last executing test programs: 56.362479246s ago: executing program 4 (id=10): sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 56.152041814s ago: executing program 4 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd82}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 55.698271645s ago: executing program 4 (id=18): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001000)=0x43aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb4, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 41.894252715s ago: executing program 4 (id=18): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001000)=0x43aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb4, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 22.967632315s ago: executing program 4 (id=18): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001000)=0x43aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb4, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 11.091274514s ago: executing program 4 (id=18): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001000)=0x43aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb4, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x63, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 6.73312836s ago: executing program 3 (id=338): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write$UHID_CREATE2(r0, 0x0, 0x118) 6.595813476s ago: executing program 3 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000100)='H', &(0x7f0000000000)=@tcp6=r1}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000240), &(0x7f0000000280)=@tcp=r2}, 0x20) 6.492390961s ago: executing program 3 (id=343): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3e, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) syz_usb_disconnect(r1) 5.162960487s ago: executing program 1 (id=357): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4aca2fd393c58413552ee20a6ffb194eb866939781720f1a589bd4a5c95c4be84deeeb45c8ce7954b1c1057ede4df0326ff749c8aabb67b0138b7c5bc96cb44ea1d", 0x45}], 0x1}}], 0x1, 0x0) 1.825516014s ago: executing program 0 (id=361): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000100)=ANY=[]) 1.802074984s ago: executing program 1 (id=362): r0 = socket(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x83, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.801486001s ago: executing program 2 (id=363): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x8000041, 0x0, 0x0, 0xfffffff5}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) 1.689502641s ago: executing program 0 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0xa1600}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000000000000aa"], 0x0) 1.626224212s ago: executing program 2 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x17, 0xc2, 0x0, 0x0, 0x100, {[@sack_perm={0x4, 0x2}, @nop, @window={0x3, 0x3, 0x8}, @fastopen={0x22, 0xc, "fdcc2d4fa16e88e5c5ca"}, @generic={0x13, 0x4, "0b06"}, @eol, @generic={0x3, 0xe, "678968282ed034b06bcb83d9"}, @sack={0x5, 0xe, [0x9, 0x5f2, 0xffffffff]}, @md5sig={0x13, 0x12, "7a8451ed6b43550a1bc535be09b7e312"}]}}}}}}}, 0x0) 1.568656839s ago: executing program 2 (id=366): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x6, &(0x7f0000000080)=ANY=[], 0x8) 1.559784096s ago: executing program 0 (id=367): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) 1.471992871s ago: executing program 0 (id=368): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0x2, 0x2, 0x73) 1.385440782s ago: executing program 2 (id=369): r0 = io_uring_setup(0xb3e, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x2, 0x300) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.326320878s ago: executing program 3 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) socket$inet6(0xa, 0x3, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 1.3160025s ago: executing program 0 (id=371): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x20000006}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 1.092950731s ago: executing program 2 (id=372): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) 1.081007996s ago: executing program 3 (id=373): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8c47bffe10c61698) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000100)=[{r1, 0x103}], 0x1, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 993.2419ms ago: executing program 0 (id=374): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 992.723385ms ago: executing program 2 (id=375): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9, 0x60, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd}, {0x6, 0x24, 0x1a, 0x0, 0x45}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 710.70232ms ago: executing program 1 (id=376): connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x40) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semop(r0, &(0x7f00000001c0)=[{0x1, 0x0, 0x800}, {}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)) 540.271819ms ago: executing program 1 (id=377): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x6, 0x8, 0x0, 0x1}, 0x48) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 302.14776ms ago: executing program 1 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000008000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000480)="0f20c06635000001000f22c0ad660fd8e966b9090200000f32360f55d6baf80c66b8169d288966efbafc0cb000ee0fc776030f201166b8010000000f23c80f21f866350400a0000f23f80f20e06635000040000f22e0", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 69.484763ms ago: executing program 3 (id=379): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) 0s ago: executing program 1 (id=380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0x68f}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 50.502214][ T5199] cgroup: Unknown subsys name 'net' [ 50.672489][ T5199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.039508][ T5199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.119252][ T5215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.128042][ T5215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.143676][ T5215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.152092][ T5215] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.160004][ T5215] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.167725][ T5215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.255061][ T5215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.263241][ T5215] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.271173][ T5215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.285250][ T5215] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.293133][ T5215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.300545][ T5215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.372571][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.380566][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.393579][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.404314][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.412951][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.421724][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.429384][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.438509][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.446399][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.454262][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.462715][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.471031][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.517063][ T5215] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.528442][ T5215] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.542101][ T5215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.564118][ T5215] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.573102][ T5215] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.583440][ T5215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.836795][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 54.979460][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 55.065762][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 55.096159][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.104138][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.111519][ T5212] bridge_slave_0: entered allmulticast mode [ 55.120646][ T5212] bridge_slave_0: entered promiscuous mode [ 55.159383][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.167008][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.174258][ T5212] bridge_slave_1: entered allmulticast mode [ 55.181000][ T5212] bridge_slave_1: entered promiscuous mode [ 55.224625][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.231840][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.239569][ T5218] bridge_slave_0: entered allmulticast mode [ 55.246574][ T5218] bridge_slave_0: entered promiscuous mode [ 55.254573][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.261685][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.268951][ T5218] bridge_slave_1: entered allmulticast mode [ 55.276879][ T5218] bridge_slave_1: entered promiscuous mode [ 55.301560][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 55.342647][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.401380][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.437127][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.444732][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.452049][ T5216] bridge_slave_0: entered allmulticast mode [ 55.460548][ T5216] bridge_slave_0: entered promiscuous mode [ 55.469895][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.508421][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.518209][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.525845][ T5216] bridge_slave_1: entered allmulticast mode [ 55.532521][ T5216] bridge_slave_1: entered promiscuous mode [ 55.541563][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.554237][ T5212] team0: Port device team_slave_0 added [ 55.565884][ T5212] team0: Port device team_slave_1 added [ 55.571877][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 55.680191][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.687435][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.713370][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.726755][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.733832][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.759769][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.781210][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.788513][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.796012][ T5222] bridge_slave_0: entered allmulticast mode [ 55.802692][ T5222] bridge_slave_0: entered promiscuous mode [ 55.812002][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.824883][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.837340][ T5218] team0: Port device team_slave_0 added [ 55.847028][ T5218] team0: Port device team_slave_1 added [ 55.877796][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.885201][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.892459][ T5222] bridge_slave_1: entered allmulticast mode [ 55.899503][ T5222] bridge_slave_1: entered promiscuous mode [ 