last executing test programs: 2m11.047679784s ago: executing program 0 (id=566): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8, @private2}, 0x1c) 2m10.914137693s ago: executing program 0 (id=569): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x1a, 0x20, 0x0, @void, @void, @void, @value}, 0x20) 2m10.698109583s ago: executing program 0 (id=572): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004849, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x1bdb, 0x4) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)='D', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/7, 0x7}, 0x8}], 0x1, 0x40002040, 0x0) 2m10.405654875s ago: executing program 0 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xe5) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') 2m10.237722724s ago: executing program 0 (id=578): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="6167000000000000060000000000000085000000c400e92995000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m9.901349883s ago: executing program 0 (id=585): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000ebfd7f00fbff0000000000000018", @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd63"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) 2m9.618544272s ago: executing program 32 (id=585): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000ebfd7f00fbff0000000000000018", @ANYRES32], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd63"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) 3.444609663s ago: executing program 2 (id=1591): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) 3.391198123s ago: executing program 5 (id=1592): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x1, 0x3}, 0x90) 3.321658196s ago: executing program 2 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000300)={@local, @random="618e38850ee1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0x2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x88}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "9800af4900035ad16d8a7a63"}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @timestamp={0x8, 0xa, 0x2, 0x8}, @timestamp={0x8, 0xa, 0x10, 0x10001}]}}}}}}}}, 0x0) 3.202972157s ago: executing program 2 (id=1594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) writev(r0, 0x0, 0x0) 2.460360034s ago: executing program 4 (id=1595): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c00000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b188c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de05bb73b811723be3bd167b6f4c20dd84df1fd29e13c90cb22c116e5f7f3e45f91d3e049640bc3773ea5691513ac23d05d105be338b9a442ac0d24244a3dcb6a5b356222f7b85b4390b6a974c11306b534bdcd602394ab064da5d033c0f8d4a5051da177539a026a1204a43854fd5726870792517e2e67f17b3a101fc43c78ed2267337eaaa0d4c7b25a9f686a9cace84f070e69170e726a1771eb69cd2f8b311a95382ced89b4e2f5dd44635fe2ac45b4926ac0252e4bde5ea6fc7483f12e0bb6b5897fb4b314d1b174b0a711fdb6ae8dce8aae5dbc61fd6dcfc6e3b95b81b845c4b76804f06f649d325fbc63313919ced92af49", @ANYBLOB="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"], 0xff76}, 0x0) 2.444166283s ago: executing program 3 (id=1596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.390731564s ago: executing program 2 (id=1597): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x5, 0x5}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x8, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 2.390216405s ago: executing program 1 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0xa, 0xa72, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.360013574s ago: executing program 5 (id=1599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x10000000}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) 2.209037995s ago: executing program 3 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 2.208614694s ago: executing program 4 (id=1601): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000002"], 0xab4}}, 0x0) 2.149643898s ago: executing program 5 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 2.149494243s ago: executing program 1 (id=1603): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x2}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0xea3c, 0x0, 0x0, 0x0) 2.104537472s ago: executing program 2 (id=1604): connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x1021, @random="64e330f600", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.005164346s ago: executing program 3 (id=1605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tran', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb, 0x8, 0x8001}, {0x4, 0x5, 0x2}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x891) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000012200)={@mcast2}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 1.95676792s ago: executing program 4 (id=1606): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x4000000000010046) 1.956225159s ago: executing program 5 (id=1607): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.096431127s ago: executing program 1 (id=1608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2143) 993.622412ms ago: executing program 5 (id=1609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) 972.266636ms ago: executing program 4 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 836.02266ms ago: executing program 1 (id=1611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x4008090) 729.63128ms ago: executing program 4 (id=1612): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0xd2e8058ee9196ee7}], 0x1, 0xc000) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x7b, 0x0, 0x0}], 0x1, 0x4) 729.487976ms ago: executing program 1 (id=1613): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) 672.729389ms ago: executing program 1 (id=1614): sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a170060"]) 589.987758ms ago: executing program 3 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 589.718056ms ago: executing program 4 (id=1616): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000001c0), 0x4) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 447.079659ms ago: executing program 3 (id=1617): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000002"], 0xab4}}, 0x0) 269.519276ms ago: executing program 3 (id=1618): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x2}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0xea3c, 0x0, 0x0, 0x0) 8.657729ms ago: executing program 2 (id=1619): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 0s ago: executing program 5 (id=1620): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x5, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): 57] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.803863][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.810084][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.817496][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.824833][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.838124][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.849055][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.857437][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.865696][ T5858] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.873040][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.880437][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.888727][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.896155][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.172560][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 62.379433][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 62.388279][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 62.397989][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.405371][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.412868][ T5848] bridge_slave_0: entered allmulticast mode [ 62.419650][ T5848] bridge_slave_0: entered promiscuous mode [ 62.429740][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.437209][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.444458][ T5848] bridge_slave_1: entered allmulticast mode [ 62.451373][ T5848] bridge_slave_1: entered promiscuous mode [ 62.553870][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.582373][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 62.593715][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.622736][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 62.657974][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.665242][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.672483][ T5839] bridge_slave_0: entered allmulticast mode [ 62.679490][ T5839] bridge_slave_0: entered promiscuous mode [ 62.699971][ T5848] team0: Port device team_slave_0 added [ 62.715231][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.722451][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.729857][ T5850] bridge_slave_0: entered allmulticast mode [ 62.736973][ T5850] bridge_slave_0: entered promiscuous mode [ 62.756199][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.763300][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.770629][ T5839] bridge_slave_1: entered allmulticast mode [ 62.777253][ T5839] bridge_slave_1: entered promiscuous mode [ 62.794043][ T5848] team0: Port device team_slave_1 added [ 62.814441][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.821545][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.828952][ T5850] bridge_slave_1: entered allmulticast mode [ 62.835587][ T5850] bridge_slave_1: entered promiscuous mode [ 62.881691][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.893378][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.928753][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.969166][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.976214][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.002468][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.015985][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.022961][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.049028][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.077690][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.095583][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.103396][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.110909][ T5838] bridge_slave_0: entered allmulticast mode [ 63.118161][ T5838] bridge_slave_0: entered promiscuous mode [ 63.126099][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.133220][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.140583][ T5838] bridge_slave_1: entered allmulticast mode [ 63.147601][ T5838] bridge_slave_1: entered promiscuous mode [ 63.156769][ T5839] team0: Port device team_slave_0 added [ 63.191182][ T5839] team0: Port device team_slave_1 added [ 63.220017][ T5850] team0: Port device team_slave_0 added [ 63.250632][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.258819][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.266301][ T5840] bridge_slave_0: entered allmulticast mode [ 63.272837][ T5840] bridge_slave_0: entered promiscuous mode [ 63.281674][ T5850] team0: Port device team_slave_1 added [ 63.292844][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.314144][ T5848] hsr_slave_0: entered promiscuous mode [ 63.320465][ T5848] hsr_slave_1: entered promiscuous mode [ 63.329427][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.336671][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.344589][ T5840] bridge_slave_1: entered allmulticast mode [ 63.351279][ T5840] bridge_slave_1: entered promiscuous mode [ 63.366600][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.376204][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.383159][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.409365][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.421809][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.429009][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.455062][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.502925][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.514730][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.526649][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.533622][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.560616][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.607238][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.614878][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.641008][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.655410][ T5838] team0: Port device team_slave_0 added [ 63.701089][ T5840] team0: Port device team_slave_0 added [ 63.709601][ T5838] team0: Port device team_slave_1 added [ 63.730554][ T5839] hsr_slave_0: entered promiscuous mode [ 63.737169][ T5839] hsr_slave_1: entered promiscuous mode [ 63.743232][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.751566][ T5839] Cannot create hsr debugfs directory [ 63.759134][ T5840] team0: Port device team_slave_1 added [ 63.781535][ T5850] hsr_slave_0: entered promiscuous mode [ 63.788291][ T5850] hsr_slave_1: entered promiscuous mode [ 63.794791][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.802355][ T5850] Cannot create hsr debugfs directory [ 63.830633][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.837694][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.865548][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.888369][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.896559][ T5852] Bluetooth: hci3: command tx timeout [ 63.898831][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.928499][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.956497][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.963468][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.973874][ T5852] Bluetooth: hci4: command tx timeout [ 63.994178][ T5155] Bluetooth: hci0: command tx timeout [ 63.995334][ T5852] Bluetooth: hci2: command tx timeout [ 64.000562][ T5155] Bluetooth: hci1: command tx timeout [ 64.006350][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.032017][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.039074][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.065910][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.238299][ T5838] hsr_slave_0: entered promiscuous mode [ 64.245163][ T5838] hsr_slave_1: entered promiscuous mode [ 64.251649][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.259278][ T5838] Cannot create hsr debugfs directory [ 64.290515][ T5840] hsr_slave_0: entered promiscuous mode [ 64.300883][ T5840] hsr_slave_1: entered promiscuous mode [ 64.309926][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.317530][ T5840] Cannot create hsr debugfs directory [ 