last executing test programs: 1.735225801s ago: executing program 1 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000402000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) 1.548027018s ago: executing program 1 (id=1537): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000180)='W', 0x1}, {&(0x7f00000011c0)="449c883e99619cd8723fd010f46ec1d5d85b2c380870b245009d9ee377ea6a3c5baf355b700982", 0x27}, {&(0x7f0000001200)="1e83d0d170142cfc0b761ef99358ec41926497cc41431b9e259b08dab0147919aabbf82882e42d896bbc90ac1b7240fa2ffd776d8ade21b6377d", 0x3a}, {&(0x7f00000018c0)="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", 0xa2f}], 0x4}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.283086664s ago: executing program 3 (id=1545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x2a) r1 = syz_io_uring_setup(0x4177, &(0x7f0000000640)={0x0, 0xca, 0x10100}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000340), 0x1) 1.188693617s ago: executing program 4 (id=1547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) 1.111697065s ago: executing program 3 (id=1548): socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000614010029bd7000ffdbdf250800", @ANYRES32=r0], 0x40}}, 0x0) 1.098978573s ago: executing program 0 (id=1550): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000c40)="de", 0x1}], 0x1, 0x0, 0x0, 0x4c810}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000040)=""/100, 0x64}, 0x6f}], 0x1, 0x10000, 0x0) 1.030241291s ago: executing program 4 (id=1551): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 995.184402ms ago: executing program 3 (id=1552): ioperm(0x0, 0xf4, 0x10000007f) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8) 975.595463ms ago: executing program 2 (id=1553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = io_uring_setup(0x3d69, &(0x7f0000000140)={0x0, 0x98f, 0x2, 0x1, 0x58}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x18, 0x0, 0x1a, 0x0, 0x0) 939.282576ms ago: executing program 0 (id=1554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4) 870.380626ms ago: executing program 2 (id=1555): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) 853.022118ms ago: executing program 3 (id=1556): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e6d3618b6ccc3314965a0fb1f24df2bd", 0x10) close(0x3) 813.091168ms ago: executing program 4 (id=1557): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 726.528162ms ago: executing program 0 (id=1558): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 726.385534ms ago: executing program 2 (id=1559): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r2, 0xeb3}}, 0x10) 641.243829ms ago: executing program 4 (id=1560): r0 = syz_io_uring_setup(0xd46, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 600.505283ms ago: executing program 0 (id=1561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f000079a000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 576.257611ms ago: executing program 2 (id=1562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 571.769951ms ago: executing program 1 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 405.346185ms ago: executing program 3 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="00000000001d00"/20, @ANYRES32=r1], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) 405.018032ms ago: executing program 2 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 356.709854ms ago: executing program 4 (id=1566): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) 356.335754ms ago: executing program 0 (id=1567): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x4000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)={0x2, 0x5834d4dbb6893c4c}) 351.493491ms ago: executing program 1 (id=1568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) 201.52653ms ago: executing program 1 (id=1569): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 196.017287ms ago: executing program 4 (id=1570): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 179.133066ms ago: executing program 2 (id=1571): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x12d600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 158.011767ms ago: executing program 3 (id=1572): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0xe) 105.240568ms ago: executing program 0 (id=1573): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 0s ago: executing program 1 (id=1574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003b0007010000000000000000017c0040040000000c00018006000600800a0000090002"], 0x30}}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 55.798143][ T5812] cgroup: Unknown subsys name 'net' [ 55.925539][ T5812] cgroup: Unknown subsys name 'cpuset' [ 55.933387][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.260997][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.432729][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.440918][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.448829][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.457256][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.465882][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.473968][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.474027][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.489366][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.491546][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.497411][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.503526][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.518189][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.519639][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.527165][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.533099][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.539946][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.553924][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.562518][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.564435][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.571431][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.583447][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.591151][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.591164][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.598970][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.612744][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.620782][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.620957][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.636845][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.644409][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.651578][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.906947][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 60.064599][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.071966][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.079596][ T5823] bridge_slave_0: entered allmulticast mode [ 60.086793][ T5823] bridge_slave_0: entered promiscuous mode [ 60.095258][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.102672][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.109768][ T5823] bridge_slave_1: entered allmulticast mode [ 60.116744][ T5823] bridge_slave_1: entered promiscuous mode [ 60.188708][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.201509][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.253621][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 60.275402][ T5823] team0: Port device team_slave_0 added [ 60.292747][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 60.311072][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 60.322134][ T5823] team0: Port device team_slave_1 added [ 60.423741][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.430709][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.457155][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.490652][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.497749][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.524293][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.539145][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 60.591300][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.598748][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.606007][ T5822] bridge_slave_0: entered allmulticast mode [ 60.613224][ T5822] bridge_slave_0: entered promiscuous mode [ 60.634932][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.642043][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.649373][ T5834] bridge_slave_0: entered allmulticast mode [ 60.655997][ T5834] bridge_slave_0: entered promiscuous mode [ 60.671294][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.678734][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.686190][ T5822] bridge_slave_1: entered allmulticast mode [ 60.693560][ T5822] bridge_slave_1: entered promiscuous mode [ 60.712845][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.720016][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.727291][ T5834] bridge_slave_1: entered allmulticast mode [ 60.734660][ T5834] bridge_slave_1: entered promiscuous mode [ 60.740976][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.748336][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.755888][ T5826] bridge_slave_0: entered allmulticast mode [ 60.762467][ T5826] bridge_slave_0: entered promiscuous mode [ 60.781666][ T5823] hsr_slave_0: entered promiscuous mode [ 60.789982][ T5823] hsr_slave_1: entered promiscuous mode [ 60.814406][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.821551][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.829199][ T5826] bridge_slave_1: entered allmulticast mode [ 60.836722][ T5826] bridge_slave_1: entered promiscuous mode [ 60.863548][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.874897][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.908191][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.920165][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.931668][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.970341][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.014039][ T5834] team0: Port device team_slave_0 added [ 61.053110][ T5834] team0: Port device team_slave_1 added [ 61.060307][ T5826] team0: Port device team_slave_0 added [ 61.068558][ T5826] team0: Port device team_slave_1 added [ 61.077281][ T5822] team0: Port device team_slave_0 added [ 61.085095][ T5822] team0: Port device team_slave_1 added [ 61.091067][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.098280][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.105733][ T5824] bridge_slave_0: entered allmulticast mode [ 61.112265][ T5824] bridge_slave_0: entered promiscuous mode [ 61.160377][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.167686][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.175296][ T5824] bridge_slave_1: entered allmulticast mode [ 61.182166][ T5824] bridge_slave_1: entered promiscuous mode [ 