55.992751][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.000088][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.026794][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.042111][ T5216] team0: Port device team_slave_0 added [ 56.069986][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.079724][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.087013][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.113718][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.133069][ T5216] team0: Port device team_slave_1 added [ 56.156609][ T5212] hsr_slave_0: entered promiscuous mode [ 56.162854][ T5212] hsr_slave_1: entered promiscuous mode [ 56.182790][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.247194][ T5222] team0: Port device team_slave_0 added [ 56.254425][ T5225] Bluetooth: hci0: command tx timeout [ 56.255877][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.267157][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.293156][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.310261][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.317551][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.324975][ T5226] bridge_slave_0: entered allmulticast mode [ 56.331667][ T5226] bridge_slave_0: entered promiscuous mode [ 56.341586][ T5222] team0: Port device team_slave_1 added [ 56.370342][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.377490][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.403714][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.414331][ T5225] Bluetooth: hci1: command tx timeout [ 56.433246][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.441624][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.448887][ T5226] bridge_slave_1: entered allmulticast mode [ 56.455929][ T5226] bridge_slave_1: entered promiscuous mode [ 56.475757][ T5218] hsr_slave_0: entered promiscuous mode [ 56.482018][ T5218] hsr_slave_1: entered promiscuous mode [ 56.489210][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.497109][ T5218] Cannot create hsr debugfs directory [ 56.541691][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.548793][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.574994][ T5225] Bluetooth: hci3: command tx timeout [ 56.575394][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.592187][ T5225] Bluetooth: hci2: command tx timeout [ 56.631522][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.638797][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.664873][ T5225] Bluetooth: hci4: command tx timeout [ 56.670657][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.707241][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.719180][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.797589][ T5222] hsr_slave_0: entered promiscuous mode [ 56.807646][ T5222] hsr_slave_1: entered promiscuous mode [ 56.813951][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.821520][ T5222] Cannot create hsr debugfs directory [ 56.855343][ T5216] hsr_slave_0: entered promiscuous mode [ 56.861643][ T5216] hsr_slave_1: entered promiscuous mode [ 56.868031][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.876088][ T5216] Cannot create hsr debugfs directory [ 56.891978][ T5226] team0: Port device team_slave_0 added [ 56.900686][ T5226] team0: Port device team_slave_1 added [ 56.995358][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.002342][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.028876][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.070269][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.083134][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.110068][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.220675][ T5226] hsr_slave_0: entered promiscuous mode [ 57.227306][ T5226] hsr_slave_1: entered promiscuous mode [ 57.233549][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.241132][ T5226] Cannot create hsr debugfs directory [ 57.369864][ T5212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.408521][ T5212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.432258][ T5212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.444278][ T5212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.517139][ T5218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.540570][ T5218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.550246][ T5218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.567400][ T5218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.637531][ T5222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.674271][ T5222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.704992][ T5222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.717463][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.779434][ T5216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.789618][ T5216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.829680][ T5216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.860508][ T5216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.909528][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.920802][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.949547][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.962552][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.977352][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.021251][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.062671][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.107594][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.114973][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.136387][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.182161][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.189353][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.200915][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.208030][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.220780][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.227882][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.268647][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.289509][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.316907][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.323485][ T5225] Bluetooth: hci0: command tx timeout [ 58.324046][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.341564][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.348750][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.484429][ T5225] Bluetooth: hci1: command tx timeout [ 58.507640][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.522942][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.623053][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.644331][ T5215] Bluetooth: hci3: command tx timeout [ 58.648822][ T5225] Bluetooth: hci2: command tx timeout [ 58.667899][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.692303][ T2504] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.699947][ T2504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.734781][ T5225] Bluetooth: hci4: command tx timeout [ 58.777716][ T2504] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.785362][ T2504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.807311][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.814496][ T2504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.852599][ T5226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.864769][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.926133][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.933348][ T2504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.959251][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.047907][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.065415][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.249712][ T5218] veth0_vlan: entered promiscuous mode [ 59.288397][ T5212] veth0_vlan: entered promiscuous mode [ 59.348674][ T5218] veth1_vlan: entered promiscuous mode [ 59.359969][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.372429][ T5212] veth1_vlan: entered promiscuous mode [ 59.477974][ T5218] veth0_macvtap: entered promiscuous mode [ 59.522773][ T5218] veth1_macvtap: entered promiscuous mode [ 59.556483][ T5212] veth0_macvtap: entered promiscuous mode [ 59.565927][ T5226] veth0_vlan: entered promiscuous mode [ 59.580007][ T5226] veth1_vlan: entered promiscuous mode [ 59.596543][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.619112][ T5212] veth1_macvtap: entered promiscuous mode [ 59.642706][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.678692][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.692480][ T5218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.701834][ T5218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711621][ T5218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.720525][ T5218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759841][ T5222] veth0_vlan: entered promiscuous mode [ 59.771796][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.788190][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.799715][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.846086][ T5222] veth1_vlan: entered promiscuous mode [ 59.854553][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.865123][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.877006][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.888673][ T5212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.898792][ T5212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.909132][ T5212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.918652][ T5212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.936956][ T5226] veth0_macvtap: entered promiscuous mode [ 59.949138][ T5226] veth1_macvtap: entered promiscuous mode [ 60.061929][ T5216] veth0_vlan: entered promiscuous mode [ 60.081357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.093701][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.112550][ T5222] veth0_macvtap: entered promiscuous mode [ 60.125133][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.136176][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.146203][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.157037][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.168819][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.180378][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.191120][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.201986][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.212501][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.224106][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.251303][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.265300][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.274931][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.284038][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.297196][ T5222] veth1_macvtap: entered promiscuous mode [ 60.309658][ T5216] veth1_vlan: entered promiscuous mode [ 60.339746][ T2504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.359770][ T2504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.399089][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.410917][ T5225] Bluetooth: hci0: command tx