last executing test programs: 9.014379892s ago: executing program 1 (id=11153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x1a, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x74}}, 0x0) 8.788765137s ago: executing program 1 (id=11155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7ff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 8.629332158s ago: executing program 1 (id=11157): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x1d, r2}, 0x10, &(0x7f0000000680)={&(0x7f0000000640)=@can={{0x2, 0x0, 0x0, 0x1}, 0xb, 0x1, 0x0, 0x0, "bafb75258f31ecfc"}, 0x10}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) 8.570379416s ago: executing program 1 (id=11158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0xfffffffff0000000}}, 0x28) 8.206617442s ago: executing program 1 (id=11160): r0 = userfaultfd(0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x249, 0x4a, r1, 0x0) 7.890523136s ago: executing program 1 (id=11161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 6.74494105s ago: executing program 2 (id=11172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000400)=""/41, 0x29}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 6.601988945s ago: executing program 2 (id=11173): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xa800, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x409, 0x4800003e, r0, 0x0) 6.517516226s ago: executing program 2 (id=11175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000000c0)='cifs.spnego\x00', 0x0) 6.358684584s ago: executing program 2 (id=11178): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT={0xc}, &(0x7f0000000240), 0x0) 6.082799226s ago: executing program 2 (id=11181): userfaultfd(0x801) r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000080)={0x0, 0x74cb, 0x10100, 0x0, 0x93}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 4.830001915s ago: executing program 2 (id=11187): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1}, 0x8) 4.351306416s ago: executing program 3 (id=11192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r0, &(0x7f0000001e80)=""/96, 0x60) 4.351145891s ago: executing program 4 (id=11193): r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 4.059708123s ago: executing program 4 (id=11194): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x40bd8d0cdd7f47b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x44}}, 0x0) 3.292315099s ago: executing program 3 (id=11197): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x108, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xc8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xac, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x108}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x4f}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.291406688s ago: executing program 0 (id=11205): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, @TCA_TBF_BURST={0x8}]}}]}, 0x60}}, 0x0) 1.546678477s ago: executing program 4 (id=11198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) 1.485939943s ago: executing program 0 (id=11199): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.3790813s ago: executing program 4 (id=11200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x3}, 0x8) 1.378391867s ago: executing program 3 (id=11209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000500)) 1.326135949s ago: executing program 0 (id=11201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 1.059709687s ago: executing program 0 (id=11202): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 878.136788ms ago: executing program 3 (id=11203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00010000000000002c0012800b00010062726964676500001c0002800600170000000000050019"], 0x4c}}, 0x0) 504.121571ms ago: executing program 0 (id=11204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x20064084) 392.5618ms ago: executing program 4 (id=11206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) close(r0) 267.24786ms ago: executing program 3 (id=11207): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 152.609127ms ago: executing program 4 (id=11208): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003c80)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 93.067612ms ago: executing program 3 (id=11210): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901) 0s ago: executing program 0 (id=11211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000100)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e40)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): rejected, failed to enable media [ 608.597454][ T29] audit: type=1326 audit(1729456438.192:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26451 comm="syz.2.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f3e5197dff9 code=0x7ffc0000 [ 608.679550][ T29] audit: type=1326 audit(1729456438.192:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26451 comm="syz.2.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5197dff9 code=0x7ffc0000 [ 608.702316][ T29] audit: type=1326 audit(1729456438.192:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26451 comm="syz.2.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5197dff9 code=0x7ffc0000 [ 609.481014][ T25] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 609.492387][ T25] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 609.506110][ T25] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz0] on syz1 [ 609.790795][ T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 609.871120][ T5324] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 609.895184][T26519] openvswitch: netlink: Actions may not be safe on all matching packets [ 609.942879][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.964855][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.983679][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 610.000149][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.020013][ T25] usb 5-1: config 0 descriptor?? [ 610.027253][T26523] sctp: [Deprecated]: syz.2.10061 (pid 26523) Use of int in maxseg socket option. [ 610.027253][T26523] Use struct sctp_assoc_value instead [ 610.047239][ T5324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.079411][ T5324] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=7c.21 [ 610.101328][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.112173][ T5324] usb 2-1: Product: syz [ 610.116409][ T5324] usb 2-1: Manufacturer: syz [ 610.121758][ T5324] usb 2-1: SerialNumber: syz [ 610.131738][ T5324] usb 2-1: config 0 descriptor?? [ 610.355999][ T5324] usb 2-1: USB disconnect, device number 25 [ 610.419961][T26531] x_tables: duplicate underflow at hook 4 [ 610.458139][ T25] sony 0003:054C:0268.0064: unknown main item tag 0x0 [ 610.469035][ T25] sony 0003:054C:0268.0064: unknown main item tag 0x0 [ 610.478784][ T25] sony 0003:054C:0268.0064: unknown main item tag 0x0 [ 610.507032][ T25] sony 0003:054C:0268.0064: unknown main item tag 0x0 [ 610.521055][ T25] sony 0003:054C:0268.0064: unknown main item tag 0x0 [ 610.534362][ T25] sony 0003:054C:0268.0064: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 610.547170][ T25] sony 0003:054C:0268.0064: failed to claim input [ 610.595276][T26539] loop6: detected capacity change from 0 to 524287999 [ 610.610080][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.619454][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.628532][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.637736][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.647828][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.657040][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.666403][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.675679][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.681466][ T25] usb 5-1: USB disconnect, device number 43 [ 610.693491][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.702755][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.716601][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.725801][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.741013][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.750226][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.759874][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.769118][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.777026][T26539] ldm_validate_partition_table(): Disk read failed. [ 610.785941][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.795103][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.803173][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 610.812426][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 610.826093][T26539] Dev loop6: unable to read RDB block 0 [ 610.846016][T26539] loop6: unable to read partition table [ 610.852839][T26539] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 610.890388][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 611.060386][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 611.091089][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.123671][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.144138][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 611.155477][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.166389][ T8] usb 4-1: config 0 descriptor?? [ 611.173770][ T8] hub 4-1:0.0: USB hub found [ 611.390298][ T8] hub 4-1:0.0: 1 port detected [ 611.591928][ T8] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 611.598450][ T8] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 611.610120][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 611.616764][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 611.642017][ T8] usb 4-1: USB disconnect, device number 18 [ 611.674176][ T5324] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 611.832926][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.844383][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.864298][ T5324] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 611.878064][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.890030][ T5324] usb 5-1: config 0 descriptor?? [ 612.056923][T26577] netlink: 'syz.1.10087': attribute type 29 has an invalid length. [ 612.075166][T26577] netlink: 'syz.1.10087': attribute type 29 has an invalid length. [ 612.324516][T26585] program syz.2.10091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.402060][ T5324] appleir 0003:05AC:8241.0065: item fetching failed at offset 5/7 [ 612.413527][ T5324] appleir 0003:05AC:8241.0065: parse failed [ 612.419537][ T5324] appleir 0003:05AC:8241.0065: probe with driver appleir failed with error -22 [ 612.575370][ T8] usb 5-1: USB disconnect, device number 44 [ 612.693106][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10096'. [ 612.749638][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10096'. [ 612.761275][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10096'. [ 612.790977][T26597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10097'. [ 613.143114][T26614] openvswitch: netlink: Actions may not be safe on all matching packets [ 613.991175][ T8] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 614.102120][ T5294] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 614.142069][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.154989][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.168111][ T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 614.186200][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.200246][ T8] usb 5-1: config 0 descriptor?? [ 614.271252][ T5294] usb 2-1: Using ep0 maxpacket: 16 [ 614.278384][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.290414][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.300545][ T5294] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 614.309710][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.327081][ T5294] usb 2-1: config 0 descriptor?? [ 614.634912][ T8] corsair-psu 0003:1B1C:1C0D.0066: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 614.771181][ T5294] betop 0003:11C2:2208.0067: unknown main item tag 0x0 [ 614.794443][ T5294] betop 0003:11C2:2208.0067: hidraw1: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.1-1/input0 [ 614.808627][ T5294] betop 0003:11C2:2208.0067: no inputs found [ 614.817711][T26680] tipc: Enabling of bearer rejected, failed to enable media [ 614.852525][ T8] corsair-psu 0003:1B1C:1C0D.0066: unable to initialize device (-71) [ 614.882003][ T8] corsair-psu 0003:1B1C:1C0D.0066: probe with driver corsair-psu failed with error -71 [ 614.903710][ T8] usb 5-1: USB disconnect, device number 45 [ 614.981729][ T5324] usb 2-1: USB disconnect, device number 26 [ 615.004021][T26684] tipc: Invalid UDP bearer configuration [ 615.004069][T26684] tipc: Enabling of bearer rejected, failed to enable media [ 616.145233][ T5243] Bluetooth: hci5: unexpected event 0x10 length: 7 > 1 [ 616.147571][T23999] Bluetooth: hci5: hardware error 0x00 [ 616.432072][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 616.620703][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 616.640073][ T8] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 616.662412][ T8] usb 2-1: config 0 has no interface number 0 [ 616.692726][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 616.720273][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.734786][ T8] usb 2-1: Product: syz [ 616.759290][ T8] usb 2-1: Manufacturer: syz [ 616.771079][ T8] usb 2-1: SerialNumber: syz [ 616.794666][ T8] usb 2-1: config 0 descriptor?? [ 616.821578][ T8] smsc95xx v2.0.0 [ 616.825619][T26765] dvmrp0: left allmulticast mode [ 617.146743][T26780] netlink: 'syz.3.10180': attribute type 6 has an invalid length. [ 617.154824][T26780] netlink: 'syz.3.10180': attribute type 7 has an invalid length. [ 617.164258][T26780] netlink: 'syz.3.10180': attribute type 8 has an invalid length. [ 617.357618][T26794] dccp_invalid_packet: P.Data Offset(172) too large [ 617.419759][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 617.436716][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 617.450445][ T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 617.470501][ T8] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 617.484717][ T8] usb 2-1: USB disconnect, device number 27 [ 617.616064][T26805] tipc: Enabling of bearer rejected, failed to enable media [ 617.815317][T26815] program syz.4.10196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.311361][T23999] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 618.322443][T26839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10208'. [ 618.822158][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 618.983911][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.007685][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.044146][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 619.072807][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.095370][ T8] usb 3-1: config 0 descriptor?? [ 619.242128][T26869] syz.3.10220 (26869) used obsolete PPPIOCDETACH ioctl [ 619.420446][ T5294] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 619.536965][ T8] elecom 0003:056E:011C.0068: unknown main item tag 0x0 [ 619.551842][ T8] elecom 0003:056E:011C.0068: unknown main item tag 0xe [ 619.572222][ T8] elecom 0003:056E:011C.0068: unknown main item tag 0x5 [ 619.579844][ T8] elecom 0003:056E:011C.0068: unknown main item tag 0x4 [ 619.587367][ T8] elecom 0003:056E:011C.0068: ignoring exceeding usage max [ 619.596196][ T8] elecom 0003:056E:011C.0068: usage index exceeded [ 619.602820][ T8] elecom 0003:056E:011C.0068: item 0 0 2 0 parsing failed [ 619.610824][ T8] elecom 0003:056E:011C.0068: probe with driver elecom failed with error -22 [ 619.620613][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 619.642028][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.660943][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.671056][ T5294] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 619.680571][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.690586][ T5294] usb 5-1: config 0 descriptor?? [ 619.764416][ T8] usb 3-1: USB disconnect, device number 12 [ 619.784410][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.807402][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.826043][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 619.835573][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.858971][ T25] usb 4-1: config 0 descriptor?? [ 620.111774][ T5294] cypress 0003:04B4:DE61.0069: item fetching failed at offset 6/7 [ 620.120155][ T5294] cypress 0003:04B4:DE61.0069: parse failed [ 620.148214][ T5294] cypress 0003:04B4:DE61.0069: probe with driver cypress failed with error -22 [ 620.289462][ T25] wacom 0003:056A:002A.006A: unknown main item tag 0x0 [ 620.297502][ T25] wacom 0003:056A:002A.006A: unknown main item tag 0x0 [ 620.316556][ T5294] usb 5-1: USB disconnect, device number 46 [ 620.332061][ T25] wacom 0003:056A:002A.006A: unknown main item tag 0x0 [ 620.350021][ T25] wacom 0003:056A:002A.006A: unknown main item tag 0x0 [ 620.359982][ T25] wacom 0003:056A:002A.006A: unknown main item tag 0x0 [ 620.368160][ T25] wacom 0003:056A:002A.006A: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 620.382988][ T25] wacom 0003:056A:002A.006A: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 620.402013][ T25] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.006A/input/input113 [ 620.554090][ T25] usb 4-1: USB disconnect, device number 19 [ 621.020483][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 621.183078][ T25] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 621.191911][ T25] usb 3-1: config 0 has no interface number 0 [ 621.198052][ T25] usb 3-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice=e5.66 [ 621.229770][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.255601][ T25] usb 3-1: config 0 descriptor?? [ 621.318674][T26922] sctp: [Deprecated]: syz.1.10248 (pid 26922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 621.318674][T26922] Use struct sctp_sack_info instead [ 621.501290][ T5294] usb 3-1: USB disconnect, device number 13 [ 621.569678][T26931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10251'. [ 621.821245][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10255'. [ 622.940144][T26939] syz.1.10253 (26939): drop_caches: 2 [ 623.027375][T26980] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 623.310732][ T5292] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 623.441040][T27000] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 623.465731][ T5292] usb 5-1: Using ep0 maxpacket: 32 [ 623.499377][ T5292] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 623.508510][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.519048][ T5292] usb 5-1: config 0 descriptor?? [ 623.526938][ T5292] gspca_main: sq930x-2.14.0 probing 041e:403c [ 623.921925][T27015] random: crng reseeded on system resumption [ 624.066872][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.220348][ T5292] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 624.226299][ T5292] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 624.238379][ T5292] usb 5-1: USB disconnect, device number 47 [ 624.411482][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.475308][T27015] Unrecognized hibernate image header format! [ 624.516719][T27015] PM: hibernation: Image mismatch: architecture specific data [ 624.553633][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.559997][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.615691][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.724722][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 624.752286][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 624.780717][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 624.807975][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 624.817817][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 624.826412][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 624.892457][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 624.909794][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.182455][ T11] bridge_slave_1: left allmulticast mode [ 625.188954][ T11] bridge_slave_1: left promiscuous mode [ 625.199699][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.274016][ T11] bridge_slave_0: left allmulticast mode [ 625.307889][ T11] bridge_slave_0: left promiscuous mode [ 625.317958][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.254942][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.301630][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.322726][ T11] bond0 (unregistering): Released all slaves [ 626.870604][ T5243] Bluetooth: hci5: command tx timeout [ 627.055966][T27030] chnl_net:caif_netlink_parms(): no params data found [ 627.647705][T27030] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.660392][T27030] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.667883][T27030] bridge_slave_0: entered allmulticast mode [ 627.804995][T27030] bridge_slave_0: entered promiscuous mode [ 627.910998][ T11] hsr_slave_0: left promiscuous mode [ 627.936057][ T11] hsr_slave_1: left promiscuous mode [ 627.989581][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.055908][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.073553][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.081376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.143328][ T11] veth1_macvtap: left promiscuous mode [ 628.150835][ T11] veth0_macvtap: left promiscuous mode [ 628.159250][ T11] veth1_vlan: left promiscuous mode [ 628.164866][ T11] veth0_vlan: left promiscuous mode [ 628.660319][ T5294] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 628.850467][ T5294] usb 5-1: Using ep0 maxpacket: 32 [ 628.866340][ T5294] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 628.880415][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.893596][ T5294] usb 5-1: config 0 descriptor?? [ 628.931873][ T5294] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 628.961282][ T5243] Bluetooth: hci5: command tx timeout [ 629.384055][ T11] team0 (unregistering): Port device team_slave_1 removed [ 629.457076][ T11] team0 (unregistering): Port device team_slave_0 removed [ 629.516152][ T5294] gspca_vc032x: reg_w err -71 [ 629.539109][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.555766][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.562114][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.568250][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.595234][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.610245][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.615592][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.629493][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.635091][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.655845][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.678880][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.690520][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.695868][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.709776][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.715484][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.744425][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.752310][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.758207][ T5294] gspca_vc032x: I2c Bus Busy Wait 00 [ 629.770039][ T5294] gspca_vc032x: Unknown sensor... [ 629.778999][ T5294] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 629.799776][ T5294] usb 5-1: USB disconnect, device number 48 [ 630.373459][T27030] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.385158][T27030] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.409557][T27030] bridge_slave_1: entered allmulticast mode [ 630.437296][T27030] bridge_slave_1: entered promiscuous mode [ 630.549194][T27129] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 630.558144][T27129] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 630.606265][T27030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.606563][T27129] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 630.627496][T27030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.709844][T27129] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 630.720590][T27129] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 630.737936][T27030] team0: Port device team_slave_0 added [ 630.747414][T27030] team0: Port device team_slave_1 added [ 630.808158][T27129] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 630.911048][T27030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.967152][T27030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.099267][T27030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.117478][T27030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.124905][T27030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.151365][T27030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.336504][T27030] hsr_slave_0: entered promiscuous mode [ 631.391253][T27030] hsr_slave_1: entered promiscuous mode [ 631.417404][T27160] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10340'. [ 631.437069][T27160] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 631.441886][T27030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.497947][T27030] Cannot create hsr debugfs directory [ 631.801601][T27175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10347'. [ 631.828420][T27175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10347'. [ 631.838969][T27175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10347'. [ 631.849173][T27175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10347'. [ 632.630367][ T25] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 632.630478][ T5243] Bluetooth: hci6: command 0x0c1a tx timeout [ 632.720938][ T5243] Bluetooth: hci5: command 0x0419 tx timeout [ 632.818217][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.856566][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.912699][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 632.922273][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.957241][ T25] usb 2-1: config 0 descriptor?? [ 633.262971][ T5294] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 633.319051][T27030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 633.343190][T27030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 633.369620][T27030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 633.395250][T27030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 633.439166][ T25] konepure 0003:1E7D:2DB4.006B: unknown main item tag 0x0 [ 633.481770][ T25] konepure 0003:1E7D:2DB4.006B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 633.491218][T27030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.529651][T27030] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.538379][ T5294] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 633.556263][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.566665][ T5294] usb 5-1: config 0 descriptor?? [ 633.573634][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.580859][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.618989][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.626178][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.662718][ T25] usb 2-1: USB disconnect, device number 28 [ 633.797946][T27030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.009124][ T5294] hid-u2fzero 0003:10C4:8ACF.006C: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 634.027632][ T5294] hid-u2fzero 0003:10C4:8ACF.006C: U2F Zero LED initialised [ 634.036575][ T5294] hid-u2fzero 0003:10C4:8ACF.006C: U2F Zero RNG initialised [ 634.068350][T27030] veth0_vlan: entered promiscuous mode [ 634.127618][T27030] veth1_vlan: entered promiscuous mode [ 634.151854][ T938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 634.218660][T27030] veth0_macvtap: entered promiscuous mode [ 634.223167][ T25] usb 5-1: USB disconnect, device number 49 [ 634.255202][T27030] veth1_macvtap: entered promiscuous mode [ 634.275346][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.286270][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.297296][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.308229][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.320837][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.331436][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.341297][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.352102][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 634.357686][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.378231][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.389887][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.397539][ T938] usb 4-1: config 0 has an invalid interface number: 198 but max is 0 [ 634.404294][T27030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.422731][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.447567][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.448852][ T938] usb 4-1: config 0 has no interface number 0 [ 634.465352][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.477140][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.490746][ T938] usb 4-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=c0.05 [ 634.493565][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.510050][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.516378][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.524416][ T938] usb 4-1: Product: syz [ 634.530586][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.545114][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.558783][T27030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.575538][ T938] usb 4-1: Manufacturer: syz [ 634.586522][ T938] usb 4-1: SerialNumber: syz [ 634.593160][T27030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.618089][T27030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.645634][ T938] usb 4-1: config 0 descriptor?? [ 634.680122][ T938] gspca_main: spca501-2.14.0 probing 0506:00df [ 634.704950][T27030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.733700][ T5243] Bluetooth: hci6: command 0x0c1a tx timeout [ 634.759905][T27030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.769167][T27030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.778084][T27030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.843645][ T5243] Bluetooth: hci5: command 0x0419 tx timeout [ 635.067151][ T2528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.107071][ T2528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.281926][ T938] gspca_spca501: reg write: error -71 [ 635.287353][ T938] spca501 4-1:0.198: Reg write failed for 0x00,0xaa,0x00 [ 635.292035][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.295489][ T938] spca501 4-1:0.198: probe with driver spca501 failed with error -22 [ 635.313807][ T938] usb 4-1: USB disconnect, device number 20 [ 635.366779][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.626571][T27260] warn_alloc: 3 callbacks suppressed [ 636.626595][T27260] syz.4.10374: vmalloc error: size 3584000, failed to allocated page array size 7000, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 636.626682][T27260] CPU: 0 UID: 0 PID: 27260 Comm: syz.4.10374 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 636.626711][T27260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.626727][T27260] Call Trace: [ 636.626737][T27260] [ 636.626748][T27260] dump_stack_lvl+0x241/0x360 [ 636.626782][T27260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.626810][T27260] ? __pfx__printk+0x10/0x10 [ 636.626838][T27260] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 636.626868][T27260] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 636.626900][T27260] warn_alloc+0x278/0x410 [ 636.626931][T27260] ? __pfx_warn_alloc+0x10/0x10 [ 636.626961][T27260] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 636.626991][T27260] ? __get_vm_area_node+0x23d/0x270 [ 636.627032][T27260] __vmalloc_node_range_noprof+0x691/0x13f0 [ 636.627091][T27260] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 636.627124][T27260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 636.627148][T27260] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 636.627177][T27260] ? __get_vm_area_node+0x23d/0x270 [ 636.627215][T27260] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 636.627239][T27260] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 636.627265][T27260] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 636.627309][T27260] ? rcu_is_watching+0x15/0xb0 [ 636.627334][T27260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 636.627357][T27260] ? rcu_is_watching+0x15/0xb0 [ 636.627382][T27260] ? trace_kmalloc+0x1f/0xd0 [ 636.627409][T27260] ? __kmalloc_node_noprof+0x247/0x440 [ 636.627438][T27260] ? __kvmalloc_node_noprof+0x72/0x190 [ 636.627464][T27260] __kvmalloc_node_noprof+0x142/0x190 [ 636.627487][T27260] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 636.627515][T27260] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 636.627554][T27260] ? tpg_update_mv_step+0x361/0x4f0 [ 636.627590][T27260] vivid_update_format_cap+0x133c/0x2090 [ 636.627628][T27260] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 636.627665][T27260] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 636.627711][T27260] __video_do_ioctl+0xc23/0xdd0 [ 636.627757][T27260] ? __pfx___video_do_ioctl+0x10/0x10 [ 636.627796][T27260] ? __might_fault+0xc6/0x120 [ 636.627824][T27260] video_usercopy+0x89b/0x1180 [ 636.627866][T27260] ? __pfx___video_do_ioctl+0x10/0x10 [ 636.627900][T27260] ? __pfx_video_usercopy+0x10/0x10 [ 636.627944][T27260] ? __fget_files+0x29/0x470 [ 636.627971][T27260] ? __fget_files+0x3f3/0x470 [ 636.628002][T27260] v4l2_ioctl+0x189/0x1e0 [ 636.628033][T27260] ? __pfx_v4l2_ioctl+0x10/0x10 [ 636.628067][T27260] __se_sys_ioctl+0xf9/0x170 [ 636.628105][T27260] do_syscall_64+0xf3/0x230 [ 636.628129][T27260] ? clear_bhb_loop+0x35/0x90 [ 636.628156][T27260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.628189][T27260] RIP: 0033:0x7f698397dff9 [ 636.628210][T27260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.628229][T27260] RSP: 002b:00007f6984756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.628253][T27260] RAX: ffffffffffffffda RBX: 00007f6983b35f80 RCX: 00007f698397dff9 [ 636.628271][T27260] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 636.628287][T27260] RBP: 00007f69839f0296 R08: 0000000000000000 R09: 0000000000000000 [ 636.628303][T27260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.628319][T27260] R13: 0000000000000000 R14: 00007f6983b35f80 R15: 00007f6983c5fa28 [ 636.628350][T27260] [ 636.628361][T27260] Mem-Info: [ 636.628373][T27260] active_anon:5283 inactive_anon:0 isolated_anon:0 [ 636.628373][T27260] active_file:14311 inactive_file:3123 isolated_file:0 [ 636.628373][T27260] unevictable:768 dirty:347 writeback:0 [ 636.628373][T27260] slab_reclaimable:8804 slab_unreclaimable:106894 [ 636.628373][T27260] mapped:29018 shmem:1271 pagetables:1194 [ 636.628373][T27260] sec_pagetables:0 bounce:0 [ 636.628373][T27260] kernel_misc_reclaimable:0 [ 636.628373][T27260] free:1293532 free_pcp:1101 free_cma:0 [ 636.628430][T27260] Node 0 active_anon:21132kB inactive_anon:0kB active_file:57244kB inactive_file:12480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116072kB dirty:1388kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11116kB pagetables:4776kB sec_pagetables:0kB all_unreclaimable? no [ 636.628485][T27260] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 636.628545][T27260] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.628607][T27260] lowmem_reserve[]: 0 2465 2466 0 0 [ 636.628660][T27260] Node 0 DMA32 free:1237848kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:20944kB inactive_anon:0kB active_file:57104kB inactive_file:11948kB unevictable:1536kB writepending:1388kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:2752kB free_cma:0kB [ 636.628724][T27260] lowmem_reserve[]: 0 0 0 0 0 [ 636.628776][T27260] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:188kB inactive_anon:0kB active_file:140kB inactive_file:532kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 636.628833][T27260] lowmem_reserve[]: 0 0 0 0 0 [ 636.628885][T27260] Node 1 Normal free:3920916kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB [ 636.628947][T27260] lowmem_reserve[]: 0 0 0 0 0 [ 636.628999][T27260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 636.629159][T27260] Node 0 DMA32: 10*4kB (UE) 475*8kB (UME) 503*16kB (ME) 541*32kB (UME) 352*64kB (ME) 58*128kB (UME) 46*256kB (UME) 49*512kB (UME) 15*1024kB (M) 8*2048kB (M) 271*4096kB (UM) = 1237776kB [ 636.629384][T27260] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 636.629519][T27260] Node 1 Normal: 3*4kB (UME) 57*8kB (UME) 38*16kB (UME) 189*32kB (UME) 95*64kB (UME) 25*128kB (UME) 16*256kB (UME) 12*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 947*4096kB (M) = 3920916kB [ 636.629744][T27260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.629782][T27260] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 