last executing test programs: 5.813595137s ago: executing program 2 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5.013729017s ago: executing program 1 (id=482): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.894615762s ago: executing program 2 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000002000010000000000f1ffffff0a144000000000070000000014000200fc020000000000000000000000008b0014000100200100000000000000000000000000010c00140017", @ANYRES32=0x0, @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0xc011}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 3.978207504s ago: executing program 2 (id=486): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b2472294", 0x5c}], 0x1}, 0x0) 3.824180301s ago: executing program 4 (id=487): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0x4, 0x28, {0x28, 0x2, "316e94656ee689bd048abfff513901d98ec9e04e736051038d005d62a10b137c981c87b343d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.698690747s ago: executing program 2 (id=488): r0 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000700)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x1, 0x1182, 0x3, 0x6, 0x2, 0x4, 0x4, 0x4}) 3.36017956s ago: executing program 2 (id=491): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x8, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.846612906s ago: executing program 1 (id=494): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}, 0x4000081) 2.496285785s ago: executing program 3 (id=497): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x114) 2.246008843s ago: executing program 3 (id=498): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002100)={0xc, {"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", 0x1000}}, 0x1006) 1.843827919s ago: executing program 0 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b29bd7000fddbdf2505000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 1.762392303s ago: executing program 1 (id=500): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.749866104s ago: executing program 4 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000090ff0000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 1.674789354s ago: executing program 0 (id=502): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r0, 0xffffffffffffffff, 0x43) syz_open_dev$I2C(0x0, 0x0, 0x88500) 1.564558855s ago: executing program 3 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1.51817343s ago: executing program 0 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b0400000000000000000200fffe44000480400001800700010063740000340002800800014000000002080002400000000d05000300010000000500030001000000050003000000000008000140000000080900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.351025911s ago: executing program 4 (id=505): syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1.298381006s ago: executing program 2 (id=506): setresuid(0x0, 0xee00, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18}}], 0x18}, 0x440e0) 1.209213428s ago: executing program 1 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1.198585862s ago: executing program 0 (id=508): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)) 1.155304605s ago: executing program 3 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x8000, 0x8}) 1.15277172s ago: executing program 4 (id=510): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 467.757766ms ago: executing program 0 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 459.533703ms ago: executing program 1 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 457.068478ms ago: executing program 3 (id=513): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xff32, &(0x7f0000000380)) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) 456.267883ms ago: executing program 4 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 293.506816ms ago: executing program 3 (id=515): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2b, 0x1, 0x1) bind$inet(r0, 0x0, 0x0) 129.309911ms ago: executing program 0 (id=516): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 123.951891ms ago: executing program 1 (id=517): setrlimit(0x7, &(0x7f0000000180)={0x2, 0x101}) socketpair$unix(0x1, 0x2, 0x0, 0x0) memfd_secret(0x0) 0s ago: executing program 4 (id=518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000001100)=[{0x48, 0x37, 0x0, 0x9}, {0x28, 0x1, 0xf7, 0xffffb00c}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xa052) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 91.403549][ T5783] cgroup: Unknown subsys name 'net' [ 91.667120][ T5783] cgroup: Unknown subsys name 'cpuset' [ 91.719111][ T5783] cgroup: Unknown subsys name 'rlimit' [ 92.015207][ T31] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.777811][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.535417][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.555654][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.556466][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.573787][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.575012][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.735813][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.769066][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.816211][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.846366][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.889764][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.890657][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.894059][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.897507][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.898222][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.915754][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.919374][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.922603][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.928808][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.954972][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.020479][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.021277][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.022099][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.058234][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.079131][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.080472][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.014430][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 99.297175][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 99.374509][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 99.387939][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 99.416422][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 