timeout [ 60.418029][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.428573][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.439520][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.450027][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.460635][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.474886][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.507870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.516643][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.526458][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.538243][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.548191][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.558808][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.567082][ T5225] Bluetooth: hci1: command tx timeout [ 60.571919][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.585399][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.597875][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.640340][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.651645][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.660473][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.670497][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.724320][ T5215] Bluetooth: hci3: command tx timeout [ 60.729814][ T5225] Bluetooth: hci2: command tx timeout [ 60.770110][ T5216] veth0_macvtap: entered promiscuous mode [ 60.784540][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.786062][ T5216] veth1_macvtap: entered promiscuous mode [ 60.800858][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.812482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.820522][ T5225] Bluetooth: hci4: command tx timeout [ 60.836520][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.892498][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.918800][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.929132][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.939711][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.950337][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.960909][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.971412][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.985849][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.998122][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.010044][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.027104][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.037799][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.048825][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.059440][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.070046][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.080940][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.091690][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107021][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.129955][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.140044][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.167217][ T5216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.173865][ T5291] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.178290][ T5216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.192742][ T5216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.222197][ T5216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.378527][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.397251][ T5291] usb 4-1: Using ep0 maxpacket: 32 [ 61.415417][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.455744][ T5291] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.465308][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.492827][ T5291] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.522896][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.537297][ T5291] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.546788][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.554806][ T5301] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.564303][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.579575][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.669000][ T5291] hub 4-1:4.0: USB hub found [ 61.714801][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.750257][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.916905][ T5291] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 62.265733][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 62.332669][ T5314] mmap: syz.2.9 (5314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.422553][ T5263] usb 4-1: USB disconnect, device number 2 [ 62.485853][ T5225] Bluetooth: hci0: command tx timeout [ 62.586814][ T5322] process 'syz.0.13' launched './file2' with NULL argv: empty string added [ 62.645331][ T5225] Bluetooth: hci1: command tx timeout [ 62.804182][ T5225] Bluetooth: hci2: command tx timeout [ 62.883931][ T5225] Bluetooth: hci4: command tx timeout [ 63.075686][ T1115] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.104593][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.239833][ T1115] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.331472][ T25] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 63.384019][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 63.423567][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 63.460275][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.493501][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.502576][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.538478][ T25] usb 1-1: config 0 descriptor?? [ 63.568652][ T5328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.683161][ T1115] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.733957][ T5262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.870153][ T1115] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.936892][ T5262] usb 4-1: config 0 has no interfaces? [ 63.979518][ T5215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.987597][ T5262] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.997944][ T5215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.007505][ T5215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.020547][ T5215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.035590][ T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 64.043648][ T5215] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.046133][ T5262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.055781][ T25] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 64.067141][ T5215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.124658][ T25] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 64.137843][ T5262] usb 4-1: Product: syz [ 64.153770][ T5262] usb 4-1: Manufacturer: syz [ 64.179030][ T5262] usb 4-1: SerialNumber: syz [ 64.232048][ T1115] bridge_slave_1: left allmulticast mode [ 64.241235][ T5262] usb 4-1: config 0 descriptor?? [ 64.244126][ T1115] bridge_slave_1: left promiscuous mode [ 64.264892][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.336613][ T1115] bridge_slave_0: left allmulticast mode [ 64.353672][ T1115] bridge_slave_0: left promiscuous mode [ 64.359469][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.368277][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.371006][ T5355] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 64.444462][ T5262] usb 1-1: USB disconnect, device number 2 [ 64.555819][ T5263] usb 4-1: USB disconnect, device number 3 [ 64.567221][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.587311][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.601504][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 64.618069][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.632245][ T47] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.646399][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.664826][ T47] usb 2-1: config 0 descriptor?? [ 64.792176][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.807519][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.819078][ T1115] bond0 (unregistering): Released all slaves [ 65.118233][ T47] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.126917][ T47] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 65.150302][ T47] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 65.281041][ T5365] lo: entered allmulticast mode [ 65.332048][ T5368] lo: left allmulticast mode [ 65.513840][ T1127] usb 2-1: USB disconnect, device number 2 [ 65.729923][ T5387] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.753047][ T2504] Bluetooth: hci5: Frame reassembly failed (-84) [ 65.890997][ T1115] hsr_slave_0: left promiscuous mode [ 65.914471][ T1115] hsr_slave_1: left promiscuous mode [ 65.926936][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.943431][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.955338][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.962770][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.002422][ T1115] veth1_macvtap: left promiscuous mode [ 66.034038][ T1115] veth0_macvtap: left promiscuous mode [ 66.039774][ T1115] veth1_vlan: left promiscuous mode [ 66.057365][ T1115] veth0_vlan: left promiscuous mode [ 66.164151][ T5215] Bluetooth: hci3: command tx timeout [ 66.198066][ T5402] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 66.207801][ T5402] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.36'. [ 67.061429][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 67.132303][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 67.403547][ T5229] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 67.431680][ T5414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.461078][ T5418] sch_tbf: burst 511 is lower than device veth1 mtu (1514) ! [ 67.510214][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 67.594040][ T5229] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 67.624012][ T5428] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.624491][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.672845][ T5229] usb 4-1: config 0 descriptor?? [ 67.733806][ T5428] sit0: entered promiscuous mode [ 67.765662][ T5215] Bluetooth: hci5: command 0x1003 tx timeout [ 67.768382][ T5428] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 67.772145][ T5225] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 67.867305][ T5428] netlink: 1 bytes leftover after parsing attributes in process `syz.1.46'. [ 68.094593][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.112753][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.145420][ T5229] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 68.157104][ T5347] bridge_slave_0: entered allmulticast mode [ 68.183071][ T5347] bridge_slave_0: entered promiscuous mode [ 68.205397][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.212738][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.237383][ T5347] bridge_slave_1: entered allmulticast mode [ 68.253622][ T5225] Bluetooth: hci3: command tx timeout [ 68.261474][ T5347] bridge_slave_1: entered promiscuous mode [ 68.313552][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.417320][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.443058][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.515782][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.552419][ T5229] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 68.562294][ T47] usb 1-1: config 0 has no interfaces? [ 68.573822][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.584103][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.603643][ T47] usb 1-1: config 0 descriptor?? [ 68.612991][ T5347] team0: Port device team_slave_0 added [ 68.791249][ T5463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.839194][ T8] usb 1-1: USB disconnect, device number 3 [ 69.015084][ T5347] team0: Port device team_slave_1 added [ 69.022282][ T5229] usb 4-1: USB disconnect, device number 4 [ 69.230666][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.253192][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.305316][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.375547][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.383467][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.438237][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.854790][ T5347] hsr_slave_0: entered promiscuous mode [ 69.909462][ T5347] hsr_slave_1: entered promiscuous mode [ 69.972203][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.980048][ T5347] Cannot create hsr debugfs directory [ 70.263417][ T5484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.327943][ T5225] Bluetooth: hci3: command tx timeout [ 70.642839][ T5495] syz.0.63[5495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.642986][ T5495] syz.0.63[5495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.807195][ T29] audit: type=1326 audit(1723942803.752:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5499 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bdc379e79 code=0x7ffc0000 [ 71.002179][ T29] audit: type=1326 audit(1723942803.752:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5499 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4bdc379e79 code=0x7ffc0000 [ 71.133416][ T29] audit: type=1326 audit(1723942803.842:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5499 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bdc379e79 code=0x7ffc0000 [ 71.228697][ T29] audit: type=1326 audit(1723942803.842:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5499 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bdc379e79 code=0x7ffc0000 [ 71.309530][ T29] audit: type=1326 audit(1723942803.842:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5507 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bdc3abf65 code=0x7ffc0000 [ 71.347599][ T29] audit: type=1326 audit(1723942804.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5507 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4bdc379e79 code=0x7ffc0000 [ 71.623448][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.630042][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.663453][ T5262] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.794167][ T5347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.818085][ T5347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.862901][ T5347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.876454][ T5262] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 71.902500][ T5262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.910870][ T5347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.970422][ T5262] usb 1-1: config 0 descriptor?? [ 72.237650][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.299931][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.369263][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.376616][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.409205][ T5225] Bluetooth: hci3: command tx timeout [ 72.414980][ T5262] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 72.485519][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.492732][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.624309][ T5552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.695510][ T5347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.811419][ T5262] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 73.183585][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.211948][ T8] usb 1-1: USB disconnect, device number 4 [ 73.268201][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.393650][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 73.434654][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.479338][ T47] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.512015][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.534288][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.558629][ T47] usb 3-1: Product: syz [ 73.580647][ T47] usb 3-1: Manufacturer: syz [ 73.593375][ T47] usb 3-1: SerialNumber: syz [ 73.851814][ T47] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.100946][ T47] usb 3-1: USB disconnect, device number 2 [ 74.134657][ T47] usblp0: removed [ 74.248589][ T5347] veth0_vlan: entered promiscuous mode [ 74.302587][ T5347] veth1_vlan: entered promiscuous mode [ 74.415971][ T5347] veth0_macvtap: entered promiscuous mode [ 74.452563][ T5347] veth1_macvtap: entered promiscuous mode [ 74.539669][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.580924][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.609705][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.622405][ T5607] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 74.638983][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.660251][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.683341][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.713650][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.733321][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.770627][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.821972][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.851018][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.862728][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.879138][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.914985][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.943470][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.975589][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.000021][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.025240][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.045247][ T5612] netlink: 'syz.0.88': attribute type 10 has an invalid length. [ 75.098985][ T5612] syz_tun: entered promiscuous mode [ 75.123588][ T5263] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.149515][ T5612] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 75.198033][ T5347] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.214420][ T5347] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223242][ T5347] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.232549][ T5347] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.333618][ T5263] usb 3-1: Using ep0 maxpacket: 16 [ 75.342793][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.356340][ T5263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.367216][ T5263] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 75.417170][ T5263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.438193][ T5263] usb 3-1: config 0 descriptor?? [ 75.560633][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.597961][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.694662][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.706306][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 75.725455][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.736013][ T2504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.773710][ T2504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.037412][ T5263] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 76.091497][ T5263] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 76.169362][ T5263] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 76.200857][ T5263] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0 [ 76.222341][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.249631][ T5263] waterforce 0003:1044:7A4D.0003: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 76.272557][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.363909][ T5263] waterforce 0003:1044:7A4D.0003: fw version request failed with -38 [ 76.415063][ T5263] usb 3-1: USB disconnect, device number 3 [ 76.618096][ T5674] vlan1: entered promiscuous mode [ 76.695951][ T5674] vlan1 (unregistering): left promiscuous mode [ 76.762134][ T9] cfg80211: failed to load regulatory.db [ 76.943087][ T3011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.375931][ T3011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.622526][ T3011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.864868][ T29] audit: type=1326 audit(1723942810.822:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5692 comm="syz.2.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bdc379e79 code=0x0 [ 77.909662][ T3011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.978234][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 77.992563][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 78.074775][ T5215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.095271][ T5710] macvlan0: entered promiscuous mode [ 78.102789][ T5215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.112294][ T5215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.133641][ T5215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.141928][ T5215] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.151386][ T5710] batadv_slave_0: entered promiscuous mode [ 78.157829][ T5215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.516377][ T5724] netlink: 5296 bytes leftover after parsing attributes in process `syz.1.115'. [ 78.527064][ T3011] bridge_slave_1: left allmulticast mode [ 78.532754][ T3011] bridge_slave_1: left promiscuous mode [ 78.577054][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.684405][ T3011] bridge_slave_0: left allmulticast mode [ 78.691577][ T3011] bridge_slave_0: left promiscuous mode [ 78.750022][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.264929][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.403040][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.417093][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.429066][ T3011] bond0 (unregistering): Released all slaves [ 79.463456][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 79.475810][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 79.499463][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.514269][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.545915][ T9] usb 1-1: config 0 descriptor?? [ 79.750257][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.789677][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.832249][ T47] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.864733][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.895672][ T47] usb 4-1: config 0 descriptor?? [ 79.922569][ T5712] chnl_net:caif_netlink_parms(): no params data found [ 80.029151][ T3011] hsr_slave_0: left promiscuous mode [ 80.052676][ T3011] hsr_slave_1: left promiscuous mode [ 