636.629804][T27260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.629824][T27260] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 636.629845][T27260] 18705 total pagecache pages [ 636.629857][T27260] 0 pages in swap cache [ 636.629868][T27260] Free swap = 124456kB [ 636.629879][T27260] Total swap = 124996kB [ 636.629891][T27260] 2097051 pages RAM [ 636.629902][T27260] 0 pages HighMem/MovableOnly [ 636.629913][T27260] 427076 pages reserved [ 636.629924][T27260] 0 pages cma reserved [ 636.793505][T23999] Bluetooth: hci6: command 0x0c1a tx timeout [ 636.877369][T23999] Bluetooth: hci5: command 0x0419 tx timeout [ 638.662809][T27355] program syz.1.10406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.981466][T23999] Bluetooth: hci5: command 0x0419 tx timeout [ 639.093454][T27366] tipc: Started in network mode [ 639.093478][T27366] tipc: Node identity , cluster identity 4711 [ 639.093498][T27366] tipc: Failed to set node id, please configure manually [ 639.093529][T27366] tipc: Enabling of bearer rejected, failed to enable media [ 639.140794][ T938] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 639.296035][T27370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10410'. [ 639.301189][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 639.306695][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.306734][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.306760][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.306802][ T938] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 639.306830][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.308875][ T938] usb 4-1: config 0 descriptor?? [ 639.731840][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.731884][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.731916][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.731947][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.731977][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.732008][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.732038][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.732068][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.732099][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.732129][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.732158][ T938] ryos 0003:1E7D:31CE.006D: unknown main item tag 0x0 [ 639.735202][ T938] ryos 0003:1E7D:31CE.006D: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 639.932305][ T938] usb 4-1: USB disconnect, device number 21 [ 640.778990][T27397] program syz.3.10418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.253891][T27423] netlink: 'syz.3.10425': attribute type 29 has an invalid length. [ 641.594159][T27442] openvswitch: netlink: Message has 213 unknown bytes. [ 641.611032][T27442] openvswitch: netlink: Actions may not be safe on all matching packets [ 642.664636][T27507] usb usb8: usbfs: process 27507 (syz.4.10462) did not claim interface 0 before use [ 642.862713][T27519] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10467'. [ 643.129540][T27529] netlink: 'syz.0.10472': attribute type 10 has an invalid length. [ 643.194776][T27537] program syz.4.10476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.500905][ T5324] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 643.650688][ T5324] usb 4-1: Using ep0 maxpacket: 16 [ 643.658580][ T5324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.670460][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.682218][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.692534][ T5324] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 643.702570][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.714440][ T5324] usb 4-1: config 0 descriptor?? [ 643.866725][T27563] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 644.149196][ T5324] lenovo 0003:17EF:60EE.006E: hidraw0: USB HID v0.04 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 644.379088][ T5324] lenovo 0003:17EF:60EE.006E: Failed to switch F7/9/11 mode: -71 [ 644.398519][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10497'. [ 644.435992][ T5324] lenovo 0003:17EF:60EE.006E: Failed to switch middle button: -71 [ 644.450392][ T5324] lenovo 0003:17EF:60EE.006E: Fn-lock setting failed: -71 [ 644.470569][ T5324] lenovo 0003:17EF:60EE.006E: Sensitivity setting failed: -71 [ 644.491299][ T5324] usb 4-1: USB disconnect, device number 22 [ 644.990466][ T4649] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 645.161991][ T4649] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.256425][ T4649] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.286995][ T4649] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 645.309897][ T4649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.351597][ T4649] usb 3-1: config 0 descriptor?? [ 645.420658][ T5324] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 645.591258][ T5324] usb 5-1: Using ep0 maxpacket: 32 [ 645.613712][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.636387][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.647401][ T5324] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 645.662206][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.683060][ T5324] usb 5-1: config 0 descriptor?? [ 645.854782][ T4649] wacom 0003:056A:0317.006F: unknown main item tag 0x0 [ 645.863024][ T4649] wacom 0003:056A:0317.006F: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 645.883104][ T4649] wacom 0003:056A:0317.006F: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0 [ 645.896056][ T4649] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.006F/input/input116 [ 645.980291][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 646.077382][ T938] usb 3-1: USB disconnect, device number 14 [ 646.130318][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 646.159618][ T5324] ft260 0003:0403:6030.0070: item fetching failed at offset 0/2 [ 646.175822][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.188995][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.224030][ T5324] ft260 0003:0403:6030.0070: failed to parse HID [ 646.232725][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 646.248381][ T5324] ft260 0003:0403:6030.0070: probe with driver ft260 failed with error -22 [ 646.259566][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 646.269220][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.281408][ T25] usb 2-1: config 0 descriptor?? [ 646.357321][ T5324] usb 5-1: USB disconnect, device number 50 [ 646.718458][ T25] microsoft 0003:045E:07DA.0071: unknown main item tag 0x0 [ 646.727995][ T25] microsoft 0003:045E:07DA.0071: ignoring exceeding usage max [ 646.752995][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0071/input/input119 [ 646.831048][ T25] microsoft 0003:045E:07DA.0071: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 646.945816][ T938] usb 2-1: USB disconnect, device number 29 [ 647.610647][ T5324] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 647.764780][ T5324] usb 5-1: config 0 has no interfaces? [ 647.782256][ T5324] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 647.810382][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.826085][ T5324] usb 5-1: config 0 descriptor?? [ 647.954469][T27680] netlink: 'syz.1.10543': attribute type 5 has an invalid length. [ 648.054187][ T938] usb 5-1: USB disconnect, device number 51 [ 648.835897][T27693] netlink: 'syz.2.10550': attribute type 3 has an invalid length. [ 649.046832][ T1130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.237804][ T1130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.282356][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.292311][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.323067][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.375262][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.387318][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 649.395282][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 649.497473][ T1130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.619282][ T29] audit: type=1326 audit(1729456479.262:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.641977][ T29] audit: type=1326 audit(1729456479.262:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.665936][ T1130] bond0: (slave netdevsim0): Releasing backup interface [ 649.687195][ T29] audit: type=1326 audit(1729456479.332:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.730061][ T29] audit: type=1326 audit(1729456479.332:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.755980][ T1130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.788700][ T29] audit: type=1326 audit(1729456479.332:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.836083][ T29] audit: type=1326 audit(1729456479.362:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.861346][ T29] audit: type=1326 audit(1729456479.362:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 649.884709][ T29] audit: type=1326 audit(1729456479.362:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27712 comm="syz.0.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8597dff9 code=0x7ffc0000 [ 650.015617][T27726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10566'. [ 650.152737][ T938] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 650.266023][ T1130] batadv0: left allmulticast mode [ 650.272797][ T1130] batadv0: left promiscuous mode [ 650.277936][ T1130] bridge0: port 3(batadv0) entered disabled state [ 650.298515][ T1130] bridge_slave_1: left allmulticast mode [ 650.306483][ T1130] bridge_slave_1: left promiscuous mode [ 650.334565][ T938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.337118][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.367964][ T938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 650.389558][ T938] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 650.399245][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.416206][ T938] usb 3-1: config 0 descriptor?? [ 650.424539][ T938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 650.431393][ T938] dvb-usb: bulk message failed: -22 (3/0) [ 650.439198][ T938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 650.448375][ T938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 650.455584][ T1130] bridge_slave_0: left allmulticast mode [ 650.455668][ T1130] bridge_slave_0: left promiscuous mode [ 650.455812][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.478120][ T938] usb 3-1: media controller created [ 650.487552][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.501436][ T938] dvb-usb: bulk message failed: -22 (6/0) [ 650.508145][ T938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 650.525087][ T938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input121 [ 650.540371][ T938] dvb-usb: schedule remote query interval to 150 msecs. [ 650.547626][ T938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 650.684802][ T938] usb 3-1: USB disconnect, device number 15 [ 650.755705][ T938] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 651.358746][ T29] audit: type=1326 audit(1729456481.002:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27756 comm="syz.2.10581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29b57dff9 code=0x7ffc0000 [ 651.418972][ T29] audit: type=1326 audit(1729456481.012:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27756 comm="syz.2.10581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29b57dff9 code=0x7ffc0000 [ 651.442344][T23999] Bluetooth: hci1: command tx timeout [ 651.630095][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.653749][T27767] netlink: 209800 bytes leftover after parsing attributes in process `syz.4.10586'. [ 651.665525][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.701996][ T1130] bond0 (unregistering): Released all slaves [ 651.733298][ T1130] bond1 (unregistering): Released all slaves [ 651.756221][ T1130] bond2 (unregistering): Released all slaves [ 651.824249][T27708] chnl_net:caif_netlink_parms(): no params data found [ 651.923396][ T1130] ɶƣ0GCTw: left promiscuous mode [ 652.095660][ T1130] Êü: left promiscuous mode [ 652.335052][T27708] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.369717][T27708] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.411449][T27708] bridge_slave_0: entered allmulticast mode [ 652.442231][T27708] bridge_slave_0: entered promiscuous mode [ 