0] __sys_sendto+0x685/0x830 [ 1783.452475][ C0] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1783.458386][ C0] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1783.464245][ C0] ia32_sys_call+0x3710/0x40d0 [ 1783.469125][ C0] __do_fast_syscall_32+0xb0/0x110 [ 1783.474362][ C0] do_fast_syscall_32+0x38/0x80 [ 1783.479293][ C0] do_SYSENTER_32+0x1f/0x30 [ 1783.484013][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1783.490578][ C0] [ 1783.492941][ C0] Uninit was created at: [ 1783.497309][ C0] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 1783.503358][ C0] kmalloc_reserve+0x13d/0x4a0 [ 1783.508207][ C0] __alloc_skb+0x363/0x7b0 [ 1783.512766][ C0] hwsim_cloned_frame_received_nl+0x311/0x1360 [ 1783.519026][ C0] genl_rcv_msg+0x1214/0x12c0 [ 1783.523850][ C0] netlink_rcv_skb+0x375/0x650 [ 1783.528709][ C0] genl_rcv+0x40/0x60 [ 1783.532845][ C0] netlink_unicast+0xf52/0x1260 [ 1783.537783][ C0] netlink_sendmsg+0x10da/0x11e0 [ 1783.542850][ C0] __sock_sendmsg+0x30f/0x380 [ 1783.547638][ C0] __sys_sendto+0x685/0x830 [ 1783.552272][ C0] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1783.558213][ C0] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1783.564102][ C0] ia32_sys_call+0x3710/0x40d0 [ 1783.569013][ C0] __do_fast_syscall_32+0xb0/0x110 [ 1783.574272][ C0] do_fast_syscall_32+0x38/0x80 [ 1783.579216][ C0] do_SYSENTER_32+0x1f/0x30 [ 1783.583889][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1783.590583][ C0] [ 1783.593009][ C0] CPU: 0 UID: 0 PID: 17643 Comm: syz.3.3201 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 1783.603926][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1783.614105][ C0] ===================================================== [ 1783.621140][ C0] Disabling lock debugging due to kernel taint [ 1783.627356][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1783.633852][ C0] CPU: 0 UID: 0 PID: 17643 Comm: syz.3.3201 Tainted: G B 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 1783.646226][ C0] Tainted: [B]=BAD_PAGE [ 1783.650425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1783.660566][ C0] Call Trace: [ 1783.663907][ C0] [ 1783.666802][ C0] dump_stack_lvl+0x216/0x2d0 [ 1783.671592][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1783.677562][ C0] dump_stack+0x1e/0x30 [ 1783.681802][ C0] panic+0x4e2/0xcd0 [ 1783.685890][ C0] ? kmsan_get_metadata+0x61/0x1c0 [ 1783.691283][ C0] kmsan_report+0x2c7/0x2d0 [ 1783.696006][ C0] ? rtnetlink_rcv+0x34/0x40 [ 1783.700716][ C0] ? __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1783.706482][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1783.713115][ C0] ? __msan_warning+0x95/0x120 [ 1783.718009][ C0] ? cfg80211_inform_bss_frame_data+0x3e3/0x9e0 [ 1783.724398][ C0] ? ieee80211_bss_info_update+0x900/0xad0 [ 1783.730325][ C0] ? ieee80211_scan_rx+0x8f6/0xbd0 [ 1783.735547][ C0] ? ieee80211_rx_list+0x55c9/0x6690 [ 1783.740957][ C0] ? ieee80211_rx_napi+0x84/0x3f0 [ 1783.746086][ C0] ? ieee80211_handle_queued_frames+0x1a8/0x340 [ 1783.752450][ C0] ? ieee80211_tasklet_handler+0x25/0x30 [ 1783.758194][ C0] ? tasklet_action_common+0x395/0xd50 [ 1783.763766][ C0] ? tasklet_action+0x2d/0x40 [ 1783.768543][ C0] ? handle_softirqs+0x1ce/0x800 [ 1783.773580][ C0] ? __do_softirq+0x14/0x1a [ 1783.778186][ C0] ? do_softirq+0x9a/0x100 [ 1783.782696][ C0] ? __local_bh_enable_ip+0x9f/0xb0 [ 1783.788019][ C0] ? __dev_queue_xmit+0x2692/0x5610 [ 1783.793373][ C0] ? __netlink_deliver_tap+0x84c/0xc90 [ 1783.798933][ C0] ? netlink_sendskb+0x23c/0x270 [ 1783.803958][ C0] ? netlink_unicast+0x70e/0x1260 [ 1783.809072][ C0] ? netlink_ack+0xb04/0xe80 [ 1783.813748][ C0] ? netlink_rcv_skb+0x510/0x650 [ 1783.818770][ C0] ? genl_rcv+0x40/0x60 [ 1783.823022][ C0] ? netlink_unicast+0xf52/0x1260 [ 1783.828125][ C0] ? netlink_sendmsg+0x10da/0x11e0 [ 1783.833330][ C0] ? __sock_sendmsg+0x30f/0x380 [ 1783.838289][ C0] ? __sys_sendto+0x685/0x830 [ 1783.843051][ C0] ? __se_compat_sys_socketcall+0xceb/0x1a20 [ 1783.849141][ C0] ? __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1783.855133][ C0] ? ia32_sys_call+0x3710/0x40d0 [ 1783.860186][ C0] ? __do_fast_syscall_32+0xb0/0x110 [ 1783.865556][ C0] ? do_fast_syscall_32+0x38/0x80 [ 1783.870661][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 