80.069443][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.083755][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.118817][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.133594][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.177345][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.214798][ T3011] veth1_macvtap: left promiscuous mode [ 80.220394][ T3011] veth0_macvtap: left promiscuous mode [ 80.227413][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 80.253514][ T5225] Bluetooth: hci3: command tx timeout [ 80.269063][ T3011] veth1_vlan: left promiscuous mode [ 80.286641][ T3011] veth0_vlan: left promiscuous mode [ 80.290338][ T5786] UBIFS error (pid: 5786): cannot open "./file0", error -22 [ 80.333796][ T9] usb 1-1: USB disconnect, device number 5 [ 80.344483][ T47] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 80.394982][ T47] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input6 [ 80.558939][ T47] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 80.815599][ T1127] usb 4-1: USB disconnect, device number 5 [ 81.664401][ T3011] team0 (unregistering): Port device team_slave_1 removed [ 81.703569][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.751394][ T3011] team0 (unregistering): Port device team_slave_0 removed [ 81.893516][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 81.912896][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 82.323469][ T5225] Bluetooth: hci3: command tx timeout [ 83.459585][ T5785] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 83.712400][ T9] usb 2-1: string descriptor 0 read error: -71 [ 83.751389][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 83.808959][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.852290][ T9] usb 2-1: config 0 descriptor?? [ 83.866181][ T9] usb 2-1: can't set config #0, error -71 [ 83.874954][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.900402][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.912526][ T9] usb 2-1: USB disconnect, device number 3 [ 83.931795][ T5712] bridge_slave_0: entered allmulticast mode [ 83.940735][ T5712] bridge_slave_0: entered promiscuous mode [ 83.963106][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.971679][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.979228][ T5712] bridge_slave_1: entered allmulticast mode [ 83.990735][ T5712] bridge_slave_1: entered promiscuous mode [ 84.033429][ T942] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 84.095935][ T5712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.118919][ T5712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.219318][ T5712] team0: Port device team_slave_0 added [ 84.241555][ T5712] team0: Port device team_slave_1 added [ 84.259565][ T942] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 84.274890][ T942] usb 4-1: config 0 has no interface number 0 [ 84.303402][ T942] usb 4-1: config 0 interface 16 has no altsetting 0 [ 84.335545][ T942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 84.353868][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.375607][ T942] usb 4-1: Product: syz [ 84.379802][ T942] usb 4-1: Manufacturer: syz [ 84.395240][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.404154][ T5225] Bluetooth: hci3: command tx timeout [ 84.423149][ T942] usb 4-1: SerialNumber: syz [ 84.428102][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.454011][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.480920][ T942] usb 4-1: config 0 descriptor?? [ 84.491660][ T5712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.529627][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.560776][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.659794][ T5712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.761062][ T942] usbtest 4-1:0.16: couldn't get endpoints, -71 [ 84.792139][ T942] usbtest 4-1:0.16: probe with driver usbtest failed with error -71 [ 84.824770][ T942] usb 4-1: USB disconnect, device number 6 [ 84.861184][ T5712] hsr_slave_0: entered promiscuous mode [ 84.898017][ T5712] hsr_slave_1: entered promiscuous mode [ 84.948683][ T5712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.987196][ T5712] Cannot create hsr debugfs directory [ 85.099437][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 85.423450][ T942] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 85.647767][ T942] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 85.680612][ T942] usb 4-1: config 0 has no interface number 0 [ 85.701522][ T942] usb 4-1: config 0 interface 16 has no altsetting 0 [ 86.503354][ T5225] Bluetooth: hci3: command tx timeout [ 89.994539][ T942] usb 4-1: string descriptor 0 read error: -71 [ 90.031891][ T942] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 90.049188][ T5712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.063434][ T942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.136213][ T5712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.144476][ T942] usb 4-1: config 0 descriptor?? [ 90.166609][ T942] usb 4-1: can't set config #0, error -71 [ 90.186075][ T942] usb 4-1: USB disconnect, device number 7 [ 90.227306][ T5712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.316461][ T5712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.680042][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.742487][ T5712] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.780643][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.787867][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.793619][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.163'. [ 90.815219][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.822446][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.903370][ T942] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.093807][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 91.101875][ T942] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.107379][ T5712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.117716][ T942] usb 1-1: config 0 has no interface number 0 [ 91.135586][ T942] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.184293][ T942] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 91.213184][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.247891][ T942] usb 1-1: config 0 descriptor?? [ 91.272829][ T942] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 91.902108][ T5712] veth0_vlan: entered promiscuous mode [ 91.949026][ T5712] veth1_vlan: entered promiscuous mode [ 92.062450][ T5941] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 92.069231][ T5941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.074193][ T5712] veth0_macvtap: entered promiscuous mode [ 92.136637][ T5941] vhci_hcd vhci_hcd.0: Device attached [ 92.146032][ T5712] veth1_macvtap: entered promiscuous mode [ 92.234617][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.274111][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.284385][ T5941] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 92.290920][ T5941] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.307291][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.324339][ T5952] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 92.330874][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.341028][ T942] vhci_hcd: vhci_device speed not set [ 92.353860][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.374068][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.391868][ T5941] vhci_hcd vhci_hcd.0: Device attached [ 92.393145][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 92.407412][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.424292][ T942] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 92.445916][ T5958] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 92.452549][ T5958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.463510][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.489291][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.516526][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.529191][ T5958] vhci_hcd vhci_hcd.0: Device attached [ 92.564913][ T5952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.568503][ T5941] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 92.579852][ T5941] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 92.596837][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.628144][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.650910][ T5941] vhci_hcd vhci_hcd.0: Device attached [ 92.684136][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.718284][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.764776][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.803352][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.823394][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.835375][ T5262] usb 1-1: USB disconnect, device number 6 [ 92.839401][ T5953] vhci_hcd: connection closed [ 92.842578][ T5967] vhci_hcd: connection closed [ 92.851231][ T35] vhci_hcd: stop threads [ 92.858353][ T5262] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 92.869400][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.876699][ T5943] vhci_hcd: connection reset by peer [ 92.879243][ T5949] vhci_hcd: connection closed [ 92.885571][ T5961] vhci_hcd: connection closed [ 92.895492][ T35] vhci_hcd: release socket [ 92.912610][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.928981][ T35] vhci_hcd: disconnect device [ 92.941610][ T35] vhci_hcd: stop threads [ 92.958881][ T5712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966435][ T35] vhci_hcd: release socket [ 92.970840][ T5712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.984666][ T35] vhci_hcd: disconnect device [ 92.996149][ T35] vhci_hcd: stop threads [ 93.000154][ T5712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.004908][ T35] vhci_hcd: release socket [ 93.024946][ T35] vhci_hcd: disconnect device [ 93.029299][ T5712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.040001][ T35] vhci_hcd: stop threads [ 93.045695][ T35] vhci_hcd: release socket [ 93.050299][ T35] vhci_hcd: disconnect device [ 93.068960][ T35] vhci_hcd: stop threads [ 93.089459][ T35] vhci_hcd: release socket [ 93.125026][ T35] vhci_hcd: disconnect device [ 93.261378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.282092][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.338822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.355037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.813494][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 94.953003][ T25] usb 4-1: device descriptor read/all, error -71 [ 95.746967][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.046601][ T6046] batadv_slave_1: entered allmulticast mode [ 96.070193][ T6046] pim6reg: entered allmulticast mode [ 96.122337][ T6046] pim6reg: left allmulticast mode [ 96.138105][ T6046] batadv_slave_1: left allmulticast mode [ 96.604472][ T5215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.633711][ T5215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.645777][ T5215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.658607][ T5215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.664993][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.680651][ T5215] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.692494][ T5215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.934059][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.171219][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.195748][ T5263] kernel write not supported for file bpf-prog (pid: 5263 comm: kworker/0:6) [ 97.603984][ T942] vhci_hcd: vhci_device speed not set [ 97.611523][ T35] bridge_slave_1: left allmulticast mode [ 97.637226][ T35] bridge_slave_1: left promiscuous mode [ 97.643072][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.653694][ T5264] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.667616][ T35] bridge_slave_0: left allmulticast mode [ 97.673749][ T35] bridge_slave_0: left promiscuous mode [ 97.679507][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.713511][ T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.853695][ T5264] usb 2-1: Using ep0 maxpacket: 16 [ 97.865291][ T5264] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 97.882028][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.898408][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.920254][ T5264] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.933901][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.960837][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.984950][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.993347][ T5264] usb 2-1: Product: syz [ 98.009788][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.011503][ T5264] usb 2-1: Manufacturer: syz [ 98.034286][ T5264] usb 2-1: SerialNumber: syz [ 98.053768][ T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.054519][ T5264] usb 2-1: config 0 descriptor?? [ 98.076832][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.099325][ T5264] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 98.108330][ T47] usb 4-1: config 0 descriptor?? [ 98.120192][ T5264] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 98.344154][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.379603][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.393087][ T35] bond0 (unregistering): Released all slaves [ 98.574688][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.588409][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.598861][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.607245][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.618879][ T6130] batadv_slave_1: entered promiscuous mode [ 98.625563][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.640480][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.651883][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.665317][ T6064] chnl_net:caif_netlink_parms(): no params data found [ 98.679198][ T6125] batadv_slave_1: left promiscuous mode [ 98.685968][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.694475][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.711930][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.723573][ T5225] Bluetooth: hci3: command tx timeout [ 98.746524][ T5264] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 98.762680][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.765462][ T5264] em28xx 2-1:0.0: Config register raw data: 0x56 [ 98.775709][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.784808][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.792569][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.800374][ T47] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 98.809176][ T47] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 98.842915][ T47] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 98.974834][ T9] usb usb14-port1: attempt power cycle [ 99.011406][ T5264] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 99.036639][ T5264] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 99.080075][ T35] hsr_slave_0: left promiscuous mode [ 99.084381][ T5264] em28xx 2-1:0.0: No AC97 audio processor [ 99.101814][ T35] hsr_slave_1: left promiscuous mode [ 99.121955][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.133830][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.160769][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.179261][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.225890][ T35] veth1_macvtap: left promiscuous mode [ 99.240213][ T35] veth0_macvtap: left promiscuous mode [ 99.247293][ T35] veth1_vlan: left promiscuous mode [ 99.262274][ T35] veth0_vlan: left promiscuous mode [ 99.266844][ T5263] usb 2-1: USB disconnect, device number 4 [ 99.275677][ T5263] em28xx 2-1:0.0: Disconnecting em28xx [ 99.300233][ T5263] em28xx 2-1:0.0: Freeing device [ 99.414744][ T47] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.616369][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.629054][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 99.640027][ T47] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 99.656076][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.62 [ 99.663728][ T9] usb usb14-port1: unable to enumerate USB device [ 99.671657][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.682479][ T47] usb 3-1: Product: syz [ 99.694192][ T47] usb 3-1: Manufacturer: syz [ 99.698886][ T47] usb 3-1: SerialNumber: syz [ 99.715843][ T6146] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 99.827641][ T35] team0 (unregistering): Port device team_slave_1 removed [ 99.920973][ T35] team0 (unregistering): Port device team_slave_0 removed [ 99.939774][ T6146] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 100.558720][ T6146] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 100.589029][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.608764][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.616959][ T6064] bridge_slave_0: entered allmulticast mode [ 100.628552][ T6064] bridge_slave_0: entered promiscuous mode [ 100.637905][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.648470][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.656420][ T6064] bridge_slave_1: entered allmulticast mode [ 100.664736][ T6064] bridge_slave_1: entered promiscuous mode [ 100.764662][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.777463][ T47] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 100.787147][ T47] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 100.795181][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.804552][ T5225] Bluetooth: hci3: command tx timeout [ 100.912728][ T6064] team0: Port device team_slave_0 added [ 100.955103][ T6064] team0: Port device team_slave_1 added [ 100.989895][ T47] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 101.037560][ T47] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 101.051923][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.060161][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.096568][ T47] usb 3-1: USB disconnect, device number 4 [ 101.104321][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.116147][ T47] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 101.139237][ T942] usb 4-1: USB disconnect, device number 10 [ 101.146033][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.153009][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.190601][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.332086][ T6064] hsr_slave_0: entered promiscuous mode [ 101.360049][ T6064] hsr_slave_1: entered promiscuous mode [ 101.370688][ T6064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.379092][ T6064] Cannot create hsr debugfs directory [ 102.288013][ T6064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.353015][ T6064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.421898][ T6064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.461804][ T6064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.709135][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.766069][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.799860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.807050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.869185][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.876410][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.887598][ T5225] Bluetooth: hci3: command tx timeout [ 103.555994][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.033385][ T5264] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.137380][ T6064] veth0_vlan: entered promiscuous mode [ 104.145379][ T6271] binder: 6270:6271 ioctl c0306201 20000080 returned -14 [ 104.218771][ T6064] veth1_vlan: entered promiscuous mode [ 104.263812][ T5264] usb 1-1: Using ep0 maxpacket: 32 [ 104.274013][ T5264] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 104.292895][ T5264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.312383][ T5264] usb 1-1: Product: syz [ 104.321652][ T5264] usb 1-1: Manufacturer: syz [ 104.343100][ T5264] usb 1-1: SerialNumber: syz [ 104.366342][ T6064] veth0_macvtap: entered promiscuous mode [ 104.414721][ T6064] veth1_macvtap: entered promiscuous mode [ 104.466766][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.512633][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.532528][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.547872][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.558066][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.569802][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.583230][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.594260][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.607003][ T5264] aqc111 1-1:1.0: probe with driver aqc111 failed with error -22 [ 104.615354][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.628940][ T5264] usb 1-1: USB disconnect, device number 7 [ 104.641751][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.672175][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.685456][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.704632][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.731569][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.741789][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.752557][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.762661][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.776216][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.789883][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.807113][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 104.814394][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 104.836090][ T6064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.850739][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.871995][ T6064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.882860][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 104.893355][ T6064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.902897][ T6064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.921064][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 104.932954][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.958998][ T9] usb 2-1: config 0 descriptor?? [ 104.964665][ T5225] Bluetooth: hci3: command tx timeout [ 105.102107][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.121303][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.201571][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.211454][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.403334][ T5263] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 105.587061][ T6277] netlink: 104 bytes leftover after parsing attributes in process `syz.1.278'. [ 105.634666][ T9] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0006/input/input8 [ 105.652882][ T9] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0006/input/input9 [ 105.727147][ T9] kye 0003:0458:5005.