99.521112][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.522353][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.522502][ T5796] bridge_slave_0: entered allmulticast mode [ 99.524555][ T5796] bridge_slave_0: entered promiscuous mode [ 99.615053][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.615180][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.615351][ T5796] bridge_slave_1: entered allmulticast mode [ 99.617484][ T5796] bridge_slave_1: entered promiscuous mode [ 99.670341][ T5810] Bluetooth: hci0: command tx timeout [ 99.812121][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.830835][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.831001][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.831375][ T5801] bridge_slave_0: entered allmulticast mode [ 99.833278][ T5801] bridge_slave_0: entered promiscuous mode [ 99.894974][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.966101][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.966207][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.966555][ T5801] bridge_slave_1: entered allmulticast mode [ 99.971241][ T5801] bridge_slave_1: entered promiscuous mode [ 99.988574][ T5810] Bluetooth: hci1: command tx timeout [ 100.069584][ T5810] Bluetooth: hci4: command tx timeout [ 100.069700][ T5810] Bluetooth: hci2: command tx timeout [ 100.073807][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.073922][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.074048][ T5802] bridge_slave_0: entered allmulticast mode [ 100.075915][ T5802] bridge_slave_0: entered promiscuous mode [ 100.078012][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.078139][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.083737][ T5800] bridge_slave_0: entered allmulticast mode [ 100.094813][ T5800] bridge_slave_0: entered promiscuous mode [ 100.155250][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.155375][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.155542][ T5803] bridge_slave_0: entered allmulticast mode [ 100.157633][ T5803] bridge_slave_0: entered promiscuous mode [ 100.159156][ T5808] Bluetooth: hci3: command tx timeout [ 100.205984][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.206114][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.206293][ T5802] bridge_slave_1: entered allmulticast mode [ 100.210978][ T5802] bridge_slave_1: entered promiscuous mode [ 100.220675][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.221040][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.221590][ T5800] bridge_slave_1: entered allmulticast mode [ 100.245908][ T5800] bridge_slave_1: entered promiscuous mode [ 100.263570][ T5796] team0: Port device team_slave_0 added [ 100.263779][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.263906][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.264430][ T5803] bridge_slave_1: entered allmulticast mode [ 100.266370][ T5803] bridge_slave_1: entered promiscuous mode [ 100.296977][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.355452][ T5796] team0: Port device team_slave_1 added [ 100.377843][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.463287][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.467538][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.504074][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.530024][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.532491][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.533680][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.533692][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.533711][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.537952][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.585407][ T5801] team0: Port device team_slave_0 added [ 100.641796][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.641810][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.641830][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.694862][ T5801] team0: Port device team_slave_1 added [ 100.777060][ T5802] team0: Port device team_slave_0 added [ 100.782779][ T5800] team0: Port device team_slave_0 added [ 100.799404][ T5803] team0: Port device team_slave_0 added [ 100.822658][ T5802] team0: Port device team_slave_1 added [ 100.824643][ T5800] team0: Port device team_slave_1 added [ 100.827440][ T5803] team0: Port device team_slave_1 added [ 100.828198][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.828209][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.828229][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.943210][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.943224][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.943244][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.421093][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.421107][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.421127][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.422454][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.422470][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.422499][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.447656][ T5796] hsr_slave_0: entered promiscuous mode [ 101.536208][ T5796] hsr_slave_1: entered promiscuous mode [ 101.545084][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.545102][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.545132][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.597688][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.597708][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.597737][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.645504][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.645517][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.645538][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.647865][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.647877][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.647897][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.748596][ T5808] Bluetooth: hci0: command tx timeout [ 101.841036][ T5801] hsr_slave_0: entered promiscuous mode [ 101.841980][ T5801] hsr_slave_1: entered promiscuous mode [ 101.842750][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 101.842826][ T5801] Cannot create hsr debugfs directory [ 101.982624][ T5802] hsr_slave_0: entered promiscuous mode [ 101.983686][ T5802] hsr_slave_1: entered promiscuous mode [ 101.984361][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 101.984378][ T5802] Cannot create hsr debugfs directory [ 102.007325][ T5800] hsr_slave_0: entered promiscuous mode [ 102.019831][ T5800] hsr_slave_1: entered promiscuous mode [ 102.020549][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 