652.517111][T27708] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.546328][T27708] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.594951][T27708] bridge_slave_1: entered allmulticast mode [ 652.612219][T27708] bridge_slave_1: entered promiscuous mode [ 652.782710][T27708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.884635][T27708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.885635][T27807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.036931][T27708] team0: Port device team_slave_0 added [ 653.095324][T27708] team0: Port device team_slave_1 added [ 653.167057][T27708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.198769][T27708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.260034][T27708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.442277][T27708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.458680][T27708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.486023][T27708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.515089][T23999] Bluetooth: hci1: command tx timeout [ 653.580381][T25253] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 653.595801][T27708] hsr_slave_0: entered promiscuous mode [ 653.617765][T27708] hsr_slave_1: entered promiscuous mode [ 653.635141][T27708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.657556][T27708] Cannot create hsr debugfs directory [ 653.751644][T25253] usb 3-1: Using ep0 maxpacket: 16 [ 653.759941][T25253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.797458][T25253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.807660][T25253] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 653.817053][T25253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.833113][T25253] usb 3-1: config 0 descriptor?? [ 654.097566][ T1130] hsr_slave_1: left promiscuous mode [ 654.140491][ T25] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 654.152166][ T1130] batman_adv: batadv0: Removing interface: team0 [ 654.163208][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.180754][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.206976][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.222022][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.249569][ T1130] veth1_macvtap: left promiscuous mode [ 654.276302][T25253] corsair 0003:1B1C:1B02.0072: unknown main item tag 0x0 [ 654.289399][T25253] corsair 0003:1B1C:1B02.0072: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 654.301109][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 654.308833][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.327702][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.342712][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 654.359308][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.445981][ T25] usb 5-1: config 0 descriptor?? [ 654.479300][T25253] corsair 0003:1B1C:1B02.0072: Failed to get K90 initial state (error -71). [ 654.496690][T25253] usb 3-1: USB disconnect, device number 16 [ 654.947822][ T25] isku 0003:1E7D:319C.0073: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 655.133558][ T25] usb 5-1: USB disconnect, device number 52 [ 655.393177][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 655.506981][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 655.594959][T23999] Bluetooth: hci1: command tx timeout [ 656.592626][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 656.603472][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 656.616012][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 656.632997][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 656.641511][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 656.651026][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 656.992721][T27859] bridge0: entered promiscuous mode [ 657.002134][T27859] bridge0: entered allmulticast mode [ 657.035597][T27859] team0: Port device bridge0 added [ 657.671297][T23999] Bluetooth: hci1: command tx timeout [ 657.867901][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 657.867922][ T29] audit: type=1326 audit(1729456487.512:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 657.935743][ T29] audit: type=1326 audit(1729456487.512:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 657.989811][ T29] audit: type=1326 audit(1729456487.542:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 658.014641][ T29] audit: type=1326 audit(1729456487.542:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 658.039934][ T29] audit: type=1326 audit(1729456487.542:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 658.062744][ T29] audit: type=1326 audit(1729456487.542:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 658.085498][ T29] audit: type=1326 audit(1729456487.542:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6983919959 code=0x7ffc0000 [ 658.108356][ T29] audit: type=1326 audit(1729456487.542:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27902 comm="syz.4.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698397dff9 code=0x7ffc0000 [ 658.318973][T27708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.336184][ T1130] IPVS: stop unused estimator thread 0... [ 658.360092][T27851] chnl_net:caif_netlink_parms(): no params data found [ 658.398872][T27708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 658.432334][T27708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 658.551466][T27708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 658.580464][T27921] tipc: Enabled bearer , priority 10 [ 658.710498][T23999] Bluetooth: hci7: command tx timeout [ 658.782093][T27851] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.821030][T27851] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.821265][T27851] bridge_slave_0: entered allmulticast mode [ 658.822477][T27851] bridge_slave_0: entered promiscuous mode [ 658.880934][T27851] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.881022][T27851] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.881220][T27851] bridge_slave_1: entered allmulticast mode [ 658.882310][T27851] bridge_slave_1: entered promiscuous mode [ 659.081254][T27851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.129923][T27851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.304554][T27851] team0: Port device team_slave_0 added [ 659.342616][T27851] team0: Port device team_slave_1 added [ 659.436768][T27708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.522096][T27851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.540237][T27851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.660389][T27851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.690337][ T5324] tipc: Node number set to 2886997034 [ 659.718079][T27851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.741416][T27851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.769092][T27851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.788273][T27708] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.849871][T27058] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.857070][T27058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.002141][T27851] hsr_slave_0: entered promiscuous mode [ 660.022111][T27851] hsr_slave_1: entered promiscuous mode [ 660.040062][T27851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.066236][T27851] Cannot create hsr debugfs directory [ 660.122526][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.129708][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.604083][T27851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.731591][T27708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.790846][T23999] Bluetooth: hci7: command tx timeout [ 660.855763][T27851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.919696][T27995] sock: sock_set_timeout: `syz.2.10656' (pid 27995) tries to set negative timeout [ 660.958929][T27851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.171575][T27851] bond0: (slave netdevsim0): Releasing backup interface [ 661.218770][T28005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10659'. [ 661.220901][T27851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.288069][T27708] veth0_vlan: entered promiscuous mode [ 661.309022][T27708] veth1_vlan: entered promiscuous mode [ 661.423364][T27708] veth0_macvtap: entered promiscuous mode [ 661.574264][T27708] veth1_macvtap: entered promiscuous mode [ 661.627802][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.651264][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.672944][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.688237][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.698678][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.710710][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.721027][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.731817][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.741729][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.753980][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.768102][T27708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.783508][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.795625][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.820198][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.840315][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.851005][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.861613][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.872609][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.883191][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.894399][T27708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.906074][T27708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.925511][T27708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.956877][T27708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.965851][T27708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.977060][T27708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.986028][T27708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.067391][T27851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 662.100003][T27851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 662.112603][T27851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 662.124788][T27851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 662.259201][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.308227][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.379399][ T2528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.402971][ T2528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.439655][T27851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.605852][T27851] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.655172][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.662379][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.694192][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.701427][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.746339][T28040] bridge_slave_0: left allmulticast mode [ 662.778579][T28040] bridge_slave_0: left promiscuous mode [ 662.787786][T28040] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.852151][T28040] bridge_slave_1: left allmulticast mode [ 662.857895][T28040] bridge_slave_1: left promiscuous mode [ 662.865267][T28040] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.872933][T23999] Bluetooth: hci7: command tx timeout [ 662.908199][T28040] bond0: (slave bond_slave_0): Releasing backup interface [ 662.926714][T28040] bond0: (slave bond_slave_1): Releasing backup interface [ 662.994425][T28040] team0: Port device team_slave_0 removed [ 663.048629][T28040] team0: Port device team_slave_1 removed [ 663.058769][T28040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.072077][T28040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.116004][T28040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.155511][T28040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.272028][T28043] netlink: 'syz.1.10553': attribute type 10 has an invalid length. [ 663.305039][T28043] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10553'. [ 663.320563][T28043] team0: entered promiscuous mode [ 663.325925][T28043] bridge0: port 1(team0) entered blocking state [ 663.350773][T28043] bridge0: port 1(team0) entered disabled state [ 663.357408][T28043] team0: entered allmulticast mode [ 663.397559][T28043] bridge0: port 1(team0) entered blocking state [ 