64.417038][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.437300][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.454093][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.477386][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.567072][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.580716][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.589847][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.613550][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.662678][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.691579][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.701767][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.720988][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.759372][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.769838][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.782506][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.791969][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.887393][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.899578][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.912081][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.927658][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.944380][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.993181][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.019688][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.027030][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.060378][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.069794][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.076940][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.122417][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.160436][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.197612][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.210752][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.249493][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.256666][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.271000][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.278179][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.296338][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.308378][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.329712][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.336880][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.380605][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.397006][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.404172][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.416833][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.424508][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.433370][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.440477][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.476614][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.483810][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.520831][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.527956][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.581353][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.628035][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.688366][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.714516][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.796544][ T5848] veth0_vlan: entered promiscuous mode [ 65.829705][ T5848] veth1_vlan: entered promiscuous mode [ 65.881299][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.947456][ T5848] veth0_macvtap: entered promiscuous mode [ 65.972911][ T5848] veth1_macvtap: entered promiscuous mode [ 65.979525][ T5858] Bluetooth: hci3: command tx timeout [ 66.006440][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.030026][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.055375][ T5858] Bluetooth: hci1: command tx timeout [ 66.060843][ T5858] Bluetooth: hci2: command tx timeout [ 66.067543][ T5155] Bluetooth: hci0: command tx timeout [ 66.072983][ T5155] Bluetooth: hci4: command tx timeout [ 66.116300][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.149241][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.184846][ T5850] veth0_vlan: entered promiscuous mode [ 66.197162][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.210361][ T5850] veth1_vlan: entered promiscuous mode [ 66.235950][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.246642][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.260743][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.269669][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.319355][ T5840] veth0_vlan: entered promiscuous mode [ 66.366929][ T5840] veth1_vlan: entered promiscuous mode [ 66.402683][ T5838] veth0_vlan: entered promiscuous mode [ 66.432955][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.449891][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.452742][ T5838] veth1_vlan: entered promiscuous mode [ 66.486858][ T5850] veth0_macvtap: entered promiscuous mode [ 66.522364][ T5850] veth1_macvtap: entered promiscuous mode [ 66.529748][ T5839] veth0_vlan: entered promiscuous mode [ 66.547528][ T5840] veth0_macvtap: entered promiscuous mode [ 66.553616][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.563351][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.570914][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.582063][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.597454][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.612625][ T5840] veth1_macvtap: entered promiscuous mode [ 66.626517][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.637382][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.648860][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.665696][ T5839] veth1_vlan: entered promiscuous mode [ 66.686259][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.688045][ T5838] veth0_macvtap: entered promiscuous mode [ 66.712524][ T5838] veth1_macvtap: entered promiscuous mode [ 66.737650][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.746763][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.755783][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.764926][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.812921][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.840148][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.850293][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.862129][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.874509][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.888043][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.899421][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.911592][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.922924][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.933643][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.945222][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.956588][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.977600][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.990136][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.000362][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.011090][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.025373][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.052048][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.080498][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.085652][ T5926] netlink: 'syz.0.6': attribute type 3 has an invalid length. [ 67.090428][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.100138][ T5926] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.6'. [ 67.115633][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.127805][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.139032][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.150213][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.173064][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.183161][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.194410][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.224382][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.245823][ T5839] veth0_macvtap: entered promiscuous mode [ 67.267644][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.280191][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.289734][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.309805][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.332651][ T5839] veth1_macvtap: entered promiscuous mode [ 67.383335][ T5932] evm: overlay not supported [ 67.441815][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.441901][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.461903][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.467446][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.481797][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.506483][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521264][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.533219][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.548838][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.560141][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.580347][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.622255][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.638447][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.648607][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.668257][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.681789][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.698241][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.709582][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.728801][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.744821][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.793034][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.813493][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.833988][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.842723][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.878839][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.908452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.945334][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.953174][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.977793][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.999825][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.054745][ T5858] Bluetooth: hci3: command tx timeout [ 68.099561][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.117067][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.142954][ T5858] Bluetooth: hci0: command tx timeout [ 68.148546][ T5858] Bluetooth: hci1: command tx timeout [ 68.154132][ T5858] Bluetooth: hci2: command tx timeout [ 68.159546][ T5858] Bluetooth: hci4: command tx timeout [ 68.239760][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.248817][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.266520][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.279692][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.436882][ T5941] netlink: 'syz.1.9': attribute type 29 has an invalid length. [ 68.439821][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.447630][ T5941] netlink: 'syz.1.9': attribute type 29 has an invalid length. [ 68.468504][ T5941] netlink: 'syz.1.9': attribute type 29 has an invalid length. [ 68.503923][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.638158][ T5944] netlink: 'syz.1.10': attribute type 22 has an invalid length. [ 68.652294][ T5944] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.001498][ T5953] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 69.038027][ T5953] syzkaller0: entered promiscuous mode [ 69.057990][ T5953] syzkaller0: entered allmulticast mode [ 69.101683][ T5955] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 69.556157][ T5965] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 69.838580][ T5967] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 70.543906][ T5155] Bluetooth: hci3: command tx timeout [ 70.550072][ T5155] Bluetooth: hci4: command tx timeout [ 70.556268][ T5155] Bluetooth: hci2: command tx timeout [ 70.561689][ T5155] Bluetooth: hci1: command tx timeout [ 70.567175][ T5155] Bluetooth: hci0: command tx timeout [ 70.736586][ T5966] syzkaller0: entered promiscuous mode [ 70.771670][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 70.792240][ T5966] syzkaller0: entered allmulticast mode [ 70.850199][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 71.585812][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.592387][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.724285][ T5983] usb usb7: usbfs: process 5983 (syz.2.21) did not claim interface 0 before use [ 75.588824][ T6005] netlink: 'syz.3.26': attribute type 29 has an invalid length. [ 75.639076][ T6005] netlink: 'syz.3.26': attribute type 29 has an invalid length. [ 75.894430][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.170791][ T6025] usb usb7: usbfs: process 6025 (syz.3.33) did not claim interface 0 before use [ 77.945665][ T1204] cfg80211: failed to load regulatory.db [ 79.152427][ T6042] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.583898][ T9] usb 3-1: unable to read config index 0 descriptor/all [ 79.592241][ T9] usb 3-1: can't read configurations, error -71 [ 79.698529][ T6051] netlink: 'syz.0.43': attribute type 29 has an invalid length. [ 79.708187][ T6051] netlink: 'syz.0.43': attribute type 29 has an invalid length. [ 79.797441][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.958188][ T6143] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 89.030967][ T6169] netlink: 288 bytes leftover after parsing attributes in process `syz.0.83'. [ 89.793737][ T6182] Cannot find add_set index 0 as target [ 90.459415][ T6190] netlink: 'syz.1.90': attribute type 1 has an invalid length. [ 94.012305][ T6216] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.99'. [ 94.595807][ T6227] blktrace: Concurrent blktraces are not allowed on loop3 [ 94.612813][ T6227] Cannot find add_set index 0 as target [ 95.708080][ T6234] netlink: 288 bytes leftover after parsing attributes in process `syz.3.104'. [ 97.241904][ T6257] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.112'. [ 101.321240][ T6299] netlink: 288 bytes leftover after parsing attributes in process `syz.2.121'. [ 108.094369][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.303962][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 108.322603][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.349077][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.400171][ T5929] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 108.448282][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.123518][ T5929] usb 4-1: config 0 descriptor?? [ 109.615506][ T6404] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.143'. [ 109.934843][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 110.886591][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 110.993882][ T6422] netlink: 288 bytes leftover after parsing attributes in process `syz.1.138'. [ 111.263208][ T5929] usb 4-1: USB disconnect, device number 2 [ 112.904518][ T6455] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.154'. [ 113.931106][ T6463] netlink: 288 bytes leftover after parsing attributes in process `syz.3.157'. [ 113.949128][ T6476] usb usb7: usbfs: process 6476 (syz.1.155) did not claim interface 0 before use [ 116.884121][ T6524] usb usb7: usbfs: process 6524 (syz.3.177) did not claim interface 0 before use [ 118.666932][ T6549] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.188'. [ 120.588908][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 120.628558][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 120.832007][ T6599] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 123.340551][ T6643] netlink: 'syz.4.224': attribute type 1 has an invalid length. [ 