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 105.753058][ T9] usb 2-1: USB disconnect, device number 5 [ 105.821272][ T5263] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.869937][ T5263] usb 4-1: config 0 has no interface number 0 [ 105.896190][ T5263] usb 4-1: config 0 interface 1 has no altsetting 0 [ 105.910061][ T5263] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 105.927383][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.938858][ T5263] usb 4-1: config 0 descriptor?? [ 105.961052][ T5263] cp210x 4-1:0.1: cp210x converter detected [ 106.077393][ T6315] mkiss: ax0: crc mode is auto. [ 106.370892][ T5263] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 107.561842][ T2504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.599605][ T6328] vivid-003: disconnect [ 107.654688][ T5291] vivid-003: reconnect [ 108.271034][ T6336] 9pnet: p9_errstr2errno: server reported unknown error [ 108.407476][ T2504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.529403][ T2504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.536368][ T6343] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 108.589133][ T5263] cp210x 4-1:0.1: failed to get vendor val 0x3711 size 2: -71 [ 108.628408][ T5263] cp210x 4-1:0.1: GPIO initialisation failed: -71 [ 108.683974][ T5263] usb 4-1: cp210x converter now attached to ttyUSB0 [ 108.739642][ T5263] usb 4-1: USB disconnect, device number 11 [ 108.774486][ T5263] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.800023][ T5263] cp210x 4-1:0.1: device disconnected [ 108.800673][ T2504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.882134][ T5215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.914313][ T5215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.922990][ T5215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.932374][ T5215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.941965][ T5215] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.949408][ T5215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.149210][ T2504] bridge_slave_1: left allmulticast mode [ 109.154998][ T942] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.166910][ T2504] bridge_slave_1: left promiscuous mode [ 109.172689][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.184403][ T2504] bridge_slave_0: left allmulticast mode [ 109.190162][ T2504] bridge_slave_0: left promiscuous mode [ 109.202159][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.368163][ T942] usb 2-1: Using ep0 maxpacket: 16 [ 109.377538][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.401178][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.412610][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.461720][ T942] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 109.477601][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.508082][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.534797][ T942] usb 2-1: config 0 descriptor?? [ 109.721286][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.763145][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.793974][ T25] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.812606][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.876926][ T25] usb 1-1: config 0 descriptor?? [ 109.956107][ T942] uclogic 0003:5543:0064.0007: item fetching failed at offset 10/11 [ 109.970304][ T942] uclogic 0003:5543:0064.0007: parse failed [ 109.978115][ T942] uclogic 0003:5543:0064.0007: probe with driver uclogic failed with error -22 [ 110.168603][ T5264] usb 2-1: USB disconnect, device number 6 [ 110.185210][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.199590][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.210675][ T2504] bond0 (unregistering): Released all slaves [ 110.337097][ T25] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 110.403557][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input10 [ 110.600409][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 110.610773][ T25] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 110.910981][ T25] usb 1-1: USB disconnect, device number 8 [ 111.043394][ T5225] Bluetooth: hci3: command tx timeout [ 111.155163][ T2504] hsr_slave_0: left promiscuous mode [ 111.194735][ T2504] hsr_slave_1: left promiscuous mode [ 111.201157][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.213130][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.224113][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.231524][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.286955][ T2504] veth1_macvtap: left promiscuous mode [ 111.292529][ T2504] veth0_macvtap: left promiscuous mode [ 111.311896][ T2504] veth1_vlan: left promiscuous mode [ 111.333513][ T2504] veth0_vlan: left promiscuous mode [ 112.483702][ T5264] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.533185][ T6455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.554975][ T2504] team0 (unregistering): Port device team_slave_1 removed [ 112.624464][ T2504] team0 (unregistering): Port device team_slave_0 removed [ 112.687733][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.709868][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.731728][ T5264] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.750551][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.782766][ T5264] usb 4-1: config 0 descriptor?? [ 113.133872][ T5225] Bluetooth: hci3: command tx timeout [ 113.241152][ T5264] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 113.262891][ T5264] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input11 [ 113.395574][ T6473] ptrace attach of "./syz-executor exec"[5216] was attempted by ""[6473] [ 113.474941][ T5264] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 113.578272][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.643398][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.673536][ T6354] bridge_slave_0: entered allmulticast mode [ 113.680902][ T6354] bridge_slave_0: entered promiscuous mode [ 114.553391][ T9] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 115.234147][ T5225] Bluetooth: hci3: command tx timeout [ 116.714872][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.732632][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.753681][ T6354] bridge_slave_1: entered allmulticast mode [ 116.760947][ T6354] bridge_slave_1: entered promiscuous mode [ 116.891092][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.907781][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.056830][ T6354] team0: Port device team_slave_0 added [ 117.092328][ T6354] team0: Port device team_slave_1 added [ 117.147979][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.165491][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.207707][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.221153][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.228345][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.280125][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.283908][ T5225] Bluetooth: hci3: command tx timeout [ 117.347630][ T5264] usb 4-1: USB disconnect, device number 12 [ 117.372112][ T6354] hsr_slave_0: entered promiscuous mode [ 117.386960][ T6354] hsr_slave_1: entered promiscuous mode [ 117.412066][ T6354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.423159][ T6354] Cannot create hsr debugfs directory [ 117.486418][ T5212] bond0: (slave syz_tun): Releasing backup interface [ 117.676460][ T2504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.785016][ T2504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.933197][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.948288][ T2504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.069595][ T2504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.135211][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 118.159322][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.184749][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.211845][ T9] usb 3-1: Product: syz [ 118.228405][ T9] usb 3-1: Manufacturer: syz [ 118.237725][ T9] usb 3-1: SerialNumber: syz [ 118.272000][ T5215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.287113][ T5215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.295198][ T5215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.309337][ T5215] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.319205][ T5215] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.329345][ T5215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.433572][ T2504] bridge_slave_1: left allmulticast mode [ 118.465509][ T2504] bridge_slave_1: left promiscuous mode [ 118.471305][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.508142][ T2504] bridge_slave_0: left allmulticast mode [ 118.519671][ T2504] bridge_slave_0: left promiscuous mode [ 118.526485][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.701875][ T9] cdc_ncm 3-1:1.0: bind() failure [ 118.757274][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 118.790601][ T9] cdc_ncm 3-1:1.1: bind() failure [ 118.820970][ T6530] ================================================================== [ 118.829091][ T6530] BUG: KASAN: slab-use-after-free in ip6_send_skb+0x18d/0x230 [ 118.836580][ T6530] Read of size 8 at addr ffff88806dde4858 by task syz.1.380/6530 [ 118.844301][ T6530] [ 118.846639][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.1.380 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 118.857241][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.867310][ T6530] Call Trace: [ 118.870592][ T6530] [ 118.873519][ T6530] dump_stack_lvl+0x241/0x360 [ 118.878190][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.883380][ T6530] ? __pfx__printk+0x10/0x10 [ 118.887964][ T6530] ? _printk+0xd5/0x120 [ 118.892117][ T6530] ? __virt_addr_valid+0x183/0x530 [ 118.897221][ T6530] ? __virt_addr_valid+0x183/0x530 [ 118.902316][ T6530] print_report+0x169/0x550 [ 118.906809][ T6530] ? __virt_addr_valid+0x183/0x530 [ 118.911905][ T6530] ? __virt_addr_valid+0x183/0x530 [ 118.916999][ T6530] ? __virt_addr_valid+0x45f/0x530 [ 118.922122][ T6530] ? __phys_addr+0xba/0x170 [ 118.926616][ T6530] ? ip6_send_skb+0x18d/0x230 [ 118.931300][ T6530] kasan_report+0x143/0x180 [ 118.935828][ T6530] ? ip6_send_skb+0x18d/0x230 [ 118.940506][ T6530] ip6_send_skb+0x18d/0x230 [ 118.945003][ T6530] rawv6_push_pending_frames+0x75c/0x9e0 [ 118.950631][ T6530] ? lockdep_hardirqs_on+0x99/0x150 [ 118.955828][ T6530] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 118.962065][ T6530] ? __pfx_raw6_getfrag+0x10/0x10 [ 118.967092][ T6530] rawv6_sendmsg+0x19c7/0x23c0 [ 118.971857][ T6530] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 118.976955][ T6530] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 118.982672][ T6530] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 118.989087][ T6530] ? inet_sendmsg+0x330/0x390 [ 118.993756][ T6530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.999035][ T6530] ? security_socket_sendmsg+0x87/0xb0 [ 119.004575][ T6530] __sock_sendmsg+0x1a6/0x270 [ 119.009271][ T6530] sock_write_iter+0x2dd/0x400 [ 119.014039][ T6530] ? __pfx_sock_write_iter+0x10/0x10 [ 119.019321][ T6530] ? futex_wait_queue+0x14e/0x1d0 [ 119.024339][ T6530] ? futex_unqueue+0xcb/0xf0 [ 119.028962][ T6530] do_iter_readv_writev+0x60a/0x890 [ 119.034164][ T6530] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 119.039882][ T6530] ? bpf_lsm_file_permission+0x9/0x10 [ 119.045364][ T6530] ? security_file_permission+0x7f/0xa0 [ 119.050906][ T6530] ? rw_verify_area+0x1d2/0x6b0 [ 119.055752][ T6530] vfs_writev+0x37c/0xbb0 [ 119.060080][ T6530] ? __pfx_lock_acquire+0x10/0x10 [ 119.065101][ T6530] ? __pfx_vfs_writev+0x10/0x10 [ 119.069951][ T6530] ? __fget_files+0x29/0x470 [ 119.074541][ T6530] do_writev+0x1b1/0x350 [ 119.078777][ T6530] ? __pfx_do_writev+0x10/0x10 [ 119.083531][ T6530] ? do_syscall_64+0x100/0x230 [ 119.088284][ T6530] ? do_syscall_64+0xb6/0x230 [ 119.092951][ T6530] do_syscall_64+0xf3/0x230 [ 119.097444][ T6530] ? clear_bhb_loop+0x35/0x90 [ 119.102113][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.108096][ T6530] RIP: 0033:0x7f936bf79e79 [ 119.112510][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.132287][ T6530] RSP: 002b:00007f936cd7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 119.140703][ T6530] RAX: ffffffffffffffda RBX: 00007f936c115f80 RCX: 00007f936bf79e79 [ 119.148663][ T6530] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 [ 119.156632][ T6530] RBP: 00007f936bfe7916 R08: 0000000000000000 R09: 0000000000000000 [ 119.164628][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.172587][ T6530] R13: 0000000000000000 R14: 00007f936c115f80 R15: 00007fff2860a7a8 [ 119.180555][ T6530] [ 119.183562][ T6530] [ 119.185871][ T6530] Allocated by task 6530: [ 119.190192][ T6530] kasan_save_track+0x3f/0x80 [ 119.194868][ T6530] __kasan_slab_alloc+0x66/0x80 [ 119.199710][ T6530] kmem_cache_alloc_noprof+0x135/0x2a0 [ 119.205165][ T6530] dst_alloc+0x12b/0x190 [ 119.209401][ T6530] ip6_blackhole_route+0x59/0x340 [ 119.214421][ T6530] xfrm_lookup_route+0xd1/0x1c0 [ 119.219302][ T6530] ip6_dst_lookup_flow+0x13e/0x180 [ 119.224411][ T6530] rawv6_sendmsg+0x1283/0x23c0 [ 119.229165][ T6530] __sock_sendmsg+0x1a6/0x270 [ 119.233834][ T6530] ____sys_sendmsg+0x525/0x7d0 [ 119.238591][ T6530] __sys_sendmsg+0x2b0/0x3a0 [ 119.243175][ T6530] do_syscall_64+0xf3/0x230 [ 119.247669][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.253552][ T6530] [ 119.255863][ T6530] Freed by task 45: [ 119.259650][ T6530] kasan_save_track+0x3f/0x80 [ 119.264314][ T6530] kasan_save_free_info+0x40/0x50 [ 119.269509][ T6530] poison_slab_object+0xe0/0x150 [ 119.274432][ T6530] __kasan_slab_free+0x37/0x60 [ 119.279188][ T6530] kmem_cache_free+0x145/0x350 [ 119.284206][ T6530] dst_destroy+0x2ac/0x460 [ 119.288609][ T6530] rcu_core+0xafd/0x1830 [ 119.292840][ T6530] handle_softirqs+0x2c4/0x970 [ 119.297590][ T6530] __irq_exit_rcu+0xf4/0x1c0 [ 119.302168][ T6530] irq_exit_rcu+0x9/0x30 [ 119.306397][ T6530] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.312022][ T6530] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.317990][ T6530] [ 119.320300][ T6530] Last potentially related work creation: [ 119.326000][ T6530] kasan_save_stack+0x3f/0x60 [ 119.330660][ T6530] __kasan_record_aux_stack+0xac/0xc0 [ 119.336025][ T6530] call_rcu+0x167/0xa70 [ 119.340179][ T6530] nf_ct_frag6_gather+0xb9a/0x2080 [ 119.345290][ T6530] ipv6_defrag+0x2c8/0x3c0 [ 119.349775][ T6530] nf_hook_slow+0xc3/0x220 [ 119.354180][ T6530] __ip6_local_out+0x6fa/0x800 [ 119.358928][ T6530] ip6_local_out+0x26/0x70 [ 119.363331][ T6530] ip6_send_skb+0x112/0x230 [ 119.367818][ T6530] rawv6_push_pending_frames+0x75c/0x9e0 [ 119.373435][ T6530] rawv6_sendmsg+0x19c7/0x23c0 [ 119.378180][ T6530] __sock_sendmsg+0x1a6/0x270 [ 119.382844][ T6530] sock_write_iter+0x2dd/0x400 [ 119.387596][ T6530] do_iter_readv_writev+0x60a/0x890 [ 119.392835][ T6530] vfs_writev+0x37c/0xbb0 [ 119.397155][ T6530] do_writev+0x1b1/0x350 [ 119.401383][ T6530] do_syscall_64+0xf3/0x230 [ 119.405868][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.411747][ T6530] [ 119.414056][ T6530] The buggy address belongs to the object at ffff88806dde4780 [ 119.414056][ T6530] which belongs to the cache ip6_dst_cache of size 232 [ 119.428265][ T6530] The buggy address is located 216 bytes inside of [ 119.428265][ T6530] freed 232-byte region [ffff88806dde4780, ffff88806dde4868) [ 119.442047][ T6530] [ 119.444358][ T6530] The buggy address belongs to the physical page: [ 119.450762][ T6530] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6dde4 [ 119.459508][ T6530] memcg:ffff888020096381 [ 119.463727][ T6530] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 119.471172][ T6530] page_type: 0xfdffffff(slab) [ 119.475836][ T6530] raw: 00fff00000000000 ffff88802943b8c0 ffffea000074b480 dead000000000003 [ 119.484403][ T6530] raw: 0000000000000000 00000000000c000c 00000001fdffffff ffff888020096381 [ 119.492964][ T6530] page dumped because: kasan: bad access detected [ 119.499354][ T6530] page_owner tracks the page as allocated [ 119.505059][ T6530] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12, tgid 12 (kworker/u8:1), ts 63112244628, free_ts 63109363580 [ 119.525359][ T6530] post_alloc_hook+0x1f3/0x230 [ 119.530110][ T6530] get_page_from_freelist+0x2e4c/0x2f10 [ 119.535652][ T6530] __alloc_pages_noprof+0x256/0x6c0 [ 119.540837][ T6530] alloc_slab_page+0x5f/0x120 [ 119.545502][ T6530] allocate_slab+0x5a/0x2f0 [ 119.549996][ T6530] ___slab_alloc+0xcd1/0x14b0 [ 119.554661][ T6530] __slab_alloc+0x58/0xa0 [ 119.558978][ T6530] kmem_cache_alloc_noprof+0x1c1/0x2a0 [ 119.564425][ T6530] dst_alloc+0x12b/0x190 [ 119.568654][ T6530] icmp6_dst_alloc+0x77/0x420 [ 119.573318][ T6530] mld_sendpack+0x6a3/0xdb0 [ 119.577809][ T6530] ipv6_mc_dad_complete+0x88/0x490 [ 119.582905][ T6530] addrconf_dad_completed+0x712/0xcd0 [ 119.588296][ T6530] addrconf_dad_work+0xdc2/0x16f0 [ 119.593396][ T6530] process_scheduled_works+0xa2c/0x1830 [ 119.598927][ T6530] worker_thread+0x86d/0xd40 [ 119.603508][ T6530] page last free pid 5211 tgid 5211 stack trace: [ 119.609824][ T6530] free_unref_page+0xd19/0xea0 [ 119.614576][ T6530] vfree+0x186/0x2e0 [ 119.618457][ T6530] kcov_close+0x2b/0x50 [ 119.622600][ T6530] __fput+0x24a/0x8a0 [ 119.626568][ T6530] task_work_run+0x24f/0x310 [ 119.631173][ T6530] do_exit+0xa2f/0x27f0 [ 119.635312][ T6530] do_group_exit+0x207/0x2c0 [ 119.639883][ T6530] __x64_sys_exit_group+0x3f/0x40 [ 119.644910][ T6530] x64_sys_call+0x2634/0x2640 [ 119.649578][ T6530] do_syscall_64+0xf3/0x230 [ 119.654086][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.659994][ T6530] [ 119.662394][ T6530] Memory state around the buggy address: [ 119.668006][ T6530] ffff88806dde4700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 119.676047][ T6530] ffff88806dde4780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 119.684090][ T6530] >ffff88806dde4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 119.692132][ T6530] ^ [ 119.699049][ T6530] ffff88806dde4880: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 119.707091][ T6530] ffff88806dde4900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 119.715131][ T6530] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.767695][ T9] usb 3-1: USB disconnect, device number 5 [ 119.784698][ T6530] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.791917][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.1.380 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 [ 119.802491][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.812616][ T6530] Call Trace: [ 119.815889][ T6530] [ 119.818807][ T6530] dump_stack_lvl+0x241/0x360 [ 119.823481][ T6530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.828663][ T6530] ? __pfx__printk+0x10/0x10 [ 119.833248][ T6530] ? preempt_schedule+0xe1/0xf0 [ 119.838101][ T6530] ? vscnprintf+0x5d/0x90 [ 119.842418][ T6530] panic+0x349/0x860 [ 119.846309][ T6530] ? check_panic_on_warn+0x21/0xb0 [ 119.851407][ T6530] ? __pfx_panic+0x10/0x10 [ 119.855822][ T6530] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 119.861795][ T6530] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.868113][ T6530] ? print_report+0x502/0x550 [ 119.872783][ T6530] check_panic_on_warn+0x86/0xb0 [ 119.877708][ T6530] ? ip6_send_skb+0x18d/0x230 [ 119.882373][ T6530] end_report+0x77/0x160 [ 119.886607][ T6530] kasan_report+0x154/0x180 [ 119.891114][ T6530] ? ip6_send_skb+0x18d/0x230 [ 119.895783][ T6530] ip6_send_skb+0x18d/0x230 [ 119.900274][ T6530] rawv6_push_pending_frames+0x75c/0x9e0 [ 119.905892][ T6530] ? lockdep_hardirqs_on+0x99/0x150 [ 119.911174][ T6530] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 119.917314][ T6530] ? __pfx_raw6_getfrag+0x10/0x10 [ 119.922329][ T6530] rawv6_sendmsg+0x19c7/0x23c0 [ 119.927094][ T6530] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 119.932195][ T6530] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 119.937911][ T6530] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 119.944331][ T6530] ? inet_sendmsg+0x330/0x390 [ 119.949003][ T6530] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 119.954278][ T6530] ? security_socket_sendmsg+0x87/0xb0 [ 119.959732][ T6530] __sock_sendmsg+0x1a6/0x270 [ 119.964406][ T6530] sock_write_iter+0x2dd/0x400 [ 119.969166][ T6530] ? __pfx_sock_write_iter+0x10/0x10 [ 119.974446][ T6530] ? futex_wait_queue+0x14e/0x1d0 [ 119.979460][ T6530] ? futex_unqueue+0xcb/0xf0 [ 119.984039][ T6530] do_iter_readv_writev+0x60a/0x890 [ 119.989239][ T6530] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 119.994955][ T6530] ? bpf_lsm_file_permission+0x9/0x10 [ 120.000317][ T6530] ? security_file_permission+0x7f/0xa0 [ 120.005854][ T6530] ? rw_verify_area+0x1d2/0x6b0 [ 120.010701][ T6530] vfs_writev+0x37c/0xbb0 [ 120.015027][ T6530] ? __pfx_lock_acquire+0x10/0x10 [ 120.020041][ T6530] ? __pfx_vfs_writev+0x10/0x10 [ 120.024886][ T6530] ? __fget_files+0x29/0x470 [ 120.029470][ T6530] do_writev+0x1b1/0x350 [ 120.033705][ T6530] ? __pfx_do_writev+0x10/0x10 [ 120.038457][ T6530] ? do_syscall_64+0x100/0x230 [ 120.043207][ T6530] ? do_syscall_64+0xb6/0x230 [ 120.047878][ T6530] do_syscall_64+0xf3/0x230 [ 120.052369][ T6530] ? clear_bhb_loop+0x35/0x90 [ 120.057041][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.062933][ T6530] RIP: 0033:0x7f936bf79e79 [ 120.067336][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.086930][ T6530] RSP: 002b:00007f936cd7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.095346][ T6530] RAX: ffffffffffffffda RBX: 00007f936c115f80 RCX: 00007f936bf79e79 [ 120.103307][ T6530] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 [ 120.111262][ T6530] RBP: 00007f936bfe7916 R08: 0000000000000000 R09: 0000000000000000 [ 120.119219][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.127176][ T6530] R13: 0000000000000000 R14: 00007f936c115f80 R15: 00007fff2860a7a8 [ 120.135143][ T6530] [ 120.138360][ T6530] Kernel Offset: disabled [ 120.142671][ T6530] Rebooting in 86400 seconds..