61.207449][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.214564][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.241056][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.253263][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.260215][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.287516][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.316531][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.323683][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.349640][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.361265][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.368878][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.395363][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.411876][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.418900][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.445170][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.458254][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.470003][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.507205][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.514529][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.541402][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.603847][ T5826] hsr_slave_0: entered promiscuous mode [ 61.609882][ T5826] hsr_slave_1: entered promiscuous mode [ 61.616157][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.623978][ T5826] Cannot create hsr debugfs directory [ 61.633946][ T5824] team0: Port device team_slave_0 added [ 61.643344][ T5831] Bluetooth: hci2: command tx timeout [ 61.655001][ T5834] hsr_slave_0: entered promiscuous mode [ 61.661170][ T5834] hsr_slave_1: entered promiscuous mode [ 61.667352][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.674975][ T5834] Cannot create hsr debugfs directory [ 61.698914][ T5824] team0: Port device team_slave_1 added [ 61.712902][ T5831] Bluetooth: hci0: command tx timeout [ 61.715651][ T55] Bluetooth: hci1: command tx timeout [ 61.718910][ T5836] Bluetooth: hci3: command tx timeout [ 61.724114][ T5840] Bluetooth: hci4: command tx timeout [ 61.773499][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.780471][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.806649][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.826087][ T5822] hsr_slave_0: entered promiscuous mode [ 61.832063][ T5822] hsr_slave_1: entered promiscuous mode [ 61.838585][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.846332][ T5822] Cannot create hsr debugfs directory [ 61.865429][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.874001][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.900196][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.014319][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.039850][ T5824] hsr_slave_0: entered promiscuous mode [ 62.045964][ T5824] hsr_slave_1: entered promiscuous mode [ 62.051801][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.060122][ T5824] Cannot create hsr debugfs directory [ 62.079989][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.089761][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.125952][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.272047][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.286039][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.305557][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.330743][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.390324][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.426464][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.454127][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.479203][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.509345][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.528347][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.539424][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.550253][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.560842][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.606723][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.646718][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.655994][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.665842][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.679740][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.687042][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.702088][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.729169][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.758224][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.765380][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.858375][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.873598][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.885135][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.892221][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.907577][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.914743][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.949590][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.026655][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.033844][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.079189][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.086335][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.101258][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.143830][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.199521][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.212310][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.240430][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.260020][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.267175][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.303176][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.310278][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.326003][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.333140][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.371755][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.378945][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.427035][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.445798][ T5823] veth0_vlan: entered promiscuous mode [ 63.481541][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.494064][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.517425][ T5823] veth1_vlan: entered promiscuous mode [ 63.601756][ T5834] veth0_vlan: entered promiscuous mode [ 63.634672][ T5834] veth1_vlan: entered promiscuous mode [ 63.675340][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.698459][ T5823] veth0_macvtap: entered promiscuous mode [ 63.715327][ T5840] Bluetooth: hci2: command tx timeout [ 63.724928][ T5823] veth1_macvtap: entered promiscuous mode [ 63.793106][ T5840] Bluetooth: hci1: command tx timeout [ 63.797754][ T55] Bluetooth: hci3: command tx timeout [ 63.798526][ T5840] Bluetooth: hci0: command tx timeout [ 63.804723][ T5836] Bluetooth: hci4: command tx timeout [ 63.828895][ T5834] veth0_macvtap: entered promiscuous mode [ 63.844786][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.856946][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.867291][ T5834] veth1_macvtap: entered promiscuous mode [ 63.887054][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.898154][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.907953][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.917129][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.926150][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.941053][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.965841][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.978132][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.990889][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.000446][ T5826] veth0_vlan: entered promiscuous mode [ 64.064344][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.076519][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.087898][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.108215][ T5822] veth0_vlan: entered promiscuous mode [ 64.125132][ T5826] veth1_vlan: entered promiscuous mode [ 64.135893][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.146317][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.156116][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.165333][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.190432][ T5822] veth1_vlan: entered promiscuous mode [ 64.279362][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.290927][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.298221][ T5826] veth0_macvtap: entered promiscuous mode [ 64.300878][ T5826] veth1_macvtap: entered promiscuous mode [ 64.329535][ T5822] veth0_macvtap: entered promiscuous mode [ 64.341079][ T5822] veth1_macvtap: entered promiscuous mode [ 64.361741][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.372621][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.383282][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.394212][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.405506][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.441030][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.452110][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.462010][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.472947][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.483740][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.516393][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.519325][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.533502][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.542321][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.553724][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.564838][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.588188][ T5824] veth0_vlan: entered promiscuous mode [ 64.599481][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.618026][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.628562][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.639262][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.651302][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.661959][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.678512][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.687859][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.702814][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.719653][ T5824] veth1_vlan: entered promiscuous mode [ 64.737698][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.748541][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.760740][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.771343][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.781475][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.792244][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.804386][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.829757][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.854775][ T5824] veth0_macvtap: entered promiscuous mode [ 64.890899][ T5824] veth1_macvtap: entered promiscuous mode [ 