663.404022][T28043] bridge0: port 1(team0) entered forwarding state [ 663.521279][ T2528] bridge0: port 1(team0) entered disabled state [ 663.638560][T27851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.737176][T27851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.821270][T27851] veth0_vlan: entered promiscuous mode [ 663.873339][T27851] veth1_vlan: entered promiscuous mode [ 663.949856][T27851] veth0_macvtap: entered promiscuous mode [ 663.962860][T27851] veth1_macvtap: entered promiscuous mode [ 663.978604][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.989215][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.999185][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.010245][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.020931][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.032465][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.042696][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.053557][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.064431][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.075780][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.088033][T27851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.098107][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.108775][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.119084][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.130235][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.140321][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.151512][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.161635][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.172337][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.182724][T27851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.193397][T27851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.204591][T27851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.247423][T27851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.256786][T27851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.265601][T27851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.280278][T27851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.497907][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.507421][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.540495][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.548074][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.952357][T23999] Bluetooth: hci7: command tx timeout [ 665.126692][T28021] warn_alloc: 3 callbacks suppressed [ 665.126715][T28021] syz.2.10660: vmalloc error: size 3268608, failed to allocated page array size 6384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 665.163326][T28021] CPU: 0 UID: 0 PID: 28021 Comm: syz.2.10660 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 665.174236][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.184418][T28021] Call Trace: [ 665.187708][T28021] [ 665.190654][T28021] dump_stack_lvl+0x241/0x360 [ 665.195350][T28021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.200557][T28021] ? __pfx__printk+0x10/0x10 [ 665.205157][T28021] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 665.211585][T28021] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 665.218096][T28021] warn_alloc+0x278/0x410 [ 665.222441][T28021] ? __pfx_warn_alloc+0x10/0x10 [ 665.227318][T28021] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 665.233493][T28021] ? __get_vm_area_node+0x23d/0x270 [ 665.238716][T28021] __vmalloc_node_range_noprof+0x691/0x13f0 [ 665.244633][T28021] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 665.250624][T28021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 665.256955][T28021] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 665.263121][T28021] ? __get_vm_area_node+0x23d/0x270 [ 665.268342][T28021] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 665.274252][T28021] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 665.280431][T28021] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 665.286186][T28021] ? rcu_is_watching+0x15/0xb0 [ 665.290958][T28021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 665.297290][T28021] ? rcu_is_watching+0x15/0xb0 [ 665.302076][T28021] ? trace_kmalloc+0x1f/0xd0 [ 665.306706][T28021] ? __kmalloc_node_noprof+0x247/0x440 [ 665.312195][T28021] ? __kvmalloc_node_noprof+0x72/0x190 [ 665.317679][T28021] __kvmalloc_node_noprof+0x142/0x190 [ 665.323084][T28021] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 665.329267][T28021] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 665.335274][T28021] ? tpg_update_mv_step+0x361/0x4f0 [ 665.340500][T28021] vivid_update_format_cap+0x133c/0x2090 [ 665.346173][T28021] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 665.352180][T28021] ? __pfx___mutex_lock+0x10/0x10 [ 665.357232][T28021] vidioc_s_input+0x374/0x1560 [ 665.362018][T28021] ? video_devdata+0x6b/0xc0 [ 665.366626][T28021] __video_do_ioctl+0xc23/0xdd0 [ 665.371507][T28021] ? __pfx___video_do_ioctl+0x10/0x10 [ 665.376918][T28021] ? __might_fault+0xc6/0x120 [ 665.381625][T28021] video_usercopy+0x89b/0x1180 [ 665.386413][T28021] ? __pfx___video_do_ioctl+0x10/0x10 [ 665.391804][T28021] ? __pfx_video_usercopy+0x10/0x10 [ 665.397030][T28021] ? __fget_files+0x29/0x470 [ 665.401632][T28021] ? __fget_files+0x3f3/0x470 [ 665.406322][T28021] v4l2_ioctl+0x189/0x1e0 [ 665.410668][T28021] ? __pfx_v4l2_ioctl+0x10/0x10 [ 665.415538][T28021] __se_sys_ioctl+0xf9/0x170 [ 665.420146][T28021] do_syscall_64+0xf3/0x230 [ 665.424672][T28021] ? clear_bhb_loop+0x35/0x90 [ 665.429372][T28021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.435282][T28021] RIP: 0033:0x7fb29b57dff9 [ 665.439707][T28021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.459325][T28021] RSP: 002b:00007fb29c3eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.467753][T28021] RAX: ffffffffffffffda RBX: 00007fb29b735f80 RCX: 00007fb29b57dff9 [ 665.475728][T28021] RDX: 0000000020000100 RSI: 00000000c0045627 RDI: 0000000000000003 [ 665.483709][T28021] RBP: 00007fb29b5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 665.491714][T28021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.499688][T28021] R13: 0000000000000000 R14: 00007fb29b735f80 R15: 00007fb29b85fa28 [ 665.507686][T28021] [ 665.526785][T28021] Mem-Info: [ 665.530037][T28021] active_anon:5218 inactive_anon:0 isolated_anon:0 [ 665.530037][T28021] active_file:14328 inactive_file:3143 isolated_file:0 [ 665.530037][T28021] unevictable:768 dirty:337 writeback:0 [ 665.530037][T28021] slab_reclaimable:8515 slab_unreclaimable:109411 [ 665.530037][T28021] mapped:32599 shmem:1251 pagetables:1086 [ 665.530037][T28021] sec_pagetables:0 bounce:0 [ 665.530037][T28021] kernel_misc_reclaimable:0 [ 665.530037][T28021] free:1287452 free_pcp:1754 free_cma:0 [ 665.578581][T28021] Node 0 active_anon:20872kB inactive_anon:0kB active_file:57312kB inactive_file:12560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130396kB dirty:1348kB writeback:0kB shmem:3468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no [ 665.614064][T28021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 665.663979][T28021] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.720389][T28021] lowmem_reserve[]: 0 2465 2466 0 0 [ 665.729075][T28021] Node 0 DMA32 free:1212636kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:20804kB inactive_anon:0kB active_file:57172kB inactive_file:12024kB unevictable:1536kB writepending:1348kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:7620kB local_pcp:1220kB free_cma:0kB [ 665.762132][T28021] lowmem_reserve[]: 0 0 0 0 0 [ 665.768342][T28021] Node 0 Normal free:12kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:188kB inactive_anon:0kB active_file:140kB inactive_file:536kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 665.797655][T28021] lowmem_reserve[]: 0 0 0 0 0 [ 665.803921][T28021] Node 1 Normal free:3920768kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 665.835125][T28021] lowmem_reserve[]: 0 0 0 0 0 [ 665.840964][T28021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 665.855028][T28021] Node 0 DMA32: 11*4kB (ME) 524*8kB (UME) 291*16kB (UME) 523*32kB (ME) 355*64kB (ME) 58*128kB (ME) 45*256kB (ME) 49*512kB (UME) 16*1024kB (UM) 15*2048kB (UM) 262*4096kB (UM) = 1212636kB [ 665.875721][T28021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 665.887409][T28021] Node 1 Normal: 2*4kB (ME) 39*8kB (UME) 38*16kB (UME) 189*32kB (UME) 95*64kB (UME) 25*128kB (UME) 16*256kB (UME) 12*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 947*4096kB (M) = 3920768kB [ 665.906992][T28021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.918242][T28021] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 665.933692][T28021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.945049][T28021] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 665.956240][T28021] 18722 total pagecache pages [ 665.961956][T28021] 0 pages in swap cache [ 665.967019][T28021] Free swap = 124516kB [ 665.972302][T28021] Total swap = 124996kB [ 665.977394][T28021] 2097051 pages RAM [ 665.982411][T28021] 0 pages HighMem/MovableOnly [ 665.987136][T28021] 427076 pages reserved [ 665.991733][T28021] 0 pages cma reserved [ 666.499434][T28109] tipc: Enabling of bearer rejected, failed to enable media [ 666.670378][ T4649] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 666.832243][ T4649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.844592][ T4649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.854857][ T4649] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.868479][ T4649] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 666.879290][ T4649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.910490][ T4649] usb 4-1: config 0 descriptor?? [ 667.331962][ T4649] uclogic 0003:28BD:0055.0074: interface is invalid, ignoring [ 667.552544][ T5324] usb 4-1: USB disconnect, device number 23 [ 667.650430][ T4649] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 667.813874][ T4649] usb 2-1: Using ep0 maxpacket: 16 [ 667.842863][ T4649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.882899][ T4649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.931584][ T4649] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.987878][ T4649] usb 2-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 668.021913][ T4649] usb 2-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 668.064428][ T4649] usb 2-1: Manufacturer: syz [ 668.091731][ T4649] usb 2-1: config 0 descriptor?? [ 668.555792][ T4649] wacom 0003:056A:2A22.0075: Unknown device_type for 'syz'. Ignoring. [ 668.755574][ T4649] usb 2-1: USB disconnect, device number 30 [ 668.855506][T28166] openvswitch: netlink: Actions may not be safe on all matching packets [ 668.969383][T28169] tipc: Invalid UDP bearer configuration [ 668.969432][T28169] tipc: Enabling of bearer rejected, failed to enable media [ 669.180497][ T5324] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 669.362248][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.430035][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.498742][ T5324] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 669.563664][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.631417][ T5324] usb 5-1: config 0 descriptor?? [ 670.058393][ T5324] a4tech 0003:09DA:022B.0076: unknown main item tag 0x0 [ 670.076549][ T5324] a4tech 0003:09DA:022B.0076: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.4-1/input0 [ 670.283584][T25253] usb 5-1: USB disconnect, device number 53 [ 670.781292][T28214] netlink: 'syz.1.10743': attribute type 1 has an invalid length. [ 670.860311][T25253] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 671.026898][T28225] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 671.115269][T25253] usb 4-1: Using ep0 maxpacket: 16 [ 671.128559][T28230] netlink: 'syz.4.10750': attribute type 3 has an invalid length. [ 671.176919][T25253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.188785][T25253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.199324][T25253] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.212531][T25253] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 671.221933][T25253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.237916][T25253] usb 4-1: config 0 descriptor?? [ 671.406356][T28241] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10756'. [ 