123.639517][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 123.665579][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 123.682527][ T6656] netlink: 288 bytes leftover after parsing attributes in process `syz.4.231'. [ 123.823819][ T5930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.055478][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 124.092675][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.105136][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.119641][ T5930] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 124.153094][ T6674] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 124.162868][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.180407][ T5930] usb 3-1: config 0 descriptor?? [ 124.342250][ T6683] netlink: 'syz.4.243': attribute type 17 has an invalid length. [ 124.350396][ T6683] netlink: 'syz.4.243': attribute type 16 has an invalid length. [ 124.358575][ T6683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.243'. [ 124.883615][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 124.889926][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 124.920428][ T5930] usb 3-1: USB disconnect, device number 4 [ 125.068856][ T6703] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 125.238710][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 125.248671][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 126.576895][ T6739] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 126.834249][ T6747] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.268'. [ 126.850702][ T6743] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.268'. [ 127.059525][ T6752] Zero length message leads to an empty skb [ 127.859412][ T6766] syz.3.277 uses obsolete (PF_INET,SOCK_PACKET) [ 128.400593][ T6776] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 129.510682][ T6808] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 130.501104][ T6837] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 130.692188][ T6845] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.311'. [ 130.918448][ T6849] netlink: 288 bytes leftover after parsing attributes in process `syz.0.308'. [ 131.932017][ T6875] netlink: 'syz.2.323': attribute type 29 has an invalid length. [ 132.042225][ T6879] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.324'. [ 133.027664][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.034452][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.412424][ T6913] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.338'. [ 134.841648][ T6936] netlink: 288 bytes leftover after parsing attributes in process `syz.2.339'. [ 135.071075][ T6939] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 135.564243][ T6937] tty tty28: ldisc open failed (-12), clearing slot 27 [ 136.031584][ T6956] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.353'. [ 137.377551][ T6980] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 137.894392][ T6996] netlink: 'syz.3.368': attribute type 39 has an invalid length. [ 139.711549][ T7013] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 140.191972][ T7034] input: syz1 as /devices/virtual/input/input5 [ 140.434878][ T7043] loop4: detected capacity change from 0 to 16384 [ 140.526865][ T7046] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 140.565940][ T7046] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 141.819552][ T7062] loop9: detected capacity change from 0 to 7 [ 141.851503][ T7062] Dev loop9: unable to read RDB block 7 [ 141.867700][ T7062] loop9: unable to read partition table [ 141.873548][ T7062] loop9: partition table beyond EOD, truncated [ 141.932381][ T7062] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 141.932381][ T7062] ) failed (rc=-5) [ 147.730828][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 148.823809][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.987913][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 149.022808][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.076154][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.126012][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 149.874011][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.887791][ T9] usb 5-1: config 0 descriptor?? [ 150.369187][ T9] logitech 0003:046D:C24F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.4-1/input0 [ 151.032525][ T9] logitech 0003:046D:C24F.0001: no inputs found [ 151.218906][ T9] usb 5-1: USB disconnect, device number 2 [ 152.017450][ T7207] syzkaller0: entered promiscuous mode [ 152.126136][ T7207] syzkaller0: entered allmulticast mode [ 152.305382][ T7210] netlink: 288 bytes leftover after parsing attributes in process `syz.3.447'. [ 152.376968][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 152.827843][ T7226] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.457'. [ 153.004068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.012634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.021387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 153.024010][ T58] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.078781][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 154.096394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.096807][ T58] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.112949][ T58] usb 4-1: config 0 has no interface number 0 [ 154.129739][ T58] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 154.139078][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.147232][ T58] usb 4-1: Product: syz [ 154.151413][ T58] usb 4-1: Manufacturer: syz [ 154.156188][ T58] usb 4-1: SerialNumber: syz [ 154.205082][ T58] usb 4-1: config 0 descriptor?? [ 154.217306][ T58] usb 4-1: selecting invalid altsetting 1 [ 154.243923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.252724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 154.261338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.272115][ T58] dvb_ttusb_budget: ttusb_init_controller: error [ 154.278684][ T58] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 154.373821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 154.432757][ T58] DVB: Unable to find symbol stv0299_attach() [ 154.469524][ T29] audit: type=1326 audit(1732853042.619:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.553035][ T58] DVB: Unable to find symbol tda8083_attach() [ 154.573497][ T29] audit: type=1326 audit(1732853042.619:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.604433][ T58] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 154.656815][ T58] usb 4-1: USB disconnect, device number 3 [ 154.685066][ T29] audit: type=1326 audit(1732853042.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.793128][ T29] audit: type=1326 audit(1732853042.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.838430][ T29] audit: type=1326 audit(1732853042.629:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.884105][ T29] audit: type=1326 audit(1732853042.629:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.906042][ T29] audit: type=1326 audit(1732853042.629:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.966297][ T29] audit: type=1326 audit(1732853042.629:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7251 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293f180809 code=0x7ffc0000 [ 154.983816][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 155.285182][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 155.293409][ T9] usb 5-1: config 0 has no interface number 0 [ 155.299752][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.331460][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 155.527177][ T59] IPVS: starting estimator thread 0... [ 155.549611][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 155.558902][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.567235][ T9] usb 5-1: Product: syz [ 155.571422][ T9] usb 5-1: Manufacturer: syz [ 155.576226][ T9] usb 5-1: SerialNumber: syz [ 155.582759][ T9] usb 5-1: config 0 descriptor?? [ 155.589651][ T7260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 155.610417][ T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 155.635925][ T7294] IPVS: using max 22 ests per chain, 52800 per kthread [ 155.847177][ T9] usb 5-1: USB disconnect, device number 3 [ 155.885836][ T9] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 156.789623][ T29] audit: type=1326 audit(1732853044.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd126780809 code=0x7ffc0000 [ 156.823962][ T29] audit: type=1326 audit(1732853044.949:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7334 comm="syz.4.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd126780809 code=0x7ffc0000 [ 157.954768][ T7367] input: syz1 as /devices/virtual/input/input6 [ 158.233391][ T7378] netlink: 'syz.2.520': attribute type 9 has an invalid length. [ 158.277408][ T7378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.520'. [ 159.404134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.425312][ T7422] usb usb7: usbfs: process 7422 (syz.1.529) did not claim interface 0 before use [ 159.513966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.012475][ T7441] loop4: detected capacity change from 0 to 16384 [ 160.474952][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 160.548799][ T7450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.120938][ T7463] netlink: 288 bytes leftover after parsing attributes in process `syz.2.549'. [ 161.294878][ T7467] process 'syz.4.552' launched './file2' with NULL argv: empty string added [ 161.658964][ T5858] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 162.083879][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.151720][ T7484] loop4: detected capacity change from 0 to 16384 [ 162.266022][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.290439][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.320683][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 162.338771][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.357485][ T9] usb 3-1: config 0 descriptor?? [ 162.637077][ T7499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.568'. [ 162.886116][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 162.899171][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.941720][ T9] usb 3-1: USB disconnect, device number 5 [ 163.227725][ T7512] input: syz1 as /devices/virtual/input/input7 [ 164.579122][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.593655][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.604491][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.616073][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.626246][ T5155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.633604][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.518026][ T7555] chnl_net:caif_netlink_parms(): no params data found [ 165.588495][ T7566] netlink: 288 bytes leftover after parsing attributes in process `syz.2.602'. [ 165.863342][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.878877][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.887216][ T7555] bridge_slave_0: entered allmulticast mode [ 165.896121][ T7555] bridge_slave_0: entered promiscuous mode [ 165.905305][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.912604][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.919958][ T7555] bridge_slave_1: entered allmulticast mode [ 165.928503][ T7555] bridge_slave_1: entered promiscuous mode [ 166.147018][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.192288][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.260319][ T7555] team0: Port device team_slave_0 added [ 166.272526][ T7555] team0: Port device team_slave_1 added [ 166.413781][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 166.458859][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.498871][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.526274][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.565502][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.595888][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.630935][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.643719][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.658838][ T9] usb 2-1: SerialNumber: syz [ 166.682018][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.693875][ T5858] Bluetooth: hci3: command tx timeout [ 166.703357][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.753913][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.874749][ T7555] hsr_slave_0: entered promiscuous mode [ 166.899762][ T9] usb 2-1: 0:2 : does not exist [ 166.941099][ T7555] hsr_slave_1: entered promiscuous mode [ 166.964078][ T7555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.972742][ T9] usb 2-1: USB disconnect, device number 2 [ 166.994841][ T7555] Cannot create hsr debugfs directory [ 167.358056][ T7609] usb usb7: usbfs: process 7609 (syz.4.612) did not claim interface 0 before use [ 167.655762][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.706321][ T7555] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.739707][ T7555] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.759473][ T7555] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.780846][ T7555] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.932803][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.973452][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.043347][ T7555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.065638][ T7555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.128901][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.136120][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.175786][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.183008][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.446727][ T7625] netlink: 288 bytes leftover after parsing attributes in process `syz.4.619'. [ 168.603169][ T7555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.775420][ T5858] Bluetooth: hci3: command tx timeout [ 169.129222][ T7555] veth0_vlan: entered promiscuous mode [ 169.152213][ T7555] veth1_vlan: entered promiscuous mode [ 169.235116][ T7555] veth0_macvtap: entered promiscuous mode [ 169.268968][ T7555] veth1_macvtap: entered promiscuous mode [ 169.317486][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.349348][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.369468][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.394667][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.425718][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.453729][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.478255][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.496064][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.506203][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.524742][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.551457][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.582244][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.663860][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.703902][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.811537][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.870129][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.870194][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.870210][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.870224][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.870235][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.870248][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.892148][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.942712][ T7555] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.943169][ T7555] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.943201][ T7555] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.943229][ T7555] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.182063][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.182087][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.511206][ T6392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.511232][ T6392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.854247][ T5858] Bluetooth: hci3: command tx timeout [ 171.505169][ T7687] loop4: detected capacity change from 0 to 16384 [ 171.565064][ T7695] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 171.581016][ T7695] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 172.462358][ T7719] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.657'. [ 172.851004][ T7746] loop4: detected capacity change from 0 to 16384 [ 172.910626][ T7749] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 172.960570][ T7749] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 172.970464][ T5858] Bluetooth: hci3: command tx timeout [ 173.077360][ T7757] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.672'. [ 174.501923][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.699521][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 174.727626][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.741513][ T9] usb 4-1: config 0 has no interface number 0 [ 174.768229][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.854061][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.875655][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.913911][ T9] usb 4-1: Product: syz [ 174.933803][ T9] usb 4-1: SerialNumber: syz [ 174.953824][ T9] usb 4-1: config 0 descriptor?? [ 174.964174][ T9] cm109 4-1:0.8: invalid payload size 40, expected 4 [ 174.972819][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 175.019311][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 175.191155][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.200701][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.208703][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.216883][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.224514][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.231633][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.238739][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.245859][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.252952][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.260251][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.274608][ T9] usb 4-1: USB disconnect, device number 4 [ 175.274660][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 175.318441][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 176.408160][ T7823] blktrace: Concurrent blktraces are not allowed on loop3 [ 176.417905][ T7823] Cannot find add_set index 0 as target [ 177.854061][ T58] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 178.003819][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 178.012245][ T58] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 178.020628][ T58] usb 2-1: config 0 has no interface number 0 [ 178.029365][ T58] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 178.038612][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.046678][ T58] usb 2-1: Product: syz [ 178.050969][ T58] usb 2-1: Manufacturer: syz [ 178.056113][ T58] usb 2-1: SerialNumber: syz [ 178.065110][ T58] usb 2-1: config 0 descriptor?? [ 178.271869][ T58] as10x_usb: device has been detected [ 178.284505][ T58] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 178.311291][ T58] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 178.398561][ T7861] blktrace: Concurrent blktraces are not allowed on loop3 [ 178.408506][ T7861] Cannot find add_set index 0 as target [ 178.652102][ T7863] netlink: 580 bytes leftover after parsing attributes in process `syz.4.714'. [ 178.950653][ T58] as10x_usb: error during firmware upload part1 [ 179.042649][ T58] Registered device PCTV Systems picoStick (74e) [ 179.054868][ T58] usb 2-1: USB disconnect, device number 3 [ 179.095755][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.118251][ T58] Unregistered device PCTV Systems picoStick (74e) [ 179.124170][ T58] as10x_usb: device has been disconnected [ 179.285365][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.300123][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 179.337286][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.384685][ T9] usb 6-1: config 0 descriptor?? [ 179.819499][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 179.830133][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 180.185233][ T9] usb 6-1: USB disconnect, device number 2 [ 180.322689][ T59] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.510177][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'. [ 180.642382][ T7891] netlink: 580 bytes leftover after parsing attributes in process `syz.5.725'. [ 181.431011][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 181.511715][ T7898] blktrace: Concurrent blktraces are not allowed on loop3 [ 181.519339][ T7898] Cannot find add_set index 0 as target [ 181.689066][ T59] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.703734][ T59] usb 4-1: config 0 has no interface number 0 [ 181.710054][ T59] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.218343][ T59] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 182.227589][ T58] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 182.901113][ T59] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 182.929125][ T59] usb 4-1: Product: syz [ 182.938737][ T59] usb 4-1: SerialNumber: syz [ 182.957274][ T59] usb 4-1: config 0 descriptor?? [ 182.971949][ T59] usb 4-1: can't set config #0, error -71 [ 182.988869][ T59] usb 4-1: USB disconnect, device number 5 [ 183.046154][ T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.086513][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.116735][ T58] usb 5-1: config 0 has no interface number 0 [ 183.132852][ T58] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.280066][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.289572][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.312919][ T58] usb 5-1: config 0 descriptor?? [ 184.057872][ T58] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 184.101457][ T7927] ip6gretap1: entered promiscuous mode [ 184.173927][ T5892] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.293021][ T59] usb 5-1: USB disconnect, device number 4 [ 184.353852][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.400834][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.457338][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 184.474293][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.490035][ T6427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.515421][ T5892] usb 3-1: config 0 descriptor?? [ 184.666896][ T6427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.740636][ T6427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.821504][ T6427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.903807][ T5950] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.933378][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 184.939755][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 184.972437][ T5892] usb 3-1: USB disconnect, device number 6 [ 185.081022][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 185.099407][ T6427] bridge_slave_1: left allmulticast mode [ 185.110962][ T5950] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 185.114166][ T6427] bridge_slave_1: left promiscuous mode [ 185.138989][ T5950] usb 6-1: config 0 has no interface number 0 [ 185.152280][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.161907][ T5950] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 185.214567][ T6427] bridge_slave_0: left allmulticast mode [ 185.215376][ T5950] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 185.224008][ T6427] bridge_slave_0: left promiscuous mode [ 185.263995][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.272028][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 185.305710][ T5950] usb 6-1: Product: syz [ 185.323599][ T5950] usb 6-1: SerialNumber: syz [ 185.343600][ T5950] usb 6-1: config 0 descriptor?? [ 185.377874][ T5950] cm109 6-1:0.8: invalid payload size 40, expected 4 [ 185.415013][ T5950] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input12 [ 185.610758][ C0] cm109_urb_ctl_callback: 29 callbacks suppressed [ 185.610782][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.614271][ T58] usb 6-1: USB disconnect, device number 3 [ 185.617239][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 185.891915][ T58] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 186.382831][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 186.401078][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 186.414078][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 186.427309][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 187.665107][ T8020] blktrace: Concurrent blktraces are not allowed on loop3 [ 187.679557][ T8020] Cannot find add_set index 0 as target [ 188.459302][ T6427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.491527][ T6427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.502594][ T6427] bond0 (unregistering): Released all slaves [ 189.233780][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.547700][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 189.566614][ T5892] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 189.575064][ T5892] usb 6-1: config 0 has no interface number 0 [ 189.581194][ T5892] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.544963][ T5892] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 190.555040][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 190.563305][ T5892] usb 6-1: Product: syz [ 190.567866][ T5892] usb 6-1: SerialNumber: syz [ 190.573957][ T5892] usb 6-1: config 0 descriptor?? [ 190.582468][ T5892] cm109 6-1:0.8: invalid payload size 40, expected 4 [ 190.688927][ T59] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 190.698430][ T5892] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input14 [ 190.791384][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 190.792492][ T5930] usb 6-1: USB disconnect, device number 4 [ 190.798371][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 190.862355][ T59] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 190.883499][ T5930] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 190.897604][ T59] usb 3-1: config 0 has no interface number 0 [ 190.908450][ T59] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 190.929924][ T59] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 190.943565][ T59] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 190.958491][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.971417][ T59] usb 3-1: Product: syz [ 190.983772][ T59] usb 3-1: Manufacturer: syz [ 190.992577][ T59] usb 3-1: SerialNumber: syz [ 191.086745][ T59] usb 3-1: config 0 descriptor?? [ 191.101013][ T8032] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.115913][ T59] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 191.343809][ T6427] hsr_slave_0: left promiscuous mode [ 191.377128][ T5892] usb 3-1: USB disconnect, device number 7 [ 191.391961][ T5892] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 191.527644][ T6427] hsr_slave_1: left promiscuous mode [ 191.543372][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.555871][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.631148][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.673838][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.866180][ T6427] veth1_macvtap: left promiscuous mode [ 191.872293][ T6427] veth0_macvtap: left promiscuous mode [ 191.878339][ T6427] veth1_vlan: left promiscuous mode [ 191.888637][ T6427] veth0_vlan: left promiscuous mode [ 194.460534][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468202][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.534733][ T8124] usb usb7: usbfs: process 8124 (syz.3.797) did not claim interface 0 before use [ 194.788420][ T6427] team0 (unregistering): Port device team_slave_1 removed [ 194.883806][ T6427] team0 (unregistering): Port device team_slave_0 removed [ 195.943822][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.963787][ T8114] tipc: Started in network mode [ 195.969258][ T8114] tipc: Node identity 4, cluster identity 4711 [ 195.991539][ T8114] tipc: Node number set to 4 [ 195.998123][ T8141] netlink: 288 bytes leftover after parsing attributes in process `syz.3.803'. [ 196.220713][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.253850][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.307866][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 196.363604][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.400487][ T25] usb 5-1: config 0 descriptor?? [ 196.831386][ T8165] usb usb7: usbfs: process 8165 (syz.3.811) did not claim interface 0 before use [ 196.874137][ T5894] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 196.919361][ T8175] tipc: Started in network mode [ 196.929263][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 196.935520][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.972812][ T25] usb 5-1: USB disconnect, device number 5 [ 196.991160][ T8175] tipc: Node identity 4, cluster identity 4711 [ 197.019001][ T8175] tipc: Node number set to 4 [ 197.121687][ T5894] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 197.129971][ T5894] usb 6-1: config 0 has no interface number 0 [ 197.136208][ T5894] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 197.147356][ T5894] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 197.193033][ T5894] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 197.208488][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.219643][ T5894] usb 6-1: Product: syz [ 197.229527][ T5894] usb 6-1: Manufacturer: syz [ 197.239660][ T5894] usb 6-1: SerialNumber: syz [ 197.248477][ T8183] binfmt_misc: register: failed to install interpreter file ./file0 [ 197.271376][ T5894] usb 6-1: config 0 descriptor?? [ 197.279377][ T8161] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 197.296359][ T5894] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 197.514233][ T5950] usb 6-1: USB disconnect, device number 5 [ 197.614294][ T5950] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 200.096572][ T8227] loop4: detected capacity change from 0 to 16384 [ 200.908566][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.013784][ T8254] tipc: Started in network mode [ 201.141055][ T8254] tipc: Node identity 4, cluster identity 4711 [ 201.219477][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 201.301108][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.319152][ T8254] tipc: Node number set to 4 [ 201.358799][ T9] usb 4-1: config 0 has no interface