64.910282][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.919717][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.942912][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.951646][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.968929][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.986933][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.006112][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.021827][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.040189][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.051630][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.067335][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.079829][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.094761][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.105287][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.116268][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.126228][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.136990][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.147230][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.159057][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.176272][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.187734][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.198489][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.210993][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.225757][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.241941][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.256481][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.266456][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.275356][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.302181][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.323430][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.373773][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.399161][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.526494][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.541579][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.604395][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.621024][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.636432][ T5919] capability: warning: `syz.2.7' uses deprecated v2 capabilities in a way that may be insecure [ 65.658485][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.687027][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.709441][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.732135][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.792593][ T5836] Bluetooth: hci2: command tx timeout [ 65.874080][ T5836] Bluetooth: hci4: command tx timeout [ 65.879575][ T55] Bluetooth: hci3: command tx timeout [ 65.886404][ T5831] Bluetooth: hci0: command tx timeout [ 65.886414][ T5840] Bluetooth: hci1: command tx timeout [ 66.567860][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.788258][ T5957] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.658056][ T30] audit: type=1326 audit(1742204731.183:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5973 comm="syz.1.25" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1aa58d169 code=0x0 [ 67.780517][ T30] audit: type=1800 audit(1742204731.313:3): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.28" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 67.878967][ T5831] Bluetooth: hci2: command tx timeout [ 67.952846][ T5831] Bluetooth: hci1: command tx timeout [ 67.958685][ T55] Bluetooth: hci0: command tx timeout [ 67.962625][ T5840] Bluetooth: hci4: command tx timeout [ 67.969533][ T5836] Bluetooth: hci3: command tx timeout [ 68.010528][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 68.147313][ T975] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.251652][ T30] audit: type=1326 audit(1742204731.783:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.323709][ T30] audit: type=1326 audit(1742204731.793:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.330116][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 68.363960][ T30] audit: type=1326 audit(1742204731.793:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.389285][ T975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 68.401851][ T30] audit: type=1326 audit(1742204731.793:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.433889][ T975] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 68.493523][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.501558][ T975] usb 4-1: Product: syz [ 68.506516][ T30] audit: type=1326 audit(1742204731.793:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.554836][ T975] usb 4-1: Manufacturer: syz [ 68.559479][ T975] usb 4-1: SerialNumber: syz [ 68.607436][ T30] audit: type=1326 audit(1742204731.793:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.630582][ T975] usb 4-1: config 0 descriptor?? [ 68.650779][ T5984] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.703362][ T975] hub 4-1:0.0: bad descriptor, ignoring hub [ 68.712480][ T30] audit: type=1326 audit(1742204731.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.717932][ T975] hub 4-1:0.0: probe with driver hub failed with error -5 [ 68.799258][ T975] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 68.803677][ T30] audit: type=1326 audit(1742204731.803:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5991 comm="syz.2.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 68.927061][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 68.939268][ T975] usb 4-1: USB disconnect, device number 2 [ 69.051373][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 69.060969][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 69.209618][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 69.219887][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 69.282111][ T6019] bridge0: port 3(vlan2) entered blocking state [ 69.303404][ T6019] bridge0: port 3(vlan2) entered disabled state [ 69.326699][ T6019] vlan2: entered allmulticast mode [ 69.345359][ T6019] vlan2: left allmulticast mode [ 71.556440][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.563179][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.618903][ T6089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.78'. [ 72.011264][ T6104] Zero length message leads to an empty skb [ 72.292518][ T5880] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.474070][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 72.485162][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.505721][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.538741][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 72.577464][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 72.604197][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.645646][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 72.655459][ T5880] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 72.665677][ T5880] usb 3-1: Manufacturer: syz [ 72.684269][ T5880] usb 3-1: config 0 descriptor?? [ 72.698103][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 73.006241][ T5880] rc_core: IR keymap rc-hauppauge not found [ 73.012186][ T5880] Registered IR keymap rc-empty [ 73.024431][ T6142] erspan0: entered promiscuous mode [ 73.053202][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.074392][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.086154][ T6142] erspan0: left promiscuous mode [ 73.129280][ T5880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 73.171199][ T5880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 73.228572][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.272817][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.302698][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.322698][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.352577][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.382620][ T6153] random: crng reseeded on system resumption [ 73.402564][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.442840][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.472463][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.494199][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.543005][ T5880] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 73.563773][ T5880] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 73.583917][ T5880] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 73.626992][ T5880] usb 3-1: USB disconnect, device number 2 [ 73.736008][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 73.979523][ T5840] Bluetooth: hci5: sending frame failed (-49) [ 73.987443][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 74.040617][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 74.164955][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.204140][ T6179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.338701][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 74.361798][ T5880] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.362717][ T6186] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 74.378872][ T5880] usb 2-1: config 179 has no interface number 0 [ 74.407474][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.420118][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.438747][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.457262][ T5880] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 74.477859][ T5880] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.522445][ T5880] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.538200][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.601552][ T6156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.944747][ T6199] geneve2: entered promiscuous mode [ 74.950008][ T6199] geneve2: entered allmulticast mode [ 75.130850][ T5877] usb 2-1: USB disconnect, device number 2 [ 75.130959][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 75.145726][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 75.509763][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 75.893860][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 76.116627][ T6239] ======================================================= [ 76.116627][ T6239] WARNING: The mand mount option has been deprecated and [ 76.116627][ T6239] and is ignored by this kernel. Remove the mand [ 76.116627][ T6239] option from the mount to silence this warning. [ 76.116627][ T6239] ======================================================= [ 76.243981][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 76.243998][ T30] audit: type=1326 audit(1742204739.773:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 76.362411][ T30] audit: type=1326 audit(1742204739.773:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 76.456761][ T30] audit: type=1326 audit(1742204739.813:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 76.537819][ T30] audit: type=1326 audit(1742204739.813:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 76.610674][ T30] audit: type=1326 audit(1742204739.823:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 76.694916][ T52] cfg80211: failed to load regulatory.db [ 76.701296][ T30] audit: type=1326 audit(1742204739.823:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 76.746026][ T6265] mmap: syz.4.158 (6265) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.782558][ T5889] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.804515][ T30] audit: type=1326 audit(1742204739.823:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f03b84127 code=0x7ffc0000 [ 76.850909][ T30] audit: type=1326 audit(1742204739.823:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f03b29359 code=0x7ffc0000 [ 76.931559][ T30] audit: type=1326 audit(1742204739.823:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0f03b8d169 code=0x7ffc0000 [ 77.003487][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 