671.418448][T28241] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 671.689028][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x2 [ 671.699081][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.712737][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.720775][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.728542][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.737763][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.746800][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.757026][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.766276][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.775103][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.784566][T25253] hid-multitouch 0003:045E:9994.0077: unknown main item tag 0x0 [ 671.794336][T25253] hid-multitouch 0003:045E:9994.0077: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.3-1/input0 [ 671.987829][T25253] usb 4-1: USB disconnect, device number 24 [ 672.730293][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 672.900628][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 672.915404][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.927565][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.937569][ T8] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 672.963966][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.994911][ T8] usb 2-1: config 0 descriptor?? [ 673.432127][ T8] bigben 0003:146B:0902.0078: unexpected rdesc, please submit for review [ 673.452887][ T8] bigben 0003:146B:0902.0078: unknown main item tag 0x2 [ 673.537004][ T8] bigben 0003:146B:0902.0078: unbalanced collection at end of report description [ 673.582126][ T8] bigben 0003:146B:0902.0078: parse failed [ 673.588065][ T8] bigben 0003:146B:0902.0078: probe with driver bigben failed with error -22 [ 673.637986][ T8] usb 2-1: USB disconnect, device number 31 [ 673.898813][ C1] sd 0:0:1:0: [sda] tag#5892 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 673.909328][ C1] sd 0:0:1:0: [sda] tag#5892 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 674.270258][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10802'. [ 674.607438][T28348] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 674.866753][T28358] trusted_key: encrypted_key: keyword 'A§date' not recognized [ 675.080615][ T4649] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 675.272469][ T4649] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 675.285212][ T4649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.296849][ T4649] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.307208][ T4649] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 675.320961][ T4649] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 675.334860][ T4649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.347560][ T4649] usb 4-1: config 0 descriptor?? [ 675.570661][ T5324] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 675.722495][ T5324] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 675.752230][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.781073][ T4649] nintendo 0003:057E:2009.0079: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0 [ 675.812720][ T5324] usb 5-1: config 0 descriptor?? [ 675.822468][ T5324] cp210x 5-1:0.0: cp210x converter detected [ 675.853098][ T4649] nintendo 0003:057E:2009.0079: Failed to get joycon info; ret=-38 [ 675.873401][ T4649] nintendo 0003:057E:2009.0079: Failed to retrieve controller info; ret=-38 [ 675.921671][ T4649] nintendo 0003:057E:2009.0079: Failed to initialize controller; ret=-38 [ 676.028421][ T4649] nintendo 0003:057E:2009.0079: probe - fail = -38 [ 676.041747][ T4649] nintendo 0003:057E:2009.0079: probe with driver nintendo failed with error -38 [ 676.054673][ T4649] usb 4-1: USB disconnect, device number 25 [ 676.467188][ T5324] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 676.475229][ T5324] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 676.488391][ T5324] usb 5-1: cp210x converter now attached to ttyUSB0 [ 676.512032][ T5324] usb 5-1: USB disconnect, device number 54 [ 676.520699][ T5324] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 676.528800][ T5324] cp210x 5-1:0.0: device disconnected [ 676.728847][T28410] ebt_limit: overflow, try lower: 570423552/2483027968 [ 677.427412][T28436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10846'. [ 677.448036][T25253] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 677.633266][T25253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.665214][T25253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.712263][T25253] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 677.766356][T25253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.779591][T25253] usb 2-1: config 0 descriptor?? [ 677.905563][T28456] overlayfs: missing 'lowerdir' [ 678.252407][T25253] glorious 0003:22D4:1503.007A: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 678.494923][T25253] usb 2-1: USB disconnect, device number 32 [ 680.469850][T28520] tap0: tun_chr_ioctl cmd 1074025676 [ 680.519963][T28520] tap0: owner set to 0 [ 680.798088][T28530] netlink: 'syz.3.10888': attribute type 9 has an invalid length. [ 680.807176][T28530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10888'. [ 681.127584][ T1096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.611997][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 681.623797][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 681.635075][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 681.645263][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 681.654488][ T1096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.697490][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 681.712009][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 682.107235][ T1096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.325560][ T1096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.897378][T28562] chnl_net:caif_netlink_parms(): no params data found [ 682.946951][ T1096] team0: left allmulticast mode [ 682.962275][ T1096] bridge0: port 1(team0) entered disabled state [ 683.830305][T23999] Bluetooth: hci1: command tx timeout [ 684.101441][ T1096] bond0 (unregistering): Released all slaves [ 684.261693][ T1096] IPVS: stopping master sync thread 28348 ... [ 684.936012][T28645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.010308][T28562] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.017470][T28562] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.035443][T28562] bridge_slave_0: entered allmulticast mode [ 685.051111][T28562] bridge_slave_0: entered promiscuous mode [ 685.058011][T28642] netlink: 'syz.2.10924': attribute type 2 has an invalid length. [ 685.231688][ T1096] hsr_slave_0: left promiscuous mode [ 685.301737][ T1096] hsr_slave_1: left promiscuous mode [ 685.355487][ T1096] veth1_macvtap: left promiscuous mode [ 685.369326][ T1096] veth0_macvtap: left promiscuous mode [ 685.383773][ T1096] veth1_vlan: left promiscuous mode [ 685.397079][ T1096] veth0_vlan: left promiscuous mode [ 685.910991][T23999] Bluetooth: hci1: command tx timeout [ 685.999242][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.006999][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.498986][T28562] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.506327][T28562] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.545052][T28562] bridge_slave_1: entered allmulticast mode [ 687.569596][T28562] bridge_slave_1: entered promiscuous mode [ 687.596845][T28657] lo: Caught tx_queue_len zero misconfig [ 687.640757][T28661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10931'. [ 687.974101][T28562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.990796][T23999] Bluetooth: hci1: command tx timeout [ 688.040802][T28682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10940'. [ 688.122993][T28562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.190342][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 688.199261][ T938] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 688.304992][T28562] team0: Port device team_slave_0 added [ 688.350649][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 688.366520][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 688.384497][T28562] team0: Port device team_slave_1 added [ 688.390895][ T46] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 688.399977][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.410937][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 688.412632][ T46] usb 3-1: config 0 descriptor?? [ 688.441866][ T46] ttusb_dec_send_command: command bulk message failed: error -22 [ 688.447285][ T938] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.450912][ T46] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22 [ 688.488633][ T938] usb 5-1: config 0 has no interface number 0 [ 688.543727][ T938] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 688.632820][ T938] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 688.645275][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.653157][T28562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.662681][ T938] usb 5-1: config 0 descriptor?? [ 688.668539][T28697] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 688.675844][T28562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.711445][T28562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.715565][ T938] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 688.725160][T28562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.739951][T28562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.766362][T28562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.875204][T28562] hsr_slave_0: entered promiscuous mode [ 688.897981][ T4649] usb 3-1: USB disconnect, device number 17 [ 688.938545][ T46] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 688.949437][T28562] hsr_slave_1: entered promiscuous mode [ 688.963368][ T938] usb 5-1: USB disconnect, device number 55 [ 688.973607][T28562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.974321][ T938] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 688.992736][T28562] Cannot create hsr debugfs directory [ 689.090619][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 689.097760][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.124543][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 689.136620][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 689.147746][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 689.176653][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.191794][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 689.206616][ T46] usb 4-1: SerialNumber: syz [ 689.220103][T28695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 689.231731][T28695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 689.243768][ T46] hub 4-1:1.0: bad descriptor, ignoring hub [ 689.249741][ T46] hub 4-1:1.0: probe with driver hub failed with error -5 [ 689.461550][T28695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 689.468948][T28695] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 689.841945][T28723] netlink: 'syz.4.10954': attribute type 23 has an invalid length. [ 689.857379][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10954'. [ 689.868090][T28723] bridge0: left allmulticast mode [ 689.999838][ T46] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 690.000714][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 690.041152][ T29] audit: type=1326 audit(1729456519.682:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28731 comm="syz.4.10958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f698397dff9 code=0x0 [ 690.076046][T23999] Bluetooth: hci1: command tx timeout [ 690.156767][T28562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 690.186000][T28562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 690.196703][T28562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 690.215332][T28562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 690.222006][ T46] usb 4-1: USB disconnect, device number 26 [ 690.222605][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 690.231389][ T46] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 690.247156][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.262142][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.272970][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.292329][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 