number 0 [ 201.709281][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 201.722125][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.734413][ T9] usb 4-1: Product: syz [ 201.738628][ T9] usb 4-1: Manufacturer: syz [ 201.743242][ T9] usb 4-1: SerialNumber: syz [ 201.766241][ T9] usb 4-1: config 0 descriptor?? [ 201.777391][ T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 201.788704][ T9] usb 4-1: selecting invalid altsetting 1 [ 201.800765][ T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 201.810255][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 201.821056][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 201.831076][ T9] usb 4-1: media controller created [ 201.947438][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.980465][ T8292] loop4: detected capacity change from 0 to 16384 [ 202.080563][ T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 202.088068][ T9] zl10353_read_register: readreg error (reg=127, ret==-32) [ 203.028036][ T9] usb 4-1: USB disconnect, device number 6 [ 203.193807][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.349006][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.363859][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.407372][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.432531][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.484396][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.501206][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.528475][ T25] usb 3-1: Product: syz [ 203.543738][ T25] usb 3-1: Manufacturer: syz [ 203.763196][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 203.768637][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 203.794388][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 203.803799][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 203.884120][ T8345] Cannot find add_set index 0 as target [ 204.617460][ T25] usb 3-1: USB disconnect, device number 8 [ 205.803060][ T8357] usb usb7: usbfs: process 8357 (syz.4.866) did not claim interface 0 before use [ 205.889378][ T8374] loop4: detected capacity change from 0 to 16384 [ 206.512929][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 206.521906][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 207.716259][ T8409] usb usb7: usbfs: process 8409 (syz.2.881) did not claim interface 0 before use [ 208.041458][ T8411] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.882'. [ 208.058691][ T8411] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 209.578013][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 209.777378][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 209.805062][ T9] usb 2-1: config 0 has no interface number 0 [ 209.811215][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 209.891092][ T8448] usb usb7: usbfs: process 8448 (syz.4.895) did not claim interface 0 before use [ 209.920397][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 209.963257][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 209.972628][ T8454] netlink: 'syz.2.898': attribute type 29 has an invalid length. [ 209.978958][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.999608][ T8454] netlink: 'syz.2.898': attribute type 29 has an invalid length. [ 210.010402][ T8454] netlink: 'syz.2.898': attribute type 29 has an invalid length. [ 210.025447][ T9] usb 2-1: Product: syz [ 210.044568][ T9] usb 2-1: Manufacturer: syz [ 210.064979][ T9] usb 2-1: SerialNumber: syz [ 210.081232][ T9] usb 2-1: config 0 descriptor?? [ 210.092888][ T8457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.107543][ T8428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.141973][ T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 210.282619][ T8468] netlink: 460 bytes leftover after parsing attributes in process `syz.5.902'. [ 210.356523][ T25] usb 2-1: USB disconnect, device number 4 [ 210.364653][ T25] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 210.548389][ T8479] loop2: detected capacity change from 0 to 7 [ 210.584590][ T8479] Dev loop2: unable to read RDB block 7 [ 210.593360][ T8479] loop2: unable to read partition table [ 210.610799][ T8479] loop2: partition table beyond EOD, truncated [ 210.658229][ T8479] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.695618][ T5216] Dev loop2: unable to read RDB block 7 [ 210.708703][ T5216] loop2: unable to read partition table [ 210.720781][ T5216] loop2: partition table beyond EOD, truncated [ 211.137834][ T8498] netlink: 'syz.5.911': attribute type 29 has an invalid length. [ 211.207267][ T8498] netlink: 'syz.5.911': attribute type 29 has an invalid length. [ 211.753570][ T8503] netlink: 288 bytes leftover after parsing attributes in process `syz.2.910'. [ 211.874114][ T8498] netlink: 'syz.5.911': attribute type 29 has an invalid length. [ 211.987644][ T8507] netlink: 256 bytes leftover after parsing attributes in process `syz.1.914'. [ 212.210672][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 212.313872][ T8522] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.920'. [ 212.353602][ T8522] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 212.680900][ T8536] loop2: detected capacity change from 0 to 7 [ 212.704544][ T8536] Dev loop2: unable to read RDB block 7 [ 212.710182][ T8536] loop2: unable to read partition table [ 212.734990][ T8536] loop2: partition table beyond EOD, truncated [ 212.823805][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 212.859559][ T5892] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.903901][ T8536] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.980897][ T8540] netlink: 288 bytes leftover after parsing attributes in process `syz.2.925'. [ 213.040260][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 213.078587][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.585466][ T5892] usb 4-1: config 0 descriptor?? [ 213.712619][ T9] usb 2-1: config 0 has no interfaces? [ 213.722301][ T9] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 213.736440][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.760562][ T9] usb 2-1: Product: syz [ 213.768536][ T9] usb 2-1: Manufacturer: syz [ 213.773264][ T9] usb 2-1: SerialNumber: syz [ 213.813978][ T9] usb 2-1: config 0 descriptor?? [ 213.996490][ T5892] ath6kl: Unsupported hardware version: 0x0 [ 214.064822][ T8517] tipc: Started in network mode [ 214.065684][ T5892] ath6kl: Failed to init ath6kl core: -22 [ 214.109930][ T5892] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 214.119315][ T8517] tipc: Node identity ce07257291e7, cluster identity 4711 [ 214.145806][ T8517] tipc: Enabled bearer , priority 3 [ 214.218062][ T5892] usb 4-1: USB disconnect, device number 7 [ 214.568608][ T8559] tipc: Cannot configure node identity twice [ 214.872555][ T5950] usb 2-1: USB disconnect, device number 5 [ 215.266516][ T5892] tipc: Node number set to 1608525170 [ 215.960753][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 215.960772][ T29] audit: type=1326 audit(1732853104.119:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.019583][ T29] audit: type=1326 audit(1732853104.119:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.041184][ T29] audit: type=1326 audit(1732853104.129:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.063487][ T29] audit: type=1326 audit(1732853104.129:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.085550][ T29] audit: type=1326 audit(1732853104.129:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.107241][ T29] audit: type=1326 audit(1732853104.129:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.128813][ T29] audit: type=1326 audit(1732853104.129:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.150321][ T29] audit: type=1326 audit(1732853104.129:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.172063][ T29] audit: type=1326 audit(1732853104.129:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 216.202205][ T29] audit: type=1326 audit(1732853104.209:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8614 comm="syz.3.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec7380809 code=0x7ffc0000 [ 217.346400][ T8650] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.963'. [ 217.489906][ T8650] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 217.802052][ T8658] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 218.125060][ T5950] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.274052][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 218.293924][ T5950] usb 6-1: Using ep0 maxpacket: 8 [ 218.305489][ T5950] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 218.333657][ T5950] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 218.364378][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.394720][ T5950] usb 6-1: Product: syz [ 218.411318][ T5950] usb 6-1: Manufacturer: syz [ 218.432535][ T5950] usb 6-1: SerialNumber: syz [ 218.485643][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.500054][ T5950] usb 6-1: config 0 descriptor?? [ 218.532499][ T5950] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 218.545514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.589709][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 218.622242][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.698460][ T9] usb 4-1: config 0 descriptor?? [ 219.148823][ T9] hid-generic 0003:05AC:4262.0002: unbalanced delimiter at end of report description [ 219.174801][ T9] hid-generic 0003:05AC:4262.0002: probe with driver hid-generic failed with error -22 [ 219.353822][ T9] usb 4-1: USB disconnect, device number 8 [ 220.164490][ T5950] gspca_zc3xx: reg_w_i err -71 [ 221.123241][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 221.133780][ T5950] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 221.140346][ T5950] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 221.196532][ T5950] usb 6-1: USB disconnect, device number 6 [ 221.304101][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 221.335949][ T9] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 221.356322][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.416311][ T9] usb 5-1: Product: syz [ 221.443158][ T9] usb 5-1: Manufacturer: syz [ 221.464111][ T9] usb 5-1: SerialNumber: syz [ 221.485419][ T9] usb 5-1: config 0 descriptor?? [ 221.494600][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.522423][ T9] empeg 5-1:0.0: empeg converter detected [ 221.533935][ T9] usb 5-1: active config #0 != 1 ?? [ 221.673780][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 221.681231][ T5929] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.695317][ T5929] usb 4-1: config 0 has no interface number 0 [ 221.702559][ T8738] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 221.715517][ T5929] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.758291][ T5929] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.792108][ T5929] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 221.809584][ T8738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.824150][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 221.851940][ T8706] bridge0: port 3(vlan2) entered blocking state [ 221.865080][ T5929] usb 4-1: Product: syz [ 221.869762][ T8706] bridge0: port 3(vlan2) entered disabled state [ 221.876329][ T5929] usb 4-1: SerialNumber: syz [ 221.882595][ T8706] vlan2: entered allmulticast mode [ 221.889992][ T5929] usb 4-1: config 0 descriptor?? [ 221.898392][ T8706] syz_tun: entered allmulticast mode [ 221.909708][ T5929] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 221.919792][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 221.932773][ T8706] vlan2: entered promiscuous mode [ 221.940308][ T8706] syz_tun: entered promiscuous mode [ 221.965369][ T8706] bridge0: port 3(vlan2) entered blocking state [ 221.972064][ T8706] bridge0: port 3(vlan2) entered forwarding state [ 222.012534][ T8741] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 222.048696][ T9] usb 5-1: USB disconnect, device number 6 [ 222.068077][ T8741] bond1: (slave batadv1): making interface the new active one [ 222.113203][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.120433][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.128037][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.135402][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.142546][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.149686][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.156825][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.163968][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.171105][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.178271][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 222.181541][ T8741] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 222.209745][ T5950] usb 4-1: USB disconnect, device number 9 [ 222.215696][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 222.255559][ T5950] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 223.635254][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.414082][ T25] IPVS: starting estimator thread 0... [ 224.467347][ T8780] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1003'. [ 224.477269][ T8780] openvswitch: netlink: EtherType 0 is less than min 600 [ 224.493831][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 224.516745][ T9] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 224.564074][ T8778] IPVS: using max 20 ests per chain, 48000 per kthread [ 224.591665][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 224.622126][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 224.652272][ T9] usb 3-1: Product: syz [ 224.666336][ T9] usb 3-1: Manufacturer: syz [ 224.670977][ T9] usb 3-1: SerialNumber: syz [ 224.693742][ T9] usb 3-1: config 0 descriptor?? [ 224.713451][ T9] pwc: Philips SPC 880NC USB webcam detected. [ 225.648219][ T9] pwc: Warning: more than 1 configuration available. [ 225.655456][ T9] pwc: Failed to set LED on/off time (-71) [ 225.661587][ T9] pwc: send_video_command error -71 [ 225.666880][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 225.680114][ T9] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 225.705555][ T9] usb 3-1: USB disconnect, device number 9 [ 226.462887][ T8822] netlink: 'syz.5.1014': attribute type 29 has an invalid length. [ 226.502610][ T8822] netlink: 'syz.5.1014': attribute type 29 has an invalid length. [ 226.533271][ T8822] netlink: 'syz.5.1014': attribute type 29 has an invalid length. [ 226.749031][ T8834] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1017'. [ 226.791791][ T8834] openvswitch: netlink: EtherType 0 is less than min 600 [ 227.102619][ T8853] loop2: detected capacity change from 0 to 7 [ 227.129143][ T5838] Dev loop2: unable to read RDB block 7 [ 227.152299][ T5838] loop2: unable to read partition table [ 227.255041][ T5838] loop2: partition table beyond EOD, truncated [ 227.777528][ T8853] Dev loop2: unable to read RDB block 7 [ 227.793847][ T8853] loop2: unable to read partition table [ 227.799681][ T8853] loop2: partition table beyond EOD, truncated [ 227.854595][ T8853] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.888751][ T5216] Dev loop2: unable to read RDB block 7 [ 227.905868][ T5216] loop2: unable to read partition table [ 227.911734][ T5216] loop2: partition table beyond EOD, truncated [ 228.307524][ T8873] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1033'. [ 228.330745][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'. [ 228.334801][ T8873] openvswitch: netlink: EtherType 0 is less than min 600 [ 228.593856][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 228.632131][ T8891] loop2: detected capacity change from 0 to 7 [ 228.686945][ T8891] Dev loop2: unable to read RDB block 7 [ 228.692584][ T8891] loop2: unable to read partition table [ 228.703444][ T8891] loop2: partition table beyond EOD, truncated [ 228.723837][ T8891] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.753778][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 228.766840][ T5892] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.797915][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 228.812283][ T5216] Dev loop2: unable to read RDB block 7 [ 228.826365][ T5216] loop2: unable to read partition table [ 228.832496][ T5892] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 228.854058][ T5216] loop2: partition table beyond EOD, truncated [ 228.892036][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.921735][ T5852] Bluetooth: unknown link type 244 [ 228.927427][ T5852] Bluetooth: hci4: connection err: -111 [ 228.960267][ T5892] usb 6-1: config 0 descriptor?? [ 229.043802][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.205799][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.224029][ T8915] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1047'. [ 229.241934][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.256695][ T8915] openvswitch: netlink: EtherType 0 is less than min 600 [ 229.264093][ T5894] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 229.291508][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.340379][ T5894] usb 2-1: config 0 descriptor?? [ 229.385775][ T5892] hid (null): unknown global tag 0xc [ 229.424350][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 229.469308][ T5892] cougar 0003:060B:500A.0003: unexpected long global item [ 229.498579][ T5892] cougar 0003:060B:500A.0003: parse failed [ 229.509237][ T5892] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 229.587936][ T59] usb 6-1: USB disconnect, device number 7 [ 229.766362][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.777741][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 229.785636][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 229.798327][ T5894] usb 2-1: USB disconnect, device number 6 [ 229.933954][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 229.940945][ T25] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 229.949261][ T25] usb 4-1: config 0 has no interface number 0 [ 229.955449][ T25] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 229.964882][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.982446][ T25] usb 4-1: config 0 descriptor?? [ 229.990203][ T25] ftdi_sio 4-1:0.130: FTDI USB Serial Device converter detected [ 230.000157][ T25] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 230.125161][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 230.229712][ T5894] usb 4-1: USB disconnect, device number 10 [ 230.261855][ T5894] ftdi_sio 4-1:0.130: device disconnected [ 231.773949][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.966222][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.000382][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.075516][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 232.113278][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.168282][ T9] usb 2-1: config 0 descriptor?? [ 232.487030][ T5950] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.654286][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 232.664170][ T5950] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 232.689330][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 232.695780][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.705762][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.746099][ T9] usb 2-1: USB disconnect, device number 7 [ 232.757812][ T5950] usb 5-1: Product: syz [ 232.772428][ T5950] usb 5-1: Manufacturer: syz [ 232.781680][ T5950] usb 5-1: SerialNumber: syz [ 232.844181][ T5950] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 232.866582][ T9042] netlink: 'syz.5.1076': attribute type 29 has an invalid length. [ 232.877644][ T9042] netlink: 'syz.5.1076': attribute type 29 has an invalid length. [ 232.920274][ T9042] netlink: 'syz.5.1076': attribute type 29 has an invalid length. [ 233.759079][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 233.779710][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1091'. [ 234.857893][ T5950] gspca_stk1135: reg_w 0x200 err -71 [ 234.864261][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 234.870607][ T5950] gspca_stk1135: Sensor write failed [ 234.900042][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 234.979822][ T9091] blktrace: Concurrent blktraces are not allowed on loop3 [ 235.536272][ T5950] gspca_stk1135: Sensor write failed [ 235.542371][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 235.548876][ T5950] gspca_stk1135: Sensor read failed [ 235.554329][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 235.560684][ T5950] gspca_stk1135: Sensor read failed [ 235.565949][ T5950] gspca_stk1135: Detected sensor type unknown (0x0) [ 235.572581][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 235.579303][ T5950] gspca_stk1135: Sensor read failed [ 235.584644][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 235.592077][ T5950] gspca_stk1135: Sensor read failed [ 235.597407][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 235.604228][ T5950] gspca_stk1135: Sensor write failed [ 235.609617][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 235.616064][ T5950] gspca_stk1135: Sensor write failed [ 235.622235][ T5950] stk1135 5-1:64.0: probe with driver stk1135 failed with error -71 [ 235.664743][ T5950] usb 5-1: USB disconnect, device number 7 [ 235.893963][ T5852] Bluetooth: hci2: Unknown advertising packet type: 0x30 [ 235.894051][ T5852] Bluetooth: hci2: Malformed LE Event: 0x0d [ 236.043924][ T5950] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.372675][ T5950] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 236.381366][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.393075][ T5950] usb 5-1: config 0 has no interface number 0 [ 236.731608][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 237.005706][ T5950] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 237.017647][ T5950] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 237.031124][ T5950] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 237.040259][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.052439][ T5950] usb 5-1: config 0 descriptor?? [ 237.084110][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1104'. [ 237.147387][ T5950] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 237.254007][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.328245][ T5950] usb 5-1: USB disconnect, device number 8 [ 237.336727][ T6414] usb 5-1: Failed to submit usb control message: -71 [ 237.372161][ T6414] usb 5-1: unable to send the bmi data to the device: -71 [ 237.379435][ T6414] usb 5-1: unable to get target info from device [ 237.385932][ T6414] usb 5-1: could not get target info (-71) [ 237.392045][ T6414] usb 5-1: could not probe fw (-71) [ 237.466679][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 237.493839][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 237.527936][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 237.539660][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.551271][ T9] usb 3-1: Product: syz [ 237.568175][ T9] usb 3-1: Manufacturer: syz [ 237.586056][ T9] usb 3-1: SerialNumber: syz [ 237.602353][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 237.719049][ T9138] loop2: detected capacity change from 0 to 7 [ 237.762476][ T9138] Dev loop2: unable to read RDB block 7 [ 237.773809][ T9138] loop2: unable to read partition table [ 237.809910][ T9138] loop2: partition table beyond EOD, truncated [ 237.825588][ T9138] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.960024][ T9142] blktrace: Concurrent blktraces are not allowed on loop3 [ 238.876956][ T9158] netlink: 'syz.1.1118': attribute type 6 has an invalid length. [ 238.893266][ T9158] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1118'. [ 238.922089][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 238.983875][ T1204] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 239.776592][ T1204] usb 5-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 239.788218][ T1204] usb 5-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.832454][ T1204] usb 5-1: config 1 interface 0 has no altsetting 0 [ 239.875546][ T1204] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 239.885363][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.912103][ T1204] usb 5-1: Product: syz [ 239.922213][ T1204] usb 5-1: Manufacturer: syz [ 239.947871][ T1204] usb 5-1: SerialNumber: syz [ 239.964207][ T9148] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.065191][ T9] gspca_stk1135: reg_w 0x200 err -71 [ 240.071618][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.084654][ T9171] loop2: detected capacity change from 0 to 7 [ 240.089573][ T9] gspca_stk1135: Sensor write failed [ 240.094421][ T9171] Dev loop2: unable to read RDB block 7 [ 240.101970][ T9171] loop2: unable to read partition table [ 240.104055][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.108270][ T9171] loop2: partition table beyond EOD, truncated [ 240.130298][ T9171] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 240.163999][ T9] gspca_stk1135: Sensor write failed [ 240.169392][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.203517][ T9] gspca_stk1135: Sensor read failed [ 240.209042][ T1204] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17 [ 240.219670][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.234826][ T9] gspca_stk1135: Sensor read failed [ 240.240457][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 240.249601][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.267389][ T9] gspca_stk1135: Sensor read failed [ 240.279910][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.293777][ T9] gspca_stk1135: Sensor read failed [ 240.338462][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.352959][ T9] gspca_stk1135: Sensor write failed [ 240.363943][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 240.370348][ T9] gspca_stk1135: Sensor write failed [ 240.388508][ T9] stk1135 3-1:64.0: probe with driver stk1135 failed with error -71 [ 240.527846][ T9] usb 3-1: USB disconnect, device number 10 [ 240.977601][ T9] usb 5-1: USB disconnect, device number 9 [ 241.004647][ T5851] bcm5974 5-1:1.0: could not read from device [ 241.078363][ T5201] bcm5974 5-1:1.0: could not read from device [ 241.181120][ T9198] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1130'. [ 241.506161][ T5201] bcm5974 5-1:1.0: could not read from device [ 241.986597][ T9207] loop2: detected capacity change from 0 to 7 [ 242.022347][ T5862] Dev loop2: unable to read RDB block 7 [ 242.029461][ T5862] loop2: unable to read partition table [ 242.046316][ T5862] loop2: partition table beyond EOD, truncated [ 242.092529][ T9207] Dev loop2: unable to read RDB block 7 [ 242.109683][ T9207] loop2: unable to read partition table [ 242.186951][ T9207] loop2: partition table beyond EOD, truncated [ 242.226335][ T9207] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 242.876362][ T9244] netlink: 536 bytes leftover after parsing attributes in process `syz.3.1150'. [ 242.893783][ T1204] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 243.011047][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1151'. [ 243.097028][ T1204] usb 2-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 243.138016][ T1204] usb 2-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.877531][ T9256] macvlan0: entered promiscuous mode [ 243.914353][ T9256] veth0_virt_wifi: entered promiscuous mode [ 243.917861][ T1204] usb 2-1: config 1 interface 0 has no altsetting 0 [ 243.929358][ T1204] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 243.938837][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.950540][ T1204] usb 2-1: Product: syz [ 243.955669][ T1204] usb 2-1: Manufacturer: syz [ 243.960292][ T1204] usb 2-1: SerialNumber: syz [ 243.990823][ T9236] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.231232][ T9266] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.1157'. [ 244.245554][ T9266] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.280191][ T1204] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input18 [ 244.377828][ T9274] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1162'. [ 244.531747][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 244.541781][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'. [ 245.515602][ T5201] bcm5974 2-1:1.0: could not write to device [ 245.522662][ T5895] usb 2-1: USB disconnect, device number 8 [ 245.623310][ T5201] bcm5974 2-1:1.0: could not read from device [ 245.639249][ T6047] bcm5974 2-1:1.0: could not read from device [ 245.744081][ T5201] bcm5974 2-1:1.0: could not read from device [ 245.910983][ T9300] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1173'. [ 245.928801][ T9302] netlink: 1296 bytes leftover after parsing attributes in process `syz.4.1171'. [ 245.973904][ T9302] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 246.013796][ T58] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 246.251074][ T58] usb 6-1: config 0 has no interfaces? [ 246.277767][ T58] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 246.287996][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.304984][ T58] usb 6-1: Product: syz [ 246.309219][ T58] usb 6-1: Manufacturer: syz [ 246.357617][ T58] usb 6-1: SerialNumber: syz [ 246.363434][ T9316] netlink: 'syz.3.1178': attribute type 3 has an invalid length. [ 246.410393][ T58] usb 6-1: config 0 descriptor?? [ 246.800896][ T1204] usb 6-1: USB disconnect, device number 8 [ 246.828288][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 246.871898][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 247.038852][ T9334] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 247.394487][ T1204] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 247.574043][ T1204] usb 5-1: Using ep0 maxpacket: 8 [ 247.585526][ T1204] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 247.594096][ T1204] usb 5-1: config 0 has no interface number 0 [ 247.601568][ T1204] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 247.616046][ T1204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.629474][ T1204] usb 5-1: config 0 descriptor?? [ 247.642057][ T1204] ftdi_sio 5-1:0.130: FTDI USB Serial Device converter detected [ 247.662943][ T1204] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 247.846572][ T1204] usb 5-1: USB disconnect, device number 10 [ 247.876897][ T1204] ftdi_sio 5-1:0.130: device disconnected [ 248.239944][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 249.297896][ T9403] __nla_validate_parse: 2 callbacks suppressed [ 249.297917][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 249.320249][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 