77.019676][ T5889] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 77.027928][ T5889] usb 4-1: config 0 has no interface number 0 [ 77.068021][ T5889] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 77.075752][ T30] audit: type=1326 audit(1742204739.823:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6245 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f03b84127 code=0x7ffc0000 [ 77.095830][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.113321][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 77.137611][ T5889] usb 4-1: Product: syz [ 77.142060][ T5889] usb 4-1: Manufacturer: syz [ 77.162889][ T5889] usb 4-1: SerialNumber: syz [ 77.172284][ T6274] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 77.192246][ T5889] usb 4-1: config 0 descriptor?? [ 77.226330][ T5889] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 77.443115][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 77.512856][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 77.743909][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.761936][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.987425][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 77.989435][ T975] usb 4-1: USB disconnect, device number 3 [ 78.048205][ T975] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 78.113038][ T975] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 78.173951][ T975] quatech2 4-1:0.51: device disconnected [ 78.514918][ T6312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.537931][ T6312] 9p: Unknown uid 00000000004294967295 [ 82.074975][ T6443] input: syz1 as /devices/virtual/input/input7 [ 82.510139][ T6462] process 'syz.4.248' launched './file0' with NULL argv: empty string added [ 82.633231][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.252'. [ 82.711077][ T6470] netlink: 36 bytes leftover after parsing attributes in process `syz.3.252'. [ 82.876001][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.254'. [ 82.914454][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 82.923045][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 82.931305][ T5836] Bluetooth: hci2: hardware error 0x00 [ 83.663660][ T6505] cgroup: fork rejected by pids controller in /syz4 [ 83.750282][ T6509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.268'. [ 83.762471][ T5877] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.932555][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 83.975429][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.005482][ T5877] usb 3-1: no configurations [ 84.012548][ T5877] usb 3-1: can't read configurations, error -22 [ 84.026934][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 84.026949][ T30] audit: type=1800 audit(1742204747.563:36): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.272" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=10046 res=0 errno=0 [ 84.116348][ T6519] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 84.183531][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.195054][ T6519] bridge_slave_1: left allmulticast mode [ 84.200757][ T6519] bridge_slave_1: left promiscuous mode [ 84.206563][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.242031][ T6519] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 84.306586][ T3581] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.423947][ T3581] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.647619][ T3581] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.855459][ T3581] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.992687][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 85.043311][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.053500][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.061824][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.069661][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.077939][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.085304][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.122647][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.247490][ T3581] bridge_slave_1: left allmulticast mode [ 85.257544][ T3581] bridge_slave_1: left promiscuous mode [ 85.267978][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.307325][ T3581] bridge_slave_0: left allmulticast mode [ 85.323203][ T3581] bridge_slave_0: left promiscuous mode [ 85.333524][ T5889] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.357172][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.381954][ T5889] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 85.400502][ T5889] usb 1-1: can't read configurations, error -71 [ 86.097876][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.138708][ T3581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.155296][ T3581] bond0 (unregistering): Released all slaves [ 86.219180][ T6556] hsr0: entered promiscuous mode [ 86.462523][ T5877] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.471165][ T6574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.490918][ T6574] bond0: (slave bond1): Enslaving as an active interface with an up link [ 86.648391][ T5877] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.667926][ T5877] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.678743][ T5877] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.699031][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.731164][ T6567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.758405][ T5877] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.791800][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'. [ 87.022658][ T5877] usb 3-1: USB disconnect, device number 5 [ 87.055817][ T3581] hsr_slave_0: left promiscuous mode [ 87.079747][ T6598] capability: warning: `syz.3.301' uses 32-bit capabilities (legacy support in use) [ 87.123182][ T3581] hsr_slave_1: left promiscuous mode [ 87.141889][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.158439][ T5840] Bluetooth: hci0: command tx timeout [ 87.178440][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.244378][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.271996][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.315488][ T3581] veth1_macvtap: left promiscuous mode [ 87.321404][ T3581] veth0_macvtap: left promiscuous mode [ 87.331228][ T3581] veth1_vlan: left promiscuous mode [ 87.336837][ T3581] veth0_vlan: left promiscuous mode [ 88.028991][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 88.101084][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 88.171513][ T6629] syz.3.315 uses obsolete (PF_INET,SOCK_PACKET) [ 88.458807][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 89.005375][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.039200][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.058857][ T6544] bridge_slave_0: entered allmulticast mode [ 89.079883][ T6544] bridge_slave_0: entered promiscuous mode [ 89.113459][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.120575][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.146076][ T6544] bridge_slave_1: entered allmulticast mode [ 89.176380][ T6544] bridge_slave_1: entered promiscuous mode [ 89.232791][ T5840] Bluetooth: hci0: command tx timeout [ 89.323562][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.376577][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.522304][ T6544] team0: Port device team_slave_0 added [ 89.565904][ T6544] team0: Port device team_slave_1 added [ 89.683691][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.690677][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.748998][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.796980][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.817843][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.905701][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.158155][ T6544] hsr_slave_0: entered promiscuous mode [ 90.165014][ T6544] hsr_slave_1: entered promiscuous mode [ 90.171309][ T6544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.189890][ T6544] Cannot create hsr debugfs directory [ 90.232450][ T52] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.408249][ T52] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.429020][ T52] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 90.454884][ T52] usb 2-1: can't read configurations, error -71 [ 91.323803][ T5840] Bluetooth: hci0: command tx timeout [ 91.524007][ T6544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.577036][ T6544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.627517][ T6544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.671454][ T6544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.874676][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.933837][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.975384][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.982563][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.033979][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.041106][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.486758][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.976924][ T6793] loop9: detected capacity change from 0 to 7 [ 92.995458][ T6544] veth0_vlan: entered promiscuous mode [ 93.007495][ T6793] Dev loop9: unable to read RDB block 7 [ 93.013555][ T6793] loop9: unable to read partition table [ 93.026069][ T6544] veth1_vlan: entered promiscuous mode [ 93.031817][ T6793] loop9: partition table beyond EOD, truncated [ 93.051857][ T6793] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 93.068807][ T6544] veth0_macvtap: entered promiscuous mode [ 93.100692][ T6544] veth1_macvtap: entered promiscuous mode [ 93.157602][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.192816][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.247204][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.297937][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.342954][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.370037][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.381028][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.398178][ T5840] Bluetooth: hci0: command tx timeout [ 93.420679][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.438184][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.464386][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.475715][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.496311][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.518373][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.531639][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.544630][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.569782][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.586532][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.599838][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.657248][ T6544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.694686][ T6544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.721691][ T6544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.749687][ T6544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.904549][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.933941][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.973884][ T5877] kernel read not supported for file /dsp (pid: 5877 