102.020572][ T5800] Cannot create hsr debugfs directory [ 102.064885][ T5803] hsr_slave_0: entered promiscuous mode [ 102.065838][ T5803] hsr_slave_1: entered promiscuous mode [ 102.066571][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 102.066590][ T5803] Cannot create hsr debugfs directory [ 102.068750][ T5808] Bluetooth: hci1: command tx timeout [ 102.148622][ T5808] Bluetooth: hci2: command tx timeout [ 102.148658][ T5808] Bluetooth: hci4: command tx timeout [ 102.229614][ T5810] Bluetooth: hci3: command tx timeout [ 102.963031][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.017491][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.021464][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.063487][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.066892][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.103240][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.127524][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.163535][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.275739][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.334755][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.336949][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.373534][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.375724][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.438144][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.478152][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.516933][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.672932][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.711990][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.715429][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.763012][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.777554][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.802130][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.829295][ T5810] Bluetooth: hci0: command tx timeout [ 103.831582][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.870103][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.044428][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.076438][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.100256][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.134522][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.151696][ T5810] Bluetooth: hci1: command tx timeout [ 104.165627][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.195745][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.237540][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.240054][ T5808] Bluetooth: hci2: command tx timeout [ 104.240345][ T5810] Bluetooth: hci4: command tx timeout [ 104.281971][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.310947][ T5810] Bluetooth: hci3: command tx timeout [ 104.341599][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.439581][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.500698][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.517012][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.567904][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.586861][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.617138][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.630542][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.672649][ T5800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.683366][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.736820][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.736954][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.781573][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.811536][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.811992][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.909132][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.950134][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.950385][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.974020][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.022843][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.022971][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.114476][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.150363][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.171609][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.173434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.253032][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.253141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.367638][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.424787][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.470503][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.471160][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.565930][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.566066][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.665715][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.729893][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.730122][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.775142][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.806157][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.807003][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.909092][ T5810] Bluetooth: hci0: command tx timeout [ 106.085113][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.215186][ T5796] veth0_vlan: entered promiscuous mode [ 106.228623][ T5810] Bluetooth: hci1: command tx timeout [ 106.308622][ T5810] Bluetooth: hci4: command tx timeout [ 106.308656][ T5810] Bluetooth: hci2: command tx timeout [ 106.352673][ T5796] veth1_vlan: entered promiscuous mode [ 106.388726][ T5808] Bluetooth: hci3: command tx timeout [ 106.434492][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.541577][ T5802] veth0_vlan: entered promiscuous mode [ 106.563326][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.606906][ T5796] veth0_macvtap: entered promiscuous mode [ 106.680862][ T5802] veth1_vlan: entered promiscuous mode [ 106.707846][ T5796] veth1_macvtap: entered promiscuous mode [ 106.825749][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.895196][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.913835][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.973060][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.995730][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.014645][ T5802] veth0_macvtap: entered promiscuous mode [ 107.034409][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.051463][ T5803] veth0_vlan: entered promiscuous mode [ 107.051971][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.078286][ T5802] veth1_macvtap: entered promiscuous mode [ 107.204936][ T5803] veth1_vlan: entered promiscuous mode [ 107.417153][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.510362][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.531558][ T5801] veth0_vlan: entered promiscuous mode [ 107.567496][ T5800] veth0_vlan: entered promiscuous mode [ 107.607659][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.626284][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.660613][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.713761][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.713785][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.751068][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.789984][ T5801] veth1_vlan: entered promiscuous mode [ 107.820241][ T5800] veth1_vlan: entered promiscuous mode [ 107.927830][ T5803] veth0_macvtap: entered promiscuous mode [ 107.996890][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.996911][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.997685][ T5803] veth1_macvtap: entered promiscuous mode [ 108.368144][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.397777][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.397801][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.459285][ T5801] veth0_macvtap: entered promiscuous mode [ 108.479481][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.480921][ T5800] veth0_macvtap: entered promiscuous mode [ 108.593735][ T5801] veth1_macvtap: entered promiscuous mode [ 108.610616][ T5800] veth1_macvtap: entered promiscuous mode [ 108.615084][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.629594][ T1487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.629658][ T1487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.648775][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.666167][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.684660][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.826222][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.837842][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.022669][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.151475][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.428307][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.539200][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.608159][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.704194][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.824690][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.827958][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.885959][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.944758][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.944780][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.947162][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.828567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.828588][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.167237][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.167280][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.375120][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.375143][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.603536][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 111.603564][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 111.716653][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.866878][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.866901][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.101665][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.101689][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.574264][ T5957] ======================================================= [ 112.574264][ T5957] WARNING: The mand mount option has been deprecated and [ 112.574264][ T5957] and is ignored by this kernel. Remove the mand [ 112.574264][ T5957] option from the mount to silence this warning. [ 112.574264][ T5957] ======================================================= [ 112.574563][ T5957] afs: Unknown parameter 'smackfshatd' [ 113.680654][ T5808] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.680812][ T5808] Bluetooth: hci3: Injecting HCI hardware error event [ 113.687324][ T5808] Bluetooth: hci3: hardware error 0x00 [ 114.400754][ T5915] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.403572][ T1236] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.683678][ T1236] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 114.683711][ T1236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 114.747637][ T1236] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 114.747669][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.747690][ T1236] usb 2-1: Product: syz [ 114.747705][ T1236] usb 2-1: Manufacturer: syz [ 114.747720][ T1236] usb 2-1: SerialNumber: syz [ 114.748965][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.748990][ T5915] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.749040][ T5915] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.749064][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.124676][ T5915] usb 5-1: config 0 descriptor?? [ 115.145078][ T1236] usb 2-1: config 0 descriptor?? [ 115.569040][ T1236] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 115.664193][ T5915] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 115.728256][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 115.899966][ T1244] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.128486][ T1244] usb 1-1: Using ep0 maxpacket: 8 [ 116.148580][ T5808] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 116.150037][ T1244] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 116.150065][ T1244] usb 1-1: config 0 has no interface number 0 [ 116.150111][ T1244] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.150136][ T1244] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 116.150162][ T1244] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.150191][ T1244] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.150258][ T1244] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 116.150283][ T1244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.367055][ T1244] usb 1-1: config 0 descriptor?? [ 116.527252][ T1236] usb 2-1: USB disconnect, device number 2 [ 116.738681][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 116.742961][ T5915] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 116.743059][ T5915] usb 5-1: media controller created [ 116.860845][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.389706][ T6026] mmap: syz.4.44 (6026) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.580877][ T1244] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.765623][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 117.766116][ T5915] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 117.867582][ T1244] usb 1-1: USB disconnect, device number 2 [ 118.143296][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 118.281103][ T1244] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 118.739996][ T5915] dvb-usb: schedule remote query interval to 150 msecs. [ 118.740023][ T5915] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 118.900073][ T6014] dvb-usb: bulk message failed: -22 (1/0) [ 118.900126][ T6014] dvb-usb: error while querying for an remote control event. [ 118.938666][ T5915] usb 5-1: USB disconnect, device number 2 [ 119.729203][ T5915] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.064199][ T6079] netlink: 128 bytes leftover after parsing attributes in process `syz.2.66'. [ 120.779465][ T6094] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 121.135931][ T6101] sctp: [Deprecated]: syz.0.75 (pid 6101) Use of int in max_burst socket option. [ 121.135931][ T6101] Use struct sctp_assoc_value instead [ 121.424868][ T6094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.522460][ T6094] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.644694][ T6107] macvtap1: entered promiscuous mode [ 121.644936][ T6107] macvtap1: entered allmulticast mode [ 121.644952][ T6107] veth1_vlan: entered allmulticast mode [ 122.200757][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 122.896241][ T6146] netlink: 'syz.0.97': attribute type 2 has an invalid length. [ 122.896263][ T6146] netlink: 'syz.0.97': attribute type 8 has an invalid length. [ 122.896277][ T6146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.97'. [ 122.932142][ T6143] IPVS: Error connecting to the multicast addr [ 122.945891][ T6144] tipc: Enabling of bearer rejected, failed to enable media [ 126.876155][ T6244] batadv_slave_1: entered promiscuous mode [ 126.897149][ T6244] macsec1: entered promiscuous mode [ 127.066749][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.218562][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 127.220993][ T5886] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 127.221032][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.221054][ T5886] usb 2-1: config 0 has no interface number 0 [ 127.221100][ T5886] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.221128][ T5886] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.221156][ T5886] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.221185][ T5886] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.221214][ T5886] usb 2-1: config 0 interface 52 has no altsetting 0 [ 127.221248][ T5886] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 127.221271][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.368182][ T5886] usb 2-1: config 0 descriptor?? [ 127.708335][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 127.780265][ T5807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.781653][ T6264] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 127.815286][ T5886] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input7 [ 128.000891][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 128.014968][ T5807] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.015018][ T5807] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.058346][ T5886] usb 2-1: USB disconnect, device number 3 [ 128.064719][ T5807] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.064750][ T5807] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 128.064771][ T5807] usb 4-1: Product: syz [ 128.064786][ T5807] usb 4-1: Manufacturer: syz [ 128.222144][ T5807] hub 4-1:4.0: USB hub found [ 128.376748][ T6042] udevd[6042]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 128.382951][ T6042] udevd[6042]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 128.448317][ T5807] hub 4-1:4.0: 2 ports detected [ 128.874849][ T5807] hub 4-1:4.0: set hub depth failed [ 128.925130][ T5807] usb 4-1: USB disconnect, device number 2 [ 129.088706][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 129.088730][ T6283] tipc: Invalid UDP bearer configuration [ 129.088769][ T6283] tipc: Enabling of bearer rejected, failed to enable media [ 129.367983][ T6290] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 129.497684][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 130.435900][ T6324] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 130.542638][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 130.799006][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.834450][ T6324] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.646152][ T6358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.189'. [ 131.958603][ T37] audit: type=1326 audit(1776550388.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6366 comm="syz.2.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x0 [ 132.182270][ T6375] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 132.356380][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.368755][ T6375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.398652][ T6014] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 132.551754][ T6014] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.551794][ T6014] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.551820][ T6014] usb 4-1: config 2 interface 0 has no altsetting 0 [ 132.551854][ T6014] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 132.551879][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.763655][ T6387] process 'syz.1.201' launched './file2' with NULL argv: empty string added [ 132.989110][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989748][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.147816][ T6014] elo 0003:04E7:0009.0001: unknown main item tag 0x2 [ 133.147857][ T6014] elo 0003:04E7:0009.0001: item fetching failed at offset 4/5 [ 133.171257][ T6014] elo 0003:04E7:0009.0001: parse failed [ 133.171377][ T6014] elo 0003:04E7:0009.0001: probe with driver elo failed with error -22 [ 133.295402][ T6014] usb 4-1: USB disconnect, device number 3 [ 133.913569][ T6418] syz.2.213 uses obsolete (PF_INET,SOCK_PACKET) [ 134.188586][ T6009] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.351252][ T6009] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.351285][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.351308][ T6009] usb 2-1: Product: syz [ 134.351323][ T6009] usb 2-1: Manufacturer: syz [ 134.351338][ T6009] usb 2-1: SerialNumber: syz [ 134.470387][ T6009] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.997367][ T37] audit: type=1326 audit(1776550391.