250.889747][ T9434] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.1227'. [ 250.899300][ T9434] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 251.363347][ T9445] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1230'. [ 252.394840][ T9458] netlink: 'syz.1.1236': attribute type 2 has an invalid length. [ 252.440824][ T9458] netlink: 'syz.1.1236': attribute type 9 has an invalid length. [ 252.505393][ T9458] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1236'. [ 254.163957][ T5895] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 254.254501][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 254.315422][ T5895] usb 3-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 254.330065][ T5895] usb 3-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.357646][ T5895] usb 3-1: config 1 interface 0 has no altsetting 0 [ 254.375868][ T5895] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 254.385467][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.393486][ T5895] usb 3-1: Product: syz [ 254.403822][ T5892] usb 5-1: device descriptor read/64, error -71 [ 254.413728][ T5895] usb 3-1: Manufacturer: syz [ 254.418349][ T5895] usb 3-1: SerialNumber: syz [ 254.436151][ T9499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 254.653872][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.669020][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input19 [ 254.945075][ T5201] bcm5974 3-1:1.0: could not read from device [ 254.961284][ T5201] bcm5974 3-1:1.0: could not read from device [ 255.078008][ T5201] bcm5974 3-1:1.0: could not read from device [ 255.091534][ T5895] usb 3-1: USB disconnect, device number 11 [ 255.124069][ T5892] usb 5-1: device descriptor read/64, error -71 [ 255.234563][ T5892] usb usb5-port1: attempt power cycle [ 255.323004][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1260'. [ 255.384110][ T9525] netlink: 'syz.5.1260': attribute type 10 has an invalid length. [ 255.391984][ T9525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1260'. [ 255.405336][ T9525] batman_adv: batadv0: Adding interface: vlan1 [ 255.426871][ T9525] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.471598][ T9525] batman_adv: batadv0: Interface activated: vlan1 [ 255.583869][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.624654][ T5892] usb 5-1: device descriptor read/8, error -71 [ 255.873967][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.894300][ T5892] usb 5-1: device descriptor read/8, error -71 [ 255.896462][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.907104][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.004411][ T5892] usb usb5-port1: unable to enumerate USB device [ 257.734217][ T1204] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.053904][ T1204] usb 3-1: Using ep0 maxpacket: 32 [ 258.064146][ T1204] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 258.079173][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.116040][ T1204] usb 3-1: Product: syz [ 258.120257][ T1204] usb 3-1: Manufacturer: syz [ 258.142560][ T1204] usb 3-1: SerialNumber: syz [ 258.174586][ T1204] usb 3-1: config 0 descriptor?? [ 258.190381][ T1204] empeg 3-1:0.0: empeg converter detected [ 258.197177][ T1204] usb 3-1: active config #0 != 1 ?? [ 258.405243][ T5929] usb 3-1: USB disconnect, device number 12 [ 259.489562][ T5929] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.664399][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 259.748080][ T5929] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 259.757813][ T5929] usb 6-1: config 0 has no interface number 0 [ 259.779018][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.871368][ T5929] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 259.880918][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 259.889497][ T5929] usb 6-1: Product: syz [ 259.893644][ T5929] usb 6-1: SerialNumber: syz [ 259.923041][ T5929] usb 6-1: config 0 descriptor?? [ 260.143842][ T5895] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 260.229981][ T5929] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 260.252135][ T5929] usb 6-1: USB disconnect, device number 9 [ 260.411495][ T5895] usb 5-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 260.428701][ T5895] usb 5-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.442438][ T5895] usb 5-1: config 1 interface 0 has no altsetting 0 [ 260.452254][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 260.461781][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.470536][ T5895] usb 5-1: Product: syz [ 260.475228][ T5895] usb 5-1: Manufacturer: syz [ 260.506776][ T5895] usb 5-1: SerialNumber: syz [ 260.521088][ T9606] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 260.739527][ T5895] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input20 [ 260.937531][ T5201] bcm5974 5-1:1.0: could not read from device [ 260.956804][ T5201] bcm5974 5-1:1.0: could not read from device [ 260.970333][ T5201] bcm5974 5-1:1.0: could not read from device [ 260.980761][ T5895] usb 5-1: USB disconnect, device number 15 [ 260.995886][ T5201] bcm5974 5-1:1.0: could not read from device [ 261.447751][ T9638] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1300'. [ 261.823990][ T1204] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 261.880442][ T9644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 262.035474][ T1204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.053881][ T1204] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.083627][ T1204] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 262.094941][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1310'. [ 262.103085][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.114539][ T1204] usb 3-1: config 0 descriptor?? [ 263.195044][ T5929] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 263.363748][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 263.372573][ T5929] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 263.393101][ T5929] usb 5-1: config 0 has no interface number 0 [ 263.400875][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.417504][ T5929] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 263.432208][ T5929] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 263.454059][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 263.462183][ T5929] usb 5-1: Product: syz [ 263.477204][ T5929] usb 5-1: SerialNumber: syz [ 263.495717][ T5929] usb 5-1: config 0 descriptor?? [ 263.515292][ T5929] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 263.639032][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1322'. [ 263.708751][ T58] usb 5-1: USB disconnect, device number 16 [ 263.906644][ T9687] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1319'. [ 264.570917][ T1204] usb 3-1: USB disconnect, device number 13 [ 265.470556][ T9711] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1334'. [ 266.011882][ T9736] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1339'. [ 266.374060][ T5852] Bluetooth: hci3: command tx timeout [ 269.382947][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1375'. [ 270.436768][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1384'. [ 270.546402][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 270.721161][ T9844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 272.453003][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1402'. [ 272.499561][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 272.764352][ T1204] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 272.930920][ T1204] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 273.016184][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.339373][ T1204] usb 2-1: config 0 descriptor?? [ 273.777619][ T1204] ath6kl: Unsupported hardware version: 0x0 [ 273.797853][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 273.839212][ T1204] ath6kl: Failed to init ath6kl core: -22 [ 273.854445][ T1204] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 273.944547][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 273.983555][ T1204] usb 2-1: USB disconnect, device number 9 [ 274.635248][ T9948] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 274.963867][ T5929] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 275.134212][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 275.141490][ T5929] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.172578][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.189738][ T5929] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 275.219271][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.277718][ T5894] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 275.296965][ T5929] usb 2-1: config 0 descriptor?? [ 276.119368][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 276.133886][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.157344][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.172454][ T5894] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 276.181981][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.213648][ T5894] usb 3-1: config 0 descriptor?? [ 276.418091][ T5929] cougar 0003:060B:500A.0004: unexpected long global item [ 276.425798][ T5929] cougar 0003:060B:500A.0004: parse failed [ 276.431690][ T5929] cougar 0003:060B:500A.0004: probe with driver cougar failed with error -22 [ 276.544734][ T9984] qrtr: Invalid version 49 [ 276.617158][ T5892] usb 2-1: USB disconnect, device number 10 [ 276.631518][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 276.658633][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.687275][ T5894] usb 3-1: USB disconnect, device number 14 [ 277.076898][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 278.279348][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 278.701412][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.753799][ T5894] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.522748][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 279.532142][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.550486][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.576582][ T5892] usb 4-1: config 0 descriptor?? [ 279.591069][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.601861][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 279.607985][ T5894] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 279.623014][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.643339][ T5894] usb 3-1: config 0 descriptor?? [ 280.835046][ T5892] ath6kl: Failed to read usb control message: -71 [ 280.841637][ T5892] ath6kl: Unable to read the bmi data from the device: -71 [ 280.848952][ T5892] ath6kl: Unable to recv target info: -71 [ 280.866723][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 280.880453][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 280.886547][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 280.896348][ T5892] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 280.950557][ T5892] usb 4-1: USB disconnect, device number 11 [ 280.956641][ T5894] usb 3-1: USB disconnect, device number 15 [ 281.300017][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'. [ 281.574146][ T1204] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 281.747311][ T1204] usb 6-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 281.768902][ T1204] usb 6-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.797909][ T1204] usb 6-1: config 1 interface 0 has no altsetting 0 [ 281.806572][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 281.829592][ T1204] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 281.843203][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.875470][ T1204] usb 6-1: Product: syz [ 281.879678][ T1204] usb 6-1: Manufacturer: syz [ 281.908162][ T1204] usb 6-1: SerialNumber: syz [ 281.924207][T10101] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 281.986801][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.998175][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.008674][ T5929] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 282.018398][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.036640][ T5929] usb 4-1: config 0 descriptor?? [ 282.172936][ T1204] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input23 [ 282.435862][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.460277][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 282.468618][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.501402][ T5929] usb 4-1: USB disconnect, device number 12 [ 282.776575][ T5201] bcm5974 6-1:1.0: could not read from device [ 282.794407][ T5929] usb 6-1: USB disconnect, device number 10 [ 282.804496][ T5201] bcm5974 6-1:1.0: could not read from device [ 282.824998][ T6047] bcm5974 6-1:1.0: could not read from device [ 284.913989][ T5892] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 285.085268][ T5892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 285.094482][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.123077][ T5892] usb 6-1: config 0 descriptor?? [ 285.344726][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'. [ 285.631921][ T5892] ath6kl: Failed to read usb control message: -71 [ 285.640180][ T5892] ath6kl: Unable to read the bmi data from the device: -71 [ 285.647573][ T5892] ath6kl: Unable to recv target info: -71 [ 285.655517][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 285.661956][ T5892] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 285.681217][ T5892] usb 6-1: USB disconnect, device number 11 [ 285.766822][T10186] usb usb7: usbfs: process 10186 (syz.1.1531) did not claim interface 0 before use [ 286.984585][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 287.175681][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.187651][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.222878][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 287.266744][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.290875][ T9] usb 2-1: config 0 descriptor?? [ 287.292519][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1552'. [ 287.308433][T10225] xfrm1: entered promiscuous mode [ 287.313537][T10225] xfrm1: entered allmulticast mode [ 287.397713][T10226] usb usb7: usbfs: process 10226 (syz.4.1550) did not claim interface 0 before use [ 288.212241][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 288.219004][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.243148][ T9] usb 2-1: USB disconnect, device number 11 [ 288.345674][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 288.609997][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1560'. [ 288.885022][ T5892] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 289.053766][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 289.075396][ T5892] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 289.086363][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1572'. [ 289.104383][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.112419][ T5892] usb 3-1: Product: syz [ 289.136225][ T5892] usb 3-1: Manufacturer: syz [ 289.152572][ T5892] usb 3-1: SerialNumber: syz [ 289.172252][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 289.183525][ T5892] usb 3-1: config 0 descriptor?? [ 289.195706][ T5892] empeg 3-1:0.0: empeg converter detected [ 289.203272][ T5892] usb 