comm: kworker/0:3) [ 94.026091][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.046293][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.124300][ T6859] loop6: detected capacity change from 0 to 524287999 [ 95.883462][ T6885] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.903936][ T6961] bridge0: port 2(vlan2) entered blocking state [ 97.910304][ T6961] bridge0: port 2(vlan2) entered disabled state [ 97.920799][ T6961] vlan2: entered allmulticast mode [ 97.977782][ T6961] vlan2: left allmulticast mode [ 98.171503][ T6973] bridge_slave_0: default FDB implementation only supports local addresses [ 99.748751][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.372530][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.442495][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.552632][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 100.565119][ T5830] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 100.574242][ T5830] usb 1-1: config 179 has no interface number 0 [ 100.580658][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 100.593170][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 100.605044][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.616905][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 100.626287][ T5889] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 100.635264][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 100.647803][ T5889] usb 3-1: config 0 has no interface number 0 [ 100.682745][ T5830] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.702470][ T5889] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.722645][ T5889] usb 3-1: config 0 interface 85 has no altsetting 0 [ 100.732484][ T5830] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.762068][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.774751][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 100.792379][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.808296][ T5889] usb 3-1: Product: syz [ 100.816401][ T5889] usb 3-1: Manufacturer: syz [ 100.822595][ T7080] input: syz0 as /devices/virtual/input/input8 [ 100.835446][ T7053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.852462][ T5889] usb 3-1: SerialNumber: syz [ 100.893963][ T5889] usb 3-1: config 0 descriptor?? [ 101.149228][ T5830] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 101.398488][ T10] usb 1-1: USB disconnect, device number 4 [ 101.401206][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.412772][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 101.445639][ T10] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 101.662466][ T7101] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 101.701891][ T5889] appletouch 3-1:0.85: Geyser mode initialized. [ 101.711588][ T5889] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 101.723714][ C1] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 101.952041][ T5889] usb 3-1: USB disconnect, device number 6 [ 102.021009][ T5889] appletouch 3-1:0.85: input: appletouch disconnected [ 102.078717][ T7110] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.134146][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 102.492540][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.652869][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 102.669702][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.685097][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.699815][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.718533][ T5830] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 102.728599][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.761591][ T5830] usb 4-1: config 0 descriptor?? [ 102.919705][ T7137] program syz.0.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.203953][ T5830] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 103.234369][ T5830] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 103.306484][ T5830] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 103.637998][ T10] usb 4-1: USB disconnect, device number 4 [ 103.883137][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 103.918077][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 103.929013][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.511'. [ 104.801421][ T7212] use of bytesused == 0 is deprecated and will be removed in the future, [ 104.847613][ T7212] use the actual size instead. [ 105.391218][ T7236] bond_slave_0: entered promiscuous mode [ 105.397278][ T7236] bond_slave_1: entered promiscuous mode [ 105.444245][ T7236] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.462574][ T7236] bond_slave_0: left promiscuous mode [ 105.468065][ T7236] bond_slave_1: left promiscuous mode [ 105.881671][ T7250] netlink: 136 bytes leftover after parsing attributes in process `syz.2.546'. [ 105.909457][ T7250] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 106.273189][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.429636][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.457259][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.505551][ T10] usb 1-1: config 0 descriptor?? [ 106.531754][ T10] cp210x 1-1:0.0: cp210x converter detected [ 106.560158][ T7284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.941720][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 107.112465][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.168999][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 107.189631][ T10] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 107.228151][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 107.255844][ T10] usb 1-1: USB disconnect, device number 5 [ 107.274731][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.293871][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 107.297663][ T10] cp210x 1-1:0.0: device disconnected [ 107.301706][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.330028][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.343177][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.357111][ T5880] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.386910][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.412562][ T5880] usb 3-1: config 0 descriptor?? [ 107.856047][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2 [ 107.884482][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.891807][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.931075][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.945142][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.952744][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.972171][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.992489][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 107.999733][ T5880] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 108.060820][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input11 [ 108.170738][ T5880] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 108.225102][ T5880] usb 3-1: USB disconnect, device number 7 [ 108.566755][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 108.695509][ T7344] veth0_to_bridge: entered promiscuous mode [ 108.724671][ T7343] veth0_to_bridge: left promiscuous mode [ 109.642475][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 110.305857][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 110.555318][ T52] IPVS: starting estimator thread 0... [ 110.688865][ T7423] IPVS: using max 20 ests per chain, 48000 per kthread [ 111.434472][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 111.500277][ T7466] netlink: 'syz.2.644': attribute type 1 has an invalid length. [ 111.508295][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 111.544316][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.602947][ T7463] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 112.379488][ T52] kernel write not supported for file /snd/seq (pid: 52 comm: kworker/1:1) [ 113.302600][ T5830] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.372472][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.482684][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 113.501778][ T5830] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 113.527645][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 113.531691][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.554755][ T5830] usb 1-1: config 0 descriptor?? [ 113.561491][ T5877] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 113.586805][ T5877] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.609077][ T5877] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.652899][ T5877] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.685811][ T5877] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.712298][ T5877] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.738361][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.794197][ T5830] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 113.974470][ T5877] usb 4-1: GET_CAPABILITIES returned 0 [ 113.977494][ T7562] netlink: 10 bytes leftover after parsing attributes in process `syz.2.689'. [ 113.981022][ T5877] usbtmc 4-1:16.0: can't read capabilities [ 114.225926][ T975] usb 4-1: USB disconnect, device number 5 [ 114.281231][ T5877] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5877 comm: kworker/0:3) [ 114.403423][ T5830] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.425985][ T5830] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 114.473409][ T5830] asix 1-1:0.0: probe with driver asix failed with error -71 [ 114.493833][ T5830] usb 1-1: USB disconnect, device number 6 [ 115.397717][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 116.192535][ T5840] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 116.202073][ T5840] Bluetooth: hci1: Injecting HCI hardware error event [ 116.210352][ T5840] Bluetooth: hci1: hardware error 0x00 [ 116.819670][ T7650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.730'. [ 117.556638][ T7681] netlink: 'syz.3.744': attribute type 1 has an invalid length. [ 118.273254][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 120.022727][ T975] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.200615][ T975] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 120.212173][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.227762][ T975] usb 4-1: Product: syz [ 120.236536][ T975] usb 4-1: Manufacturer: syz [ 120.250332][ T975] usb 4-1: SerialNumber: syz [ 120.266856][ T975] usb 4-1: config 0 descriptor?? [ 120.343874][ T7761] sctp: [Deprecated]: syz.4.779 (pid 7761) Use of int in maxseg socket option. [ 120.343874][ T7761] Use struct sctp_assoc_value instead [ 120.698914][ T975] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 120.710113][ T975] usb 4-1: Firmware version (0.0) predates our first public release. [ 120.725858][ T975] usb 4-1: Please update to version 0.2 or newer [ 120.912567][ T7784] Invalid logical block size (131072) [ 121.021997][ T975] usb 4-1: USB disconnect, device number 6 [ 121.582529][ T30] audit: type=1326 audit(1742204785.083:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7810 comm="syz.2.796" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f03b8d169 code=0x0 [ 122.998822][ T7895] netlink: 165 bytes leftover after parsing attributes in process `syz.2.818'. [ 124.190070][ T7949] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 