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.023508][ T37] audit: type=1326 audit(1776550391.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.023566][ T37] audit: type=1326 audit(1776550391.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.025714][ T37] audit: type=1326 audit(1776550391.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.025757][ T37] audit: type=1326 audit(1776550391.780:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.025793][ T37] audit: type=1326 audit(1776550391.780:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.153490][ T37] audit: type=1326 audit(1776550391.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.194175][ T37] audit: type=1326 audit(1776550391.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.194243][ T37] audit: type=1326 audit(1776550391.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 135.448111][ T5807] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.738579][ T5916] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 135.938593][ T6014] usb 2-1: USB disconnect, device number 4 [ 135.982859][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 135.982898][ T5916] usb 1-1: can't read configurations, error -71 [ 136.721827][ T5807] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 136.722477][ T5807] ath9k_htc: Failed to initialize the device [ 136.743102][ T6014] usb 2-1: ath9k_htc: USB layer deinitialized [ 136.778578][ T6492] netlink: 'syz.0.249': attribute type 2 has an invalid length. [ 137.060672][ T6504] Zero length message leads to an empty skb [ 137.836118][ T6532] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 137.869249][ T6009] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.972283][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 137.972414][ T6529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.095095][ T6009] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.095150][ T6009] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 138.129995][ T6009] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.130027][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.130051][ T6009] usb 1-1: Product: syz [ 138.130066][ T6009] usb 1-1: Manufacturer: syz [ 138.130081][ T6009] usb 1-1: SerialNumber: syz [ 138.499811][ T6009] cdc_ncm 1-1:1.0: bind() failure [ 138.656684][ T6009] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 138.656736][ T6009] cdc_ncm 1-1:1.1: bind() failure [ 138.845390][ T6009] usb 1-1: USB disconnect, device number 5 [ 138.858136][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 138.996904][ T6556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 139.018519][ T6014] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.171376][ T6014] usb 5-1: config 0 has an invalid interface number: 121 but max is 0 [ 139.171406][ T6014] usb 5-1: config 0 has no interface number 0 [ 139.171453][ T6014] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.171478][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.229339][ T6014] usb 5-1: config 0 descriptor?? [ 139.236399][ T6014] cp210x 5-1:0.121: cp210x converter detected [ 139.660770][ T6014] cp210x 5-1:0.121: failed to get vendor val 0x000e size 3: -71 [ 139.721411][ T6014] usb 5-1: cp210x converter now attached to ttyUSB0 [ 139.741949][ T6014] usb 5-1: USB disconnect, device number 3 [ 139.784895][ T6014] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.785975][ T6014] cp210x 5-1:0.121: device disconnected [ 140.629517][ T6014] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.801544][ T6014] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 140.801578][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.801600][ T6014] usb 4-1: Product: syz [ 140.801616][ T6014] usb 4-1: Manufacturer: syz [ 140.801645][ T6014] usb 4-1: SerialNumber: syz [ 140.864957][ T6014] usb 4-1: config 0 descriptor?? [ 140.918150][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 141.056960][ T6605] bridge0: entered promiscuous mode [ 141.100821][ T6605] macsec1: entered promiscuous mode [ 141.106277][ T6605] bridge0: port 3(macsec1) entered blocking state [ 141.106469][ T6605] bridge0: port 3(macsec1) entered disabled state [ 141.106745][ T6605] macsec1: entered allmulticast mode [ 141.106763][ T6605] bridge0: entered allmulticast mode [ 141.261150][ T6605] macsec1: left allmulticast mode [ 141.261173][ T6605] bridge0: left allmulticast mode [ 141.358340][ T6605] bridge0: left promiscuous mode [ 141.508155][ T6014] usb 4-1: Firmware version (0.0) predates our first public release. [ 141.508182][ T6014] usb 4-1: Please update to version 0.2 or newer [ 142.029105][ T6014] usb 4-1: USB disconnect, device number 4 [ 142.360706][ T6643] nfsd: Unknown parameter '.@./-^:.' [ 142.909829][ T36] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.062166][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 143.096251][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.129745][ T36] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.129779][ T36] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.129801][ T36] usb 5-1: Product: syz [ 143.129817][ T36] usb 5-1: Manufacturer: syz [ 143.129830][ T36] usb 5-1: SerialNumber: syz [ 143.199587][ T36] usb 5-1: config 0 descriptor?? [ 143.205697][ T6648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.253133][ T36] hub 5-1:0.0: bad descriptor, ignoring hub [ 143.253258][ T36] hub 5-1:0.0: probe with driver hub failed with error -5 [ 143.611006][ T36] usb 5-1: USB disconnect, device number 4 [ 143.869736][ T6670] netlink: 252 bytes leftover after parsing attributes in process `syz.0.326'. [ 144.098542][ T36] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.248565][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 144.250882][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 144.275786][ T36] usb 5-1: string descriptor 0 read error: -22 [ 144.275908][ T36] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 144.275930][ T36] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 144.320476][ T36] usb 5-1: config 0 descriptor?? [ 144.321390][ T6648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.341209][ T36] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.341259][ T36] hub 5-1:0.0: probe with driver hub failed with error -5 [ 144.679092][ T5890] usb 5-1: USB disconnect, device number 5 [ 144.862755][ T6700] capability: warning: `syz.3.340' uses deprecated v2 capabilities in a way that may be insecure [ 144.869104][ T6009] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.068469][ T6009] usb 1-1: Using ep0 maxpacket: 16 [ 145.070801][ T6009] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.070829][ T6009] usb 1-1: config 