3-1: active config #0 != 1 ?? [ 289.211028][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1574'. [ 289.468888][ T5929] usb 3-1: USB disconnect, device number 16 [ 289.470203][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 289.498956][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1578'. [ 289.908665][T10302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1586'. [ 289.917338][T10304] netlink: 2684 bytes leftover after parsing attributes in process `syz.3.1587'. [ 289.932546][T10304] netlink: del zone limit has 4 unknown bytes [ 291.845217][ T5892] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 292.100821][ T5892] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 292.370230][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.486306][ T5892] usb 3-1: config 0 descriptor?? [ 292.909596][ T5892] ath6kl: Failed to read usb control message: -71 [ 292.916251][ T5892] ath6kl: Unable to read the bmi data from the device: -71 [ 292.933938][ T5892] ath6kl: Unable to recv target info: -71 [ 292.954868][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 292.961993][ T5892] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 293.022926][ T5892] usb 3-1: USB disconnect, device number 17 [ 298.950422][ C1] hrtimer: interrupt took 5367944757 ns [ 404.043701][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 404.050720][ C0] rcu: 1-...!: (1 GPs behind) idle=7ef4/1/0x4000000000000000 softirq=31609/31610 fqs=0 [ 404.061641][ C0] rcu: (detected by 0, t=10505 jiffies, g=29577, q=2496 ncpus=2) [ 404.069481][ C0] Sending NMI from CPU 0 to CPUs 1: [ 404.069522][ C1] NMI backtrace for cpu 1 [ 404.069551][ C1] CPU: 1 UID: 0 PID: 10381 Comm: syz.4.1616 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 404.069570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 404.069583][ C1] RIP: 0010:advance_sched+0x5c6/0xca0 [ 404.069613][ C1] Code: 00 00 fc ff df 4c 8b 74 24 28 48 8b 6c 24 40 eb 49 e8 2e 33 c9 f7 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 48 42 80 3c 20 00 <4c> 8b 74 24 28 48 8b 5c 24 30 74 08 48 89 df e8 06 ef 30 f8 48 8b [ 404.069627][ C1] RSP: 0018:ffffc90000a18c70 EFLAGS: 00000046 [ 404.069642][ C1] RAX: 1ffff1100501e1aa RBX: ffff888026ab8130 RCX: ffff8880307a1e00 [ 404.069656][ C1] RDX: 0000000000010000 RSI: 00000000000000ff RDI: 0000000000000000 [ 404.069666][ C1] RBP: 1ffff1100501e180 R08: ffffffff89ccae23 R09: fffff5200014317c [ 404.069678][ C1] R10: dffffc0000000000 R11: fffff5200014317c R12: dffffc0000000000 [ 404.069691][ C1] R13: ffff8880280f0c00 R14: 0000000000000000 R15: 0000000000000000 [ 404.069702][ C1] FS: 00007fd1275c26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 404.069717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.069728][ C1] CR2: 00000000201d2000 CR3: 0000000030f56000 CR4: 00000000003526f0 [ 404.069743][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.069752][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 404.069763][ C1] Call Trace: [ 404.069771][ C1] [ 404.069785][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 404.069805][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 404.069825][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 404.069843][ C1] ? nmi_handle+0x2a/0x5a0 [ 404.069868][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 404.069891][ C1] ? nmi_handle+0x14f/0x5a0 [ 404.069908][ C1] ? nmi_handle+0x2a/0x5a0 [ 404.069925][ C1] ? advance_sched+0x5c6/0xca0 [ 404.069943][ C1] ? default_do_nmi+0x63/0x160 [ 404.069963][ C1] ? exc_nmi+0x123/0x1f0 [ 404.069981][ C1] ? end_repeat_nmi+0xf/0x53 [ 404.070002][ C1] ? advance_sched+0x583/0xca0 [ 404.070021][ C1] ? advance_sched+0x5c6/0xca0 [ 404.070039][ C1] ? advance_sched+0x5c6/0xca0 [ 404.070057][ C1] ? advance_sched+0x5c6/0xca0 [ 404.070075][ C1] [ 404.070080][ C1] [ 404.070093][ C1] ? __pfx_advance_sched+0x10/0x10 [ 404.070111][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 404.070140][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 404.070162][ C1] ? read_tsc+0x9/0x20 [ 404.070182][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 404.070201][ C1] hrtimer_interrupt+0x403/0xa40 [ 404.070232][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 404.070252][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 404.070275][ C1] [ 404.070280][ C1] [ 404.070286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.070305][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 404.070321][ C1] Code: 2b 00 74 08 4c 89 f7 e8 0a 81 8c 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 404.070335][ C1] RSP: 0018:ffffc900057def80 EFLAGS: 00000206 [ 404.070349][ C1] RAX: 0000000000000001 RBX: 1ffff92000afbdfc RCX: ffff8880307a28d8 [ 404.070361][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aeb60 RDI: ffffffff8c608460 [ 404.070373][ C1] RBP: ffffc900057df0c8 R08: ffffffff942ee887 R09: 1ffffffff285dd10 [ 404.070386][ C1] R10: dffffc0000000000 R11: fffffbfff285dd11 R12: 1ffff92000afbdf8 [ 404.070399][ C1] R13: dffffc0000000000 R14: ffffc900057defe0 R15: 0000000000000246 [ 404.070422][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 404.070442][ C1] ? __pfx_validate_chain+0x10/0x10 [ 404.070463][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 404.070480][ C1] __pte_offset_map+0x9e/0x380 [ 404.070498][ C1] ? __pte_offset_map+0x82/0x380 [ 404.070516][ C1] ? __pfx_validate_chain+0x10/0x10 [ 404.070535][ C1] ? __pfx___pte_offset_map+0x10/0x10 [ 404.070558][ C1] __pte_offset_map_lock+0xc7/0x300 [ 404.070576][ C1] ? handle_pte_fault+0x36f/0x68a0 [ 404.070599][ C1] ? __pfx_lock_release+0x10/0x10 [ 404.070616][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 404.070641][ C1] handle_pte_fault+0x1cdb/0x68a0 [ 404.070662][ C1] ? mark_lock+0x9a/0x360 [ 404.070682][ C1] ? __lock_acquire+0x1321/0x2100 [ 404.070701][ C1] ? mark_lock+0x9a/0x360 [ 404.070719][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 404.070741][ C1] ? __lock_acquire+0x1397/0x2100 [ 404.070776][ C1] ? mt_find+0x2a9/0x920 [ 404.070798][ C1] ? __pfx_lock_release+0x10/0x10 [ 404.070820][ C1] handle_mm_fault+0x1053/0x1ad0 [ 404.070850][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 404.070875][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.070894][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 404.070914][ C1] exc_page_fault+0x2b9/0x8b0 [ 404.070939][ C1] asm_exc_page_fault+0x26/0x30 [ 404.070956][ C1] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 404.070975][ C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 404.070988][ C1] RSP: 0018:ffffc900057df930 EFLAGS: 00050206 [ 404.071001][ C1] RAX: 0000000000000001 RBX: 00000000201d2000 RCX: 0000000000000038 [ 404.071011][ C1] RDX: 0000000000000001 RSI: 00000000201d2000 RDI: ffffc900057df9c0 [ 404.071022][ C1] RBP: ffffc900057dfa70 R08: ffffc900057df9f7 R09: 1ffff92000afbf3e [ 404.071034][ C1] R10: dffffc0000000000 R11: fffff52000afbf3f R12: 00000000201d2000 [ 404.071045][ C1] R13: dffffc0000000000 R14: ffffc900057df9c0 R15: 0000000000000038 [ 404.071064][ C1] _copy_from_user+0x7f/0xc0 [ 404.071087][ C1] copy_msghdr_from_user+0xae/0x680 [ 404.071110][ C1] ? __pfx___might_resched+0x10/0x10 [ 404.071134][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 404.071159][ C1] ? do_recvmmsg+0x44e/0xab0 [ 404.071178][ C1] ? __might_fault+0xaa/0x120 [ 404.071198][ C1] do_recvmmsg+0x3bd/0xab0 [ 404.071222][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 404.071240][ C1] ? mark_lock+0x9a/0x360 [ 404.071267][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 404.071286][ C1] ? vma_end_read+0x18/0x170 [ 404.071314][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 404.071346][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 404.071366][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 404.071386][ C1] ? exc_page_fault+0x590/0x8b0 [ 404.071409][ C1] ? do_syscall_64+0xb6/0x230 [ 404.071426][ C1] do_syscall_64+0xf3/0x230 [ 404.071441][ C1] ? clear_bhb_loop+0x35/0x90 [ 404.071460][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.071478][ C1] RIP: 0033:0x7fd126780809 [ 404.071496][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.071510][ C1] RSP: 002b:00007fd1275c2058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 404.071525][ C1] RAX: ffffffffffffffda RBX: 00007fd126946080 RCX: 00007fd126780809 [ 404.071537][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 404.071548][ C1] RBP: 00007fd1267f393e R08: 0000000000000000 R09: 0000000000000000 [ 404.071559][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 404.071568][ C1] R13: 0000000000000001 R14: 00007fd126946080 R15: 00007fff4c0e39f8 [ 404.071587][ C1] [ 404.072510][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g29577 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 404.799668][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 404.809643][ C0] rcu: RCU grace-period kthread stack dump: [ 404.815545][ C0] task:rcu_preempt state:R running task stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 404.827309][ C0] Call Trace: [ 404.830592][ C0] [ 404.833551][ C0] __schedule+0x17fb/0x4be0 [ 404.838098][ C0] ? __pfx___schedule+0x10/0x10 [ 404.842969][ C0] ? __pfx_lock_release+0x10/0x10 [ 404.848010][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.854352][ C0] ? schedule+0x90/0x320 [ 404.858608][ C0] schedule+0x14b/0x320 [ 404.862781][ C0] schedule_timeout+0x15a/0x290 [ 404.867644][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 404.873030][ C0] ? __pfx_process_timeout+0x10/0x10 [ 404.878334][ C0] ? prepare_to_swait_event+0x330/0x350 [ 404.883894][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 404.888756][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 404.893972][ C0] ? rcu_gp_init+0x1256/0x1630 [ 404.898750][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 404.903695][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 404.909856][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 404.915148][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 404.921063][ C0] ? finish_swait+0xd4/0x1e0 [ 404.925661][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 404.930268][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 404.935479][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 404.941391][ C0] ? __kthread_parkme+0x169/0x1d0 [ 404.946429][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 404.951648][ C0] kthread+0x2f0/0x390 [ 404.955727][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 404.960937][ C0] ? __pfx_kthread+0x10/0x10 [ 404.965540][ C0] ret_from_fork+0x4b/0x80 [ 404.969960][ C0] ? __pfx_kthread+0x10/0x10 [ 404.974559][ C0] ret_from_fork_asm+0x1a/0x30 [ 404.979353][ C0] [ 404.982379][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 404.988712][ C0] CPU: 0 UID: 0 PID: 6427 Comm: kworker/u8:14 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 404.999303][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.009364][ C0] Workqueue: iou_exit io_ring_exit_work [ 405.014927][ C0] RIP: 0010:smp_call_function_many_cond+0x19f8/0x2c60 [ 405.021704][ C0] Code: 89 e6 83 e6 01 31 ff e8 66 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 11 e5 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 f5 e4 0b 00 eb e4 44 [ 405.041410][ C0] RSP: 0018:ffffc9000cf675e0 EFLAGS: 00000293 [ 405.047540][ C0] RAX: 0000000000000000 RBX: 1ffff110170e88b9 RCX: ffff8880773f8000 [ 405.055539][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 405.063524][ C0] RBP: ffffc9000cf677e0 R08: ffffffff8189fc5a R09: 1ffffffff285dd10 [ 405.071503][ C0] R10: dffffc0000000000 R11: fffffbfff285dd11 R12: dffffc0000000000 [ 405.079481][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 405.087462][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 405.096397][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.102990][ C0] CR2: 00005579e1a10d88 CR3: 000000000e738000 CR4: 00000000003526f0 [ 405.110967][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.118941][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.126918][ C0] Call Trace: [ 405.130201][ C0] [ 405.133049][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 405.139395][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 405.145054][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 405.150879][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 405.157133][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 405.162530][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 405.168184][ C0] ? update_process_times+0x242/0x2f0 [ 405.173570][ C0] ? tick_nohz_handler+0x37c/0x500 [ 405.178697][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 405.184174][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 405.189572][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 405.195299][ C0] ? sched_clock+0x4a/0x70 [ 405.199732][ C0] ? read_tsc+0x9/0x20 [ 405.203812][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 405.209898][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 405.215043][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 405.221216][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 405.227034][ C0] [ 405.229971][ C0] [ 405.232905][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.239078][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 405.245246][ C0] ? smp_call_function_many_cond+0x19f8/0x2c60 [ 405.251425][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 405.256480][ C0] ? __pfx___text_poke+0x10/0x10 [ 405.261435][ C0] ? __pfx___might_resched+0x10/0x10 [ 405.266733][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 405.273080][ C0] ? __pfx___might_resched+0x10/0x10 [ 405.278386][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 405.283443][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 405.288578][ C0] text_poke_bp_batch+0x352/0xb30 [ 405.293613][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.299610][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 405.304639][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 405.310203][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 405.316461][ C0] ? __jump_label_update+0x379/0x3a0 [ 405.321766][ C0] text_poke_finish+0x30/0x50 [ 405.326450][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 405.332450][ C0] __static_key_slow_dec_cpuslocked+0xc4/0x110 [ 405.338621][ C0] static_key_slow_dec+0x51/0xa0 [ 405.343570][ C0] io_ring_ctx_free+0xb9b/0xdb0 [ 405.348533][ C0] ? io_ring_exit_work+0x80f/0x8a0 [ 405.353660][ C0] io_ring_exit_work+0x80f/0x8a0 [ 405.358615][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 405.364086][ C0] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 405.369396][ C0] ? process_scheduled_works+0x976/0x1840 [ 405.375138][ C0] process_scheduled_works+0xa66/0x1840 [ 405.380719][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.386722][ C0] ? assign_work+0x364/0x3d0 [ 405.391332][ C0] worker_thread+0x870/0xd30 [ 405.395934][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 405.401847][ C0] ? __kthread_parkme+0x169/0x1d0 [ 405.406881][ C0] ? __pfx_worker_thread+0x10/0x10 [ 405.411998][ C0] kthread+0x2f0/0x390 [ 405.416074][ C0] ? __pfx_worker_thread+0x10/0x10 [ 405.421191][ C0] ? __pfx_kthread+0x10/0x10 [ 405.425795][ C0] ret_from_fork+0x4b/0x80 [ 405.430219][ C0] ? __pfx_kthread+0x10/0x10 [ 405.434814][ C0] ret_from_fork_asm+0x1a/0x30 [ 405.439607][ C0]