124.225200][ T7949] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.843'. [ 124.671265][ T52] hid (null): unknown global tag 0xe [ 124.671319][ T52] hid (null): unknown global tag 0xc [ 124.671332][ T52] hid (null): unknown global tag 0xd [ 124.671371][ T52] hid (null): unknown global tag 0xd [ 124.671428][ T52] hid (null): report_id 46516 is invalid [ 124.698149][ T52] hid-generic 0005:046D:0A0E.0003: unknown global tag 0xe [ 124.698201][ T52] hid-generic 0005:046D:0A0E.0003: item 0 2 1 14 parsing failed [ 124.698741][ T52] hid-generic 0005:046D:0A0E.0003: probe with driver hid-generic failed with error -22 [ 124.892506][ T975] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.048777][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.087845][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.122570][ T975] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 125.132191][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.161043][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 125.172931][ T975] usb 1-1: config 0 descriptor?? [ 125.613625][ T975] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 125.621090][ T975] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 125.642608][ T975] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 125.650076][ T975] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 125.682530][ T975] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 125.691754][ T975] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 125.775415][ T8005] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.775415][ T8005] The task syz.1.869 (8005) triggered the difference, watch for misbehavior. [ 126.009034][ T975] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 126.018947][ T975] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 126.038939][ T975] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 126.058501][ T975] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 126.081101][ T975] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -71 [ 126.099114][ T975] usb 1-1: USB disconnect, device number 7 [ 126.676154][ T8030] netem: incorrect gi model size [ 126.699030][ T8030] netem: change failed [ 126.830800][ T8037] netlink: 'syz.1.885': attribute type 6 has an invalid length. [ 128.251433][ T52] kernel write not supported for file /amidi2 (pid: 52 comm: kworker/1:1) [ 128.410853][ T8093] netlink: 243 bytes leftover after parsing attributes in process `syz.0.911'. [ 128.471884][ T8093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.604272][ T8102] netlink: 'syz.2.914': attribute type 18 has an invalid length. [ 129.678230][ T8139] block nbd3: not configured, cannot reconfigure [ 130.353370][ T8163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.884853][ T8176] kvm: user requested TSC rate below hardware speed [ 130.943160][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 132.172942][ T52] hid (null): unknown global tag 0xe [ 132.233737][ T52] hid-generic 0005:15C2:0A0E.0005: unknown global tag 0xe [ 132.241102][ T52] hid-generic 0005:15C2:0A0E.0005: item 0 2 1 14 parsing failed [ 132.320290][ T52] hid-generic 0005:15C2:0A0E.0005: probe with driver hid-generic failed with error -22 [ 132.470268][ T8246] netlink: 2 bytes leftover after parsing attributes in process `syz.0.977'. [ 133.005534][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.011861][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.463756][ T8286] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 133.514563][ T8290] sch_tbf: burst 1683 is lower than device lo mtu (65550) ! [ 134.441429][ T8319] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 134.761284][ T8332] netlink: 'syz.3.1015': attribute type 11 has an invalid length. [ 134.858427][ T5830] kernel read not supported for file /dsp (pid: 5830 comm: kworker/1:3) [ 135.286263][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1023'. [ 135.309454][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1023'. [ 135.740837][ T8369] netlink: 'syz.2.1030': attribute type 10 has an invalid length. [ 135.782037][ T8369] team0: Port device dummy0 added [ 135.881008][ T8369] team0: Port device dummy0 removed [ 135.920250][ T8369] bridge_slave_0: left allmulticast mode [ 135.984771][ T8369] bridge_slave_0: left promiscuous mode [ 136.012866][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.044182][ T8369] bridge_slave_1: left allmulticast mode [ 136.049868][ T8369] bridge_slave_1: left promiscuous mode [ 136.062845][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.102834][ T8369] bond0: (slave bond_slave_0): Releasing backup interface [ 136.131332][ T8369] bond0: (slave bond_slave_1): Releasing backup interface [ 136.160917][ T8369] team0: Port device team_slave_0 removed [ 136.187555][ T8369] team0: Port device team_slave_1 removed [ 136.208078][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.219896][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.235982][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.249210][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.663224][ T8391] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 136.682592][ T8391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.863707][ T8399] sctp: [Deprecated]: syz.4.1044 (pid 8399) Use of int in max_burst socket option deprecated. [ 136.863707][ T8399] Use struct sctp_assoc_value instead [ 136.962880][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.124142][ T5877] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.153308][ T5877] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.183428][ T5877] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.209555][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.292948][ T8395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.304402][ T5877] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.579624][ T5830] usb 2-1: USB disconnect, device number 5 [ 137.598340][ T8420] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1052'. [ 137.877042][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 137.900121][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 137.920619][ T8429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1056'. [ 138.282435][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.443462][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 138.460754][ T5877] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 138.479460][ T5877] usb 5-1: config 0 has no interface number 0 [ 138.488197][ T5877] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 138.522531][ T5877] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.555922][ T5877] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 138.567556][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.582697][ T5877] usb 5-1: Product: syz [ 138.592003][ T5877] usb 5-1: Manufacturer: syz [ 138.616884][ T5877] usb 5-1: SerialNumber: syz [ 138.648264][ T5877] usb 5-1: config 0 descriptor?? [ 138.666511][ T8431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.677881][ T8431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.945714][ T8431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.963473][ T8431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.605335][ T5877] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.625121][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1075'. [ 139.630402][ T5877] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 139.663106][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1075'. [ 139.684189][ T5877] asix 5-1:0.251: probe with driver asix failed with error -71 [ 139.707508][ T5877] usb 5-1: USB disconnect, device number 2 [ 140.957572][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 141.382003][ T8533] io-wq is not configured for unbound workers [ 142.137449][ T8558] cifs: Unknown parameter 'mode' [ 142.308138][ T8566] UBIFS error (pid: 8566): cannot open "/dev/loop0", error -22 [ 142.405502][ T8570] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 142.453255][ T8570] macsec1: entered promiscuous mode [ 142.482787][ T8570] macsec1: entered allmulticast mode [ 142.497156][ T8570] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 142.703605][ T8584] usb usb1: usbfs: process 8584 (syz.4.1127) did not claim interface 0 before use [ 142.773304][ T8586] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1128'. [ 143.285804][ T8714] tap0: tun_chr_ioctl cmd 1074025681 [ 143.982756][ T5889] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.162674][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 144.179811][ T5889] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.197656][ T5889] usb 4-1: config 0 has no interface number 0 [ 144.227451][ T5889] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.249295][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.260433][ T5889] usb 4-1: Product: syz [ 144.296154][ T5889] usb 4-1: Manufacturer: syz [ 144.300787][ T5889] usb 4-1: SerialNumber: syz [ 144.315077][ T5889] usb 4-1: config 0 descriptor?? [ 144.339786][ T5889] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.568603][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.613936][ T5889] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 145.024243][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.035303][ T5889] usb 4-1: USB disconnect, device number 7 [ 145.076519][ T9385] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 145.088653][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.111956][ T9385] team0: Port device dummy0 added [ 145.143841][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.186961][ T5889] quatech2 4-1:0.51: device disconnected [ 145.221731][ T9385] team0: Port device dummy0 removed [ 145.254336][ T9385] bridge_slave_0: left allmulticast mode [ 145.282623][ T9385] bridge_slave_0: left promiscuous mode [ 145.288402][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.350438][ T9385] bridge_slave_1: left allmulticast mode [ 145.373702][ T9385] bridge_slave_1: left promiscuous mode [ 145.389787][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.454801][ T9385] bond0: (slave bond_slave_0): Releasing backup interface [ 145.499462][ T9385] bond0: (slave bond_slave_1): Releasing backup interface [ 145.528433][ T9385] team0: Port device team_slave_0 removed [ 145.560550][ T9385] team0: Port device team_slave_1 removed [ 145.593660][ T9385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.601179][ T9385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.630544][ T9385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.669327][ T9385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.470376][ T9423] xt_recent: Unsupported userspace flags (000000de) [ 146.768641][ T5830] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.922438][ T5830] usb 1-1: device descriptor read/64, error -71 [ 147.172415][ T5830] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.352695][ T5830] usb 1-1: device descriptor read/64, error -71 [ 147.472843][ T5830] usb usb1-port1: attempt power cycle [ 147.862459][ T5830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.919347][ T5830] usb 1-1: device descriptor read/8, error -71 [ 148.004412][ T9469] tap0: tun_chr_ioctl cmd 2147767511 [ 148.182682][ T5830] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.234844][ T5830] usb 1-1: device descriptor read/8, error -71 [ 148.343228][ T5830] usb usb1-port1: unable to enumerate USB device [ 149.112508][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.254867][ T9527] input: syz0 as /devices/virtual/input/input14 [ 149.285425][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.302666][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.352522][ T5880] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 149.379674][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.428841][ T5880] usb 2-1: config 0 descriptor?? [ 149.932690][ T5880] aquacomputer_d5next 0003:0C70:F00B.0006: hidraw0: USB HID v0.08 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 150.122348][ T5880] usb 2-1: USB disconnect, device number 6 [ 151.631842][ T9640] tipc: Started in network mode [ 151.641628][ T9640] tipc: Node identity ff, cluster identity 4711 [ 151.655624][ T9640] tipc: Enabling of bearer rejected, failed to enable media [ 151.774168][ T9647] ubi31: attaching mtd0 [ 152.752577][ T5840] Bluetooth: hci0: command tx timeout [ 153.043836][ T5830] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.051630][ T9665] [U] .