0 has no interface number 0 [ 145.070876][ T6009] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.070905][ T6009] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.070948][ T6009] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 145.070973][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.176010][ T6009] usb 1-1: config 0 descriptor?? [ 145.653245][ T6009] holtek_mouse 0003:04D9:A081.0002: item fetching failed at offset 5/8 [ 145.659218][ T6009] holtek_mouse 0003:04D9:A081.0002: hid parse failed: -22 [ 145.659320][ T6009] holtek_mouse 0003:04D9:A081.0002: probe with driver holtek_mouse failed with error -22 [ 145.871886][ T36] usb 1-1: USB disconnect, device number 6 [ 146.153030][ T6731] capability: warning: `syz.2.353' uses 32-bit capabilities (legacy support in use) [ 147.388999][ T6739] syz.4.357 (6739) used greatest stack depth: 18240 bytes left [ 147.557688][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 147.557723][ T6773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.375'. [ 147.578729][ T6775] netlink: 5240 bytes leftover after parsing attributes in process `syz.4.374'. [ 147.872131][ T6781] macvlan2: entered promiscuous mode [ 147.872182][ T6781] macvlan2: entered allmulticast mode [ 147.872196][ T6781] veth0_virt_wifi: entered allmulticast mode [ 149.078546][ T1244] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.282295][ T1244] usb 5-1: Using ep0 maxpacket: 8 [ 149.286377][ T1244] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 149.306892][ T1244] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 149.306925][ T1244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.306948][ T1244] usb 5-1: Product: syz [ 149.306963][ T1244] usb 5-1: Manufacturer: syz [ 149.306979][ T1244] usb 5-1: SerialNumber: syz [ 149.429285][ T1244] usb 5-1: config 0 descriptor?? [ 149.555575][ T1244] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 149.746974][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 149.806348][ T6846] warning: `syz.1.411' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.859904][ T1244] gspca_zc3xx: reg_w_i err -71 [ 150.002809][ T6852] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 150.193793][ T6859] virtiofs: Bad value for 'dax' [ 150.320307][ T6852] bond1: option mode: invalid value (37) [ 150.410865][ T6852] bond1 (unregistering): Released all slaves [ 150.468878][ T1244] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 150.468986][ T1244] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 150.481560][ T1244] usb 5-1: USB disconnect, device number 6 [ 150.960901][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 151.090779][ T6881] tipc: Started in network mode [ 151.090817][ T6881] tipc: Node identity fff, cluster identity 10 [ 151.090835][ T6881] tipc: Node number set to 4095 [ 151.207477][ T6883] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 151.207500][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 151.207517][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 151.341510][ T6883] vlan2: entered promiscuous mode [ 151.349785][ T6883] bridge0: entered promiscuous mode [ 152.008654][ T36] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.176644][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.176681][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.176721][ T36] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 152.176744][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.201154][ T6890] orangefs_mount: mount request failed with -4 [ 152.253400][ T36] usb 2-1: config 0 descriptor?? [ 152.541899][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 152.541922][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 152.541947][ T6922] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 152.719119][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 152.923428][ T36] hid-led 0003:1D34:000A.0003: probe with driver hid-led failed with error -71 [ 152.987314][ T36] usb 2-1: USB disconnect, device number 5 [ 153.116268][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 153.716473][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 154.489444][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489483][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489512][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489539][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489566][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489593][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489620][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489647][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489674][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.489700][ T36] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.620996][ T6980] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 154.638550][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 154.638614][ T37] audit: type=1326 audit(1776550411.380:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.638760][ T37] audit: type=1326 audit(1776550411.390:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.714975][ T37] audit: type=1326 audit(1776550411.470:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.715024][ T37] audit: type=1326 audit(1776550411.470:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.715064][ T37] audit: type=1326 audit(1776550411.470:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.715102][ T37] audit: type=1326 audit(1776550411.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.715157][ T37] audit: type=1326 audit(1776550411.470:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.715195][ T37] audit: type=1326 audit(1776550411.470:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6979 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439b8ec819 code=0x7ffc0000 [ 154.887937][ T36] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 155.166378][ T6993] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.473'. [ 155.193663][ T6993] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.473'. [ 155.329218][ T6996] ptrace attach of ""[6999] was attempted by "./syz-executor exec"[6996] [ 155.432766][ T6984] fido_id[6984]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.780870][ T5915] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.958499][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 155.960903][ T5915] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 155.964066][ T5915] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 155.964096][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.964116][ T5915] usb 4-1: Product: syz [ 155.964131][ T5915] usb 4-1: Manufacturer: syz [ 