1783.875433][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1783.882052][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1783.887366][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1783.893724][ C0] ? __rb_insert_augmented+0x805/0x10e0 [ 1783.899493][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1783.904811][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1783.910734][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1783.916044][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1783.921971][ C0] __msan_warning+0x95/0x120 [ 1783.926664][ C0] cfg80211_inform_bss_frame_data+0x3e3/0x9e0 [ 1783.932888][ C0] ieee80211_bss_info_update+0x900/0xad0 [ 1783.938662][ C0] ieee80211_scan_rx+0x8f6/0xbd0 [ 1783.943716][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1783.949033][ C0] ieee80211_rx_list+0x55c9/0x6690 [ 1783.954255][ C0] ? ieee80211_rx_napi+0x47/0x3f0 [ 1783.959423][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1783.964760][ C0] ieee80211_rx_napi+0x84/0x3f0 [ 1783.969721][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1783.975026][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1783.980950][ C0] ieee80211_handle_queued_frames+0x1a8/0x340 [ 1783.987151][ C0] ieee80211_tasklet_handler+0x25/0x30 [ 1783.992757][ C0] ? __pfx_ieee80211_tasklet_handler+0x10/0x10 [ 1783.999204][ C0] tasklet_action_common+0x395/0xd50 [ 1784.004711][ C0] ? workqueue_softirq_action+0x119/0x190 [ 1784.010554][ C0] ? __pfx_ieee80211_tasklet_handler+0x10/0x10 [ 1784.016838][ C0] ? __pfx_tasklet_action+0x10/0x10 [ 1784.022154][ C0] tasklet_action+0x2d/0x40 [ 1784.026765][ C0] handle_softirqs+0x1ce/0x800 [ 1784.031647][ C0] __do_softirq+0x14/0x1a [ 1784.036088][ C0] do_softirq+0x9a/0x100 [ 1784.040434][ C0] [ 1784.043413][ C0] [ 1784.046392][ C0] __local_bh_enable_ip+0x9f/0xb0 [ 1784.051521][ C0] __dev_queue_xmit+0x2692/0x5610 [ 1784.056638][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1784.061949][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1784.068383][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1784.073685][ C0] ? __dev_queue_xmit+0x352/0x5610 [ 1784.078906][ C0] __netlink_deliver_tap+0x84c/0xc90 [ 1784.084297][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1784.089609][ C0] netlink_sendskb+0x23c/0x270 [ 1784.094486][ C0] netlink_unicast+0x70e/0x1260 [ 1784.099538][ C0] netlink_ack+0xb04/0xe80 [ 1784.104125][ C0] netlink_rcv_skb+0x510/0x650 [ 1784.108989][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1784.114144][ C0] ? __pfx_genl_rcv+0x10/0x10 [ 1784.118926][ C0] genl_rcv+0x40/0x60 [ 1784.123005][ C0] netlink_unicast+0xf52/0x1260 [ 1784.127958][ C0] netlink_sendmsg+0x10da/0x11e0 [ 1784.133002][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1784.138385][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1784.143766][ C0] __sock_sendmsg+0x30f/0x380 [ 1784.148557][ C0] __sys_sendto+0x685/0x830 [ 1784.153147][ C0] ? filter_irq_stacks+0x164/0x1a0 [ 1784.158365][ C0] __se_compat_sys_socketcall+0xceb/0x1a20 [ 1784.164290][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1784.169618][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1784.175540][ C0] __ia32_compat_sys_socketcall+0x6b/0xa0 [ 1784.181366][ C0] ia32_sys_call+0x3710/0x40d0 [ 1784.186244][ C0] __do_fast_syscall_32+0xb0/0x110 [ 1784.191444][ C0] ? irqentry_exit+0x16/0x60 [ 1784.196141][ C0] do_fast_syscall_32+0x38/0x80 [ 1784.201112][ C0] do_SYSENTER_32+0x1f/0x30 [ 1784.205762][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1784.212231][ C0] RIP: 0023:0xf745d579 [ 1784.216423][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1784.236138][ C0] RSP: 002b:00000000f5775480 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1784.244643][ C0] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5775494 [ 1784.252689][ C0] RDX: 0000000000000000 RSI: 00000000f5775570 RDI: 00000000f744cff4 [ 1784.260733][ C0] RBP: 00000000f5775570 R08: 0000000000000000 R09: 0000000000000000 [ 1784.268771][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1784.276808][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1784.284858][ C0] [ 1784.288158][ C0] Kernel Offset: disabled [ 1784.292536][ C0] Rebooting in 86400 seconds..