ú [ 153.230060][ T9692] lo speed is unknown, defaulting to 1000 [ 153.242775][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 153.253439][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.264514][ T9692] lo speed is unknown, defaulting to 1000 [ 153.267695][ T9692] lo speed is unknown, defaulting to 1000 [ 153.278018][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.296885][ T9695] netlink: 'syz.3.1297': attribute type 16 has an invalid length. [ 153.315147][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 153.362507][ T9695] netlink: 'syz.3.1297': attribute type 17 has an invalid length. [ 153.370528][ T5830] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 153.382613][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.393198][ T9692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 153.414997][ T5830] usb 3-1: config 0 descriptor?? [ 153.438440][ T9695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.458948][ T5889] lo speed is unknown, defaulting to 1000 [ 153.487115][ T9692] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 153.581973][ T9692] lo speed is unknown, defaulting to 1000 [ 153.596258][ T9692] lo speed is unknown, defaulting to 1000 [ 153.611739][ T9692] lo speed is unknown, defaulting to 1000 [ 153.636794][ T9692] lo speed is unknown, defaulting to 1000 [ 153.649489][ T9692] lo speed is unknown, defaulting to 1000 [ 153.834776][ T5830] kovaplus 0003:1E7D:2D50.0007: item fetching failed at offset 1/3 [ 153.859131][ T5830] kovaplus 0003:1E7D:2D50.0007: parse failed [ 153.870146][ T5830] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -22 [ 154.058645][ T5830] usb 3-1: USB disconnect, device number 8 [ 154.505828][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 154.518057][ T9739] netlink: 'syz.3.1318': attribute type 2 has an invalid length. [ 154.532225][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 154.682792][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.853407][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 154.873683][ T5830] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 154.873711][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.876534][ T5830] usb 2-1: config 0 descriptor?? [ 155.051223][ T30] audit: type=1326 audit(1742204818.583:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9761 comm="syz.0.1331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bdfd8d169 code=0x0 [ 155.074059][ T9765] netlink: 'syz.3.1329': attribute type 3 has an invalid length. [ 155.110373][ T5830] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 155.714748][ T5830] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 155.732940][ T5830] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 155.752047][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 155.761566][ T9795] netlink: 'syz.4.1344': attribute type 30 has an invalid length. [ 155.771038][ T5830] asix 2-1:0.0: probe with driver asix failed with error -71 [ 155.779131][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 155.792795][ T5830] usb 2-1: USB disconnect, device number 7 [ 156.474408][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 156.891123][ T5840] Bluetooth: hci0: link tx timeout [ 156.896866][ T5840] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.105849][ T9843] cgroup: fork rejected by pids controller in /syz0 [ 157.160748][ T9877] bond0: (slave macvlan2): Opening slave failed [ 157.675243][T10555] macvlan0: entered allmulticast mode [ 157.687031][T10555] veth1_vlan: entered allmulticast mode [ 157.731335][T10555] pim6reg: entered allmulticast mode [ 157.981659][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'. [ 158.992894][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 159.143660][T10748] mkiss: ax0: crc mode is auto. [ 159.173932][T10752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.681830][ T975] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 159.699267][ T975] hid-generic 0000:0003:0000.0008: unknown main item tag 0x0 [ 159.739393][ T975] hid-generic 0000:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 159.955426][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'. [ 159.968582][T10789] loop4: detected capacity change from 0 to 524287999 [ 160.024784][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.034181][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.043348][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.052537][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.088519][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.097735][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.121506][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1420'. [ 160.134926][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.144131][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.153189][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.162377][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.170688][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.179923][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.188982][T10794] netem: invalid attributes len -6 [ 160.189089][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.200794][T10794] netem: change failed [ 160.203317][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.217672][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.226860][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.234929][T10789] ldm_validate_partition_table(): Disk read failed. [ 160.244224][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.253410][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.261461][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.270702][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.312519][T10789] Dev loop4: unable to read RDB block 0 [ 160.332377][T10789] loop4: unable to read partition table [ 160.338270][T10789] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 160.533191][T10809] netlink: 'syz.3.1425': attribute type 46 has an invalid length. [ 160.541046][T10809] netlink: 212868 bytes leftover after parsing attributes in process `syz.3.1425'. [ 160.909779][T10823] lo: entered allmulticast mode [ 160.937288][T10823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.721082][ T5840] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 161.731599][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: kworker/u9:6 Not tainted 6.14.0-rc7-syzkaller #0 [ 161.731622][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.731633][ T5840] Workqueue: hci3 hci_rx_work [ 161.731666][ T5840] Call Trace: [ 161.731673][ T5840] [ 161.731680][ T5840] dump_stack_lvl+0x241/0x360 [ 161.731704][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.731722][ T5840] ? __pfx__printk+0x10/0x10 [ 161.731752][ T5840] ? __kmalloc_cache_noprof+0x243/0x390 [ 161.731775][ T5840] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 161.731805][ T5840] sysfs_create_dir_ns+0x2ce/0x3a0 [ 161.731833][ T5840] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 161.731868][ T5840] kobject_add_internal+0x435/0x8d0 [ 161.731894][ T5840] kobject_add+0x152/0x220 [ 161.731919][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 161.731939][ T5840] ? device_add+0x3e7/0xbf0 [ 161.731964][ T5840] ? __pfx_kobject_add+0x10/0x10 [ 161.731989][ T5840] ? _raw_spin_unlock+0x28/0x50 [ 161.732014][ T5840] ? get_device_parent+0x165/0x410 [ 161.732043][ T5840] device_add+0x4e5/0xbf0 [ 161.732075][ T5840] hci_conn_add_sysfs+0xe8/0x200 [ 161.732097][ T5840] le_conn_complete_evt+0xd1a/0x1360 [ 161.732133][ T5840] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 161.732154][ T5840] ? __mutex_unlock_slowpath+0x227/0x800 [ 161.732182][ T5840] ? __skb_clone+0x5c/0x6c0 [ 161.732204][ T5840] ? skb_pull_data+0x112/0x230 [ 161.732230][ T5840] hci_le_conn_complete_evt+0x18c/0x420 [ 161.732260][ T5840] hci_event_packet+0xa54/0x1540 [ 161.732284][ T5840] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 161.732313][ T5840] ? __pfx_hci_event_packet+0x10/0x10 [ 161.732331][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 161.732353][ T5840] ? kcov_remote_start+0x480/0x7d0 [ 161.732374][ T5840] ? get_seg_base_limit+0x950/0x1280 [ 161.732398][ T5840] ? hci_send_to_monitor+0xdc/0x530 [ 161.732422][ T5840] hci_rx_work+0x3f3/0xdb0 [ 161.732447][ T5840] ? process_scheduled_works+0x9c6/0x18e0 [ 161.732467][ T5840] process_scheduled_works+0xabe/0x18e0 [ 161.732511][ T5840] ? __pfx_process_scheduled_works+0x10/0x10 [ 161.732537][ T5840] ? assign_work+0x364/0x3d0 [ 161.732561][ T5840] worker_thread+0x870/0xd30 [ 161.732595][ T5840] ? __kthread_parkme+0x169/0x1d0 [ 161.732620][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 161.732641][ T5840] kthread+0x7a9/0x920 [ 161.732662][ T5840] ? __pfx_kthread+0x10/0x10 [ 161.732687][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 161.732708][ T5840] ? __pfx_kthread+0x10/0x10 [ 161.732729][ T5840] ? __pfx_kthread+0x10/0x10 [ 161.732755][ T5840] ? __pfx_kthread+0x10/0x10 [ 161.732783][ T5840] ? _raw_spin_unlock_irq+0x23/0x50 [ 161.732803][ T5840] ? lockdep_hardirqs_on+0x99/0x150 [ 161.732825][ T5840] ? __pfx_kthread+0x10/0x10 [ 161.732850][ T5840] ret_from_fork+0x4b/0x80 [ 161.732870][ T5840] ? __pfx_kthread+0x10/0x10 [ 161.732893][ T5840] ret_from_fork_asm+0x1a/0x30 [ 161.732929][ T5840] [ 162.011335][ T5840] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.025428][ T5840] Bluetooth: hci3: failed to register connection device [ 162.619624][T10883] bridge0: port 3(batadv1) entered blocking state [ 162.655682][T10883] bridge0: port 3(batadv1) entered disabled state [ 162.693991][T10883] batadv1: entered allmulticast mode [ 162.701756][T10883] batadv1: entered promiscuous mode [ 162.815342][T10893] vivid-000: disconnect [ 162.827963][T10892] vivid-000: reconnect [ 163.135469][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 163.145230][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 163.881722][T10953] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 164.071091][T10962] netlink: 'syz.4.1496': attribute type 1 has an invalid length. [ 164.086971][T10962] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1496'. [ 