155.964146][ T5915] usb 4-1: SerialNumber: syz [ 156.039614][ T5915] usb 4-1: config 0 descriptor?? [ 156.081104][ T5915] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 156.081164][ T5915] usb 4-1: setting power ON [ 156.113320][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 156.144958][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.145805][ T5915] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 156.145864][ T5915] usb 4-1: media controller created [ 156.180066][ T1244] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.186423][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.257397][ T5915] usb 4-1: selecting invalid altsetting 6 [ 156.257424][ T5915] usb 4-1: digital interface selection failed (-22) [ 156.257442][ T5915] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 156.280894][ T5915] usb 4-1: setting power OFF [ 156.281152][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 156.281172][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 156.281185][ T5915] (NULL device *): no alternate interface [ 156.345897][ T1244] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.345970][ T1244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.394968][ T1244] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.395000][ T1244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.395015][ T1244] usb 2-1: Product: syz [ 156.395026][ T1244] usb 2-1: Manufacturer: syz [ 156.395037][ T1244] usb 2-1: SerialNumber: syz [ 156.547786][ T5915] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 156.594647][ T5915] usb 4-1: USB disconnect, device number 5 [ 156.695175][ T1244] cdc_mbim 2-1:1.0: skipping garbage [ 156.695204][ T1244] usb 2-1: selecting invalid altsetting 1 [ 157.046230][ T1244] usb 2-1: selecting invalid altsetting 1 [ 157.046339][ T1244] cdc_mbim 2-1:1.0: bind() failure [ 157.250936][ T5890] usb 2-1: USB disconnect, device number 6 [ 157.350029][ T36] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 157.500845][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 157.500911][ T36] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 157.500937][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.555699][ T36] usb 5-1: config 0 descriptor?? [ 157.556971][ T7018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.153977][ T36] lua 0003:1E7D:2C2E.0005: unknown global tag 0xe [ 158.154002][ T36] lua 0003:1E7D:2C2E.0005: item 0 2 1 14 parsing failed [ 158.154760][ T36] lua 0003:1E7D:2C2E.0005: parse failed [ 158.154844][ T36] lua 0003:1E7D:2C2E.0005: probe with driver lua failed with error -22 [ 158.362136][ T5807] usb 5-1: USB disconnect, device number 7 [ 159.536855][ T7056] macsec1: entered promiscuous mode [ 159.536879][ T7056] macsec1: entered allmulticast mode [ 160.167100][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.524084][ T7077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.514'. [ 160.821383][ [ 160.821383][ T5810] 1024-page vmalloc region starting at 0xffffc90006cda000 allocated at kcov_ioctl+0x58/0x640 [ 160.821460][ T5810] list_del corruption. next->prev should be ffffc9001af8e000, but was 0000000000000000. (next=ffffc90006cda000) [ 160.822916][ T5810] ------------[ cut here ]------------ [ 160.822928][ T5810] kernel BUG at lib/list_debug.c:67! [ 160.831633][ T5810] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 160.831681][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 160.831711][ T5810] Tainted: [L]=SOFTLOCKUP [ 160.831718][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.831731][ T5810] Workqueue: hci3 hci_rx_work [ 160.831766][ T5810] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 160.831791][ T5810] Code: 8c d6 60 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d ad 80 fd 49 8b 56 08 48 c7 c7 a0 35 a7 8b 48 89 de 4c 89 f1 e8 07 d2 7c fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.831808][ T5810] RSP: 0018:ffffc900050df9e0 EFLAGS: 00010246 [ 160.831825][ T5810] RAX: 000000000000006d RBX: ffffc9001af8e000 RCX: 91f6377b5375ef00 [ 160.831840][ T5810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.831851][ T5810] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 160.831870][ T5810] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92000d9b401 [ 160.831886][ T5810] R13: dffffc0000000000 R14: ffffc90006cda000 R15: ffffc90006cda008 [ 160.831901][ T5810] FS: 0000000000000000(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 160.831918][ T5810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.831932][ T5810] CR2: 000055557c268a28 CR3: 000000003a5f8000 CR4: 00000000003526f0 [ 160.831950][ T5810] Call Trace: [ 160.831958][ T5810] [ 160.831969][ T5810] kcov_remote_start+0x2af/0x710 [ 160.832005][ T5810] hci_rx_work+0x10f/0x1040 [ 160.832037][ T5810] ? process_scheduled_works+0xa70/0x1860 [ 160.832070][ T5810] process_scheduled_works+0xb5d/0x1860 [ 160.832117][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 160.832152][ T5810] ? assign_work+0x3d5/0x5e0 [ 160.832186][ T5810] worker_thread+0xa53/0xfc0 [ 160.832219][ T5810] kthread+0x388/0x470 [ 160.832243][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 160.832260][ T5810] ? __pfx_kthread+0x10/0x10 [ 160.832285][ T5810] ret_from_fork+0x514/0xb70 [ 160.832320][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 160.832352][ T5810] ? __switch_to+0xc79/0x1410 [ 160.832381][ T5810] ? __pfx_kthread+0x10/0x10 [ 160.832405][ T5810] ret_from_fork_asm+0x1a/0x30 [ 160.832435][ T5810] [ 160.832443][ T5810] Modules linked in: [ 160.832480][ T5810] ---[ end trace 0000000000000000 ]--- [ 160.833966][ T5810] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 160.833994][ T5810] Code: 8c d6 60 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d ad 80 fd 49 8b 56 08 48 c7 c7 a0 35 a7 8b 48 89 de 4c 89 f1 e8 07 d2 7c fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 160.834012][ T5810] RSP: 0018:ffffc900050df9e0 EFLAGS: 00010246 [ 160.834031][ T5810] RAX: 000000000000006d RBX: ffffc9001af8e000 RCX: 91f6377b5375ef00 [ 160.834046][ T5810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.834058][ T5810] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 160.834071][ T5810] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92000d9b401 [ 160.834086][ T5810] R13: dffffc0000000000 R14: ffffc90006cda000 R15: ffffc90006cda008 [ 160.834101][ T5810] FS: 0000000000000000(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 160.834117][ T5810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.834131][ T5810] CR2: 000055557c268a28 CR3: 000000003a5f8000 CR4: 00000000003526f0 [ 160.834150][ T5810] Kernel panic - not syncing: Fatal exception [ 160.834739][ T5810] Kernel Offset: disabled