164.611055][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 164.973395][T10990] cgroup: fork rejected by pids controller in /syz2 [ 165.122560][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.282524][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 165.295589][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 165.342204][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 165.361744][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 165.384076][ T10] usb 4-1: Product: syz [ 165.388279][ T10] usb 4-1: Manufacturer: syz [ 165.418827][ T10] usb 4-1: SerialNumber: syz [ 165.479349][T10976] syz.0.1503 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 165.652439][ T10] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 165.686647][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 165.712634][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 165.729492][ T10] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 165.844168][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1515'. [ 165.853794][ T10] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 165.862112][ T10] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 165.912701][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 165.945806][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 165.981873][ T10] usb 4-1: USB disconnect, device number 8 [ 166.019750][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 166.059131][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 166.092834][ T10] visor 4-1:1.0: device disconnected [ 166.604181][T12599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1527'. [ 166.699968][T12603] syz_tun: entered promiscuous mode [ 166.746330][T12603] syz_tun: left promiscuous mode [ 167.188296][T12623] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 168.598278][T12707] loop5: detected capacity change from 0 to 7 [ 168.613399][T12707] buffer_io_error: 7 callbacks suppressed [ 168.613415][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.630155][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.638899][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.657144][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.672626][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.683964][ T30] audit: type=1326 audit(2000000000.069:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12708 comm="syz.3.1572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad0e18d169 code=0x0 [ 168.725404][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.746535][T12707] Buffer I/O error on dev loop5, logical block 0, async page read [ 273.622305][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 273.629336][ C0] rcu: 1-...!: (1 ticks this GP) idle=51ec/1/0x4000000000000000 softirq=27730/27730 fqs=0 [ 273.640419][ C0] rcu: (detected by 0, t=10502 jiffies, g=25901, q=306 ncpus=2) [ 273.648161][ C0] Sending NMI from CPU 0 to CPUs 1: [ 273.648195][ C1] NMI backtrace for cpu 1 [ 273.648215][ C1] CPU: 1 UID: 0 PID: 12706 Comm: syz.4.1570 Not tainted 6.14.0-rc7-syzkaller #0 [ 273.648230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.648245][ C1] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 273.648283][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 273.648294][ C1] RSP: 0018:ffffc90000a28ad0 EFLAGS: 00000046 [ 273.648313][ C1] RAX: 0000000000000001 RBX: 1ffffffff350c72a RCX: 0000000000000001 [ 273.648323][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a863948 [ 273.648332][ C1] RBP: dffffc0000000000 R08: ffffffff9a86394b R09: 1ffffffff350c729 [ 273.648342][ C1] R10: dffffc0000000000 R11: fffffbfff350c72a R12: 1ffffffff350c72b [ 273.648352][ C1] R13: ffffffff9a863958 R14: ffffffff9a863950 R15: ffffffff9a863948 [ 273.648362][ C1] FS: 00007f6c5f1c96c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 273.648374][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.648384][ C1] CR2: 0000400000003c80 CR3: 0000000033ade000 CR4: 00000000003526f0 [ 273.648397][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.648405][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 273.648414][ C1] Call Trace: [ 273.648420][ C1] [ 273.648427][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 273.648463][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 273.648507][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 273.648541][ C1] ? nmi_handle+0x2a/0x5a0 [ 273.648599][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 273.648634][ C1] ? nmi_handle+0x14f/0x5a0 [ 273.648678][ C1] ? nmi_handle+0x2a/0x5a0 [ 273.648696][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 273.648715][ C1] ? default_do_nmi+0x63/0x160 [ 273.648731][ C1] ? exc_nmi+0x123/0x1f0 [ 273.648745][ C1] ? end_repeat_nmi+0xf/0x53 [ 273.648769][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 273.648789][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 273.648809][ C1] ? __raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 273.648829][ C1] [ 273.648833][ C1] [ 273.648838][ C1] do_raw_spin_unlock+0x13c/0x8b0 [ 273.648858][ C1] _raw_spin_unlock_irqrestore+0x81/0x140 [ 273.648875][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.648897][ C1] debug_object_activate+0x3f7/0x580 [ 273.648920][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 273.648937][ C1] ? advance_sched+0xa02/0xca0 [ 273.648957][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 273.648973][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 273.648991][ C1] enqueue_hrtimer+0x30/0x3c0 [ 273.649007][ C1] __hrtimer_run_queues+0x6cb/0xd30 [ 273.649029][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 273.649042][ C1] ? sched_clock+0x4a/0x70 [ 273.649057][ C1] ? read_tsc+0x9/0x20 [ 273.649071][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 273.649091][ C1] hrtimer_interrupt+0x403/0xa40 [ 273.649116][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 273.649137][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 273.649154][ C1] [ 273.649159][ C1] [ 273.649164][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.649182][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 273.649200][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 fe da 22 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 cc 8b f5 65 8b 05 74 1e 00 74 85 c0 74 43 48 c7 04 24 0e 36 [ 273.649210][ C1] RSP: 0018:ffffc9000b4dfba0 EFLAGS: 00000206 [ 273.649222][ C1] RAX: 6f8809cf06f2b000 RBX: 1ffff9200169bf78 RCX: ffffffff819d4bba [ 273.649233][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab380 RDI: 0000000000000001 [ 273.649242][ C1] RBP: ffffc9000b4dfc30 R08: ffffffff94517847 R09: 1ffffffff28a2f08 [ 273.649252][ C1] R10: dffffc0000000000 R11: fffffbfff28a2f09 R12: dffffc0000000000 [ 273.649262][ C1] R13: 1ffff9200169bf74 R14: ffffc9000b4dfbc0 R15: 0000000000000246 [ 273.649276][ C1] ? mark_lock+0x9a/0x360 [ 273.649297][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.649314][ C1] ? read_tsc+0x9/0x20 [ 273.649331][ C1] clock_was_set+0x686/0x810 [ 273.649351][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 273.649370][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 273.649390][ C1] ? do_settimeofday64+0x328/0x5e0 [ 273.649406][ C1] ? timekeeping_update_from_shadow+0x2b6/0x350 [ 273.649424][ C1] do_settimeofday64+0x343/0x5e0 [ 273.649443][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 273.649458][ C1] ? qca_open+0xa18/0xce0 [ 273.649475][ C1] ? capable+0x89/0xe0 [ 273.649490][ C1] ? security_settime64+0x74/0x280 [ 273.649509][ C1] __x64_sys_clock_settime+0x23a/0x280 [ 273.649528][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 273.649545][ C1] ? trace_sys_enter+0x74/0x120 [ 273.649563][ C1] ? rcu_is_watching+0x15/0xb0 [ 273.649577][ C1] ? trace_sys_enter+0x25/0x120 [ 273.649597][ C1] do_syscall_64+0xf3/0x230 [ 273.649616][ C1] ? clear_bhb_loop+0x35/0x90 [ 273.649635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.649658][ C1] RIP: 0033:0x7f6c5e38d169 [ 273.649676][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.649687][ C1] RSP: 002b:00007f6c5f1c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 273.649700][ C1] RAX: ffffffffffffffda RBX: 00007f6c5e5a5fa0 RCX: 00007f6c5e38d169 [ 273.649710][ C1] RDX: 0000000000000000 RSI: 0000400000003c80 RDI: 0000000000000000 [ 273.649719][ C1] RBP: 00007f6c5e40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 273.649728][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.649736][ C1] R13: 0000000000000000 R14: 00007f6c5e5a5fa0 R15: 00007ffec42147f8 [ 273.649753][ C1] [ 273.650187][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g25901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 274.246879][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=11748 [ 274.254771][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g25901 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 274.266138][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 274.276104][ C0] rcu: RCU grace-period kthread stack dump: [ 274.281993][ C0] task:rcu_preempt state:I stack:26104 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 274.293920][ C0] Call Trace: [ 274.297204][ C0] [ 274.300145][ C0] __schedule+0x18bc/0x4c40 [ 274.304664][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 274.310580][ C0] ? __pfx___schedule+0x10/0x10 [ 274.315439][ C0] ? __pfx_lock_release+0x10/0x10 [ 274.320479][ C0] ? __pfx___mod_timer+0x10/0x10 [ 274.325423][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.331768][ C0] ? schedule+0x90/0x320 [ 274.336023][ C0] schedule+0x14b/0x320 [ 274.340196][ C0] schedule_timeout+0x15a/0x290 [ 274.345052][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 274.350516][ C0] ? __pfx_process_timeout+0x10/0x10 [ 274.355811][ C0] ? prepare_to_swait_event+0x330/0x350 [ 274.361369][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.366699][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 274.371558][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 274.376772][ C0] ? rcu_gp_init+0x1256/0x1630 [ 274.381994][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 274.386948][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 274.392851][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 274.398148][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 274.404741][ C0] ? finish_swait+0xd4/0x1e0 [ 274.409403][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.414647][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 274.419271][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.424488][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 274.430402][ C0] ? __kthread_parkme+0x169/0x1d0 [ 274.435446][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.440656][ C0] kthread+0x7a9/0x920 [ 274.444745][ C0] ? __pfx_kthread+0x10/0x10 [ 274.449353][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 274.454568][ C0] ? __pfx_kthread+0x10/0x10 [ 274.459170][ C0] ? __pfx_kthread+0x10/0x10 [ 274.464034][ C0] ? __pfx_kthread+0x10/0x10 [ 274.468636][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.473840][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 274.479483][ C0] ? __pfx_kthread+0x10/0x10 [ 274.484082][ C0] ret_from_fork+0x4b/0x80 [ 274.488503][ C0] ? __pfx_kthread+0x10/0x10 [ 274.493119][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.497940][ C0]