690.319173][ T8] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 690.341271][ T8] usb 3-1: Product: syz [ 690.345521][ T8] usb 3-1: Manufacturer: syz [ 690.363296][ T8] usb 3-1: SerialNumber: syz [ 690.382303][ T8] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input126 [ 690.541595][T28562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.611710][T28562] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.678457][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.685657][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.746538][ T5294] usb 3-1: USB disconnect, device number 18 [ 690.787055][ T2565] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.794271][ T2565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.813144][ T5294] appletouch 3-1:1.0: input: appletouch disconnected [ 691.093683][T28562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.138381][T28562] veth0_vlan: entered promiscuous mode [ 691.149683][T28562] veth1_vlan: entered promiscuous mode [ 691.185138][T28562] veth0_macvtap: entered promiscuous mode [ 691.246642][T28562] veth1_macvtap: entered promiscuous mode [ 691.308054][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.319952][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.332567][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.343657][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.354969][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.474248][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.535527][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.572121][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.597949][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.694066][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.718121][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.728896][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.741230][T28562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.759721][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.785434][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.826639][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.837345][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.847380][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.858460][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.871516][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.884547][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.896063][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.907687][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.919759][T28562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.931566][T28562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.945671][T28562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.010634][T28562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.019401][T28562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.081522][T28562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.090775][T28562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.444758][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.454530][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.535598][T28791] netlink: 'syz.3.10973': attribute type 1 has an invalid length. [ 692.562906][T28793] team0: Caught tx_queue_len zero misconfig [ 692.778644][ T2528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.822598][ T2528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.976548][T28802] team_slave_0: Caught tx_queue_len zero misconfig [ 693.321078][T28814] netlink: 428 bytes leftover after parsing attributes in process `syz.4.10979'. [ 693.397764][T28814] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10979'. [ 693.820525][T28831] input: syz1 as /devices/virtual/input/input127 [ 693.930446][T28839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10986'. [ 695.258504][T28894] netem: unknown loss type 0 [ 695.264584][T28894] netem: change failed [ 696.921019][ T938] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 697.104738][ T938] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 697.120613][ T938] usb 5-1: config 0 has no interfaces? [ 697.129519][ T938] usb 5-1: config 0 has no interfaces? [ 697.138302][ T938] usb 5-1: config 0 has no interfaces? [ 697.190987][ T938] usb 5-1: config 0 has no interfaces? [ 697.215952][ T938] usb 5-1: config 0 has no interfaces? [ 697.228976][ T938] usb 5-1: config 0 has no interfaces? [ 697.253095][ T938] usb 5-1: config 0 has no interfaces? [ 697.281034][ T938] usb 5-1: config 0 has no interfaces? [ 697.286579][ T938] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 697.317238][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.331794][ T938] usb 5-1: config 0 descriptor?? [ 697.556111][ T5294] usb 5-1: USB disconnect, device number 56 [ 697.977534][T28971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11031'. [ 697.991173][T28971] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11031'. [ 698.407658][T28992] binder: 28991:28992 ioctl c0306201 20000480 returned -22 [ 698.548106][T28998] lo: entered allmulticast mode [ 698.577214][T28998] tunl0: entered allmulticast mode [ 698.639678][T28998] gre0: entered allmulticast mode [ 698.690295][ T5324] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 698.708856][T28998] gretap0: left promiscuous mode [ 698.737357][T28998] gretap0: entered allmulticast mode [ 698.801115][T28998] erspan0: entered allmulticast mode [ 698.862660][T28998] ip_vti0: entered allmulticast mode [ 698.882548][ T5324] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 698.905560][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 698.922518][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 698.934869][T28998] ip6_vti0: entered allmulticast mode [ 698.948813][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 698.956989][T28998] sit0: entered allmulticast mode [ 698.966288][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 698.977766][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 698.995217][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.003504][T28998] ip6tnl0: entered allmulticast mode [ 699.024049][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.034399][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.046508][T28998] ip6gre0: entered allmulticast mode [ 699.059560][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.069634][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.083447][T28998] bridge0: port 1(syz_tun) entered disabled state [ 699.094466][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.106692][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.122327][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.132263][T28998] ip6gretap0: entered allmulticast mode [ 699.137909][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.154292][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.162571][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.172442][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.184279][T28998] bridge0: port 2(veth0_to_bridge) entered disabled state [ 699.203997][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.212600][T28998] bridge0: entered allmulticast mode [ 699.221154][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.231464][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.246558][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.254793][T28998] vcan0: entered allmulticast mode [ 699.256256][ T5324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 699.271223][ T5324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 699.283279][ T5324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 699.292580][ T5324] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 699.303388][ T5324] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 699.312276][ T5324] usb 3-1: Product: syz [ 699.312404][T28998] bond0: entered allmulticast mode [ 699.316641][ T5324] usb 3-1: Manufacturer: syz [ 699.326948][ T5324] usb 3-1: SerialNumber: syz [ 699.337787][ T5324] usb 3-1: config 0 descriptor?? [ 699.368775][ T5324] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 699.437311][T28998] team0: entered allmulticast mode [ 699.560921][T28998] dummy0: entered allmulticast mode [ 699.630594][T28998] nlmon0: entered allmulticast mode [ 699.652102][T28998] caif0: entered allmulticast mode [ 699.681902][T28998] vxcan0: entered allmulticast mode [ 699.724171][T28998] vxcan1: entered allmulticast mode [ 699.768900][T28998] veth0: entered allmulticast mode [ 699.791281][ T5324] usb 3-1: USB disconnect, device number 19 [ 699.802818][T28998] veth1: entered allmulticast mode [ 699.825820][ T5324] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 699.899368][T28998] wg0: entered allmulticast mode [ 699.970024][T28998] wg1: entered allmulticast mode [ 700.085221][T28998] wg2: entered allmulticast mode [ 700.117894][T28998] bridge_slave_0: entered allmulticast mode [ 700.146731][T28998] veth1_to_bridge: entered allmulticast mode [ 700.161430][T28998] bridge_slave_1: entered allmulticast mode [ 700.188347][T28998] veth0_to_bond: entered allmulticast mode [ 700.220606][T28998] bond_slave_0: entered allmulticast mode [ 700.264223][T28998] veth1_to_bond: entered allmulticast mode [ 700.285858][T28998] bond_slave_1: entered allmulticast mode [ 700.303435][T28998] veth0_to_team: entered allmulticast mode [ 700.339121][T28998] team_slave_0: entered allmulticast mode [ 700.361642][T28998] veth1_to_team: entered allmulticast mode [ 700.441437][T28998] team_slave_1: entered allmulticast mode [ 700.454761][T28998] veth0_to_batadv: entered allmulticast mode [ 700.465320][T28998] batadv_slave_0: entered allmulticast mode [ 700.507509][T28998] veth1_to_batadv: entered allmulticast mode [ 700.519118][T28998] batadv_slave_1: entered allmulticast mode [ 700.557445][T28998] xfrm0: entered allmulticast mode [ 700.631368][T28998] veth0_to_hsr: entered allmulticast mode [ 700.643302][T28998] hsr_slave_0: entered allmulticast mode [ 700.664911][T28998] veth1_to_hsr: entered allmulticast mode [ 700.687043][T28998] hsr_slave_1: entered allmulticast mode [ 700.703612][T28998] hsr0: left promiscuous mode [ 700.708921][T28998] hsr0: entered allmulticast mode [ 700.742363][T28998] veth1_virt_wifi: entered allmulticast mode [ 700.789501][T28998] veth0_virt_wifi: entered allmulticast mode [ 700.811457][T28998] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 700.856565][T28998] geneve0: entered allmulticast mode [ 700.893584][T28998] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.917540][T28998] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.939410][T28998] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.972375][T28998] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.018005][T28998] geneve1: entered allmulticast mode [ 701.052992][T28998] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 701.072587][T28998] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 701.108591][T28998] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 701.139085][T28998] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 701.199549][T28998] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 701.218862][T28998] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 701.230637][T28998] bond1: entered allmulticast mode [ 701.238667][T28998] bridge1: entered allmulticast mode [ 701.256352][T28998] bridge2: entered allmulticast mode [ 701.287749][T28998] erspan1: entered allmulticast mode [ 701.306320][T28998] gretap1: entered allmulticast mode [ 701.315023][T28998] ip6gre1: entered allmulticast mode [ 701.383537][T28998] ip6erspan0: entered allmulticast mode [ 701.389379][T28998] bridge3: left promiscuous mode [ 701.395939][T28998] veth2: entered allmulticast mode [ 701.401998][T28998] veth3: entered allmulticast mode [ 701.407352][T28998] bond2: entered allmulticast mode [ 701.413982][T28998] veth4: entered allmulticast mode [ 701.419240][T28998] veth5: entered allmulticast mode [ 701.431116][T28998] gre1: entered allmulticast mode [ 701.442269][T28998] bridge4: entered allmulticast mode [ 701.447942][T28998] ip6erspan1: entered allmulticast mode [ 701.457230][T28998] sit1: entered allmulticast mode [ 701.483776][T28998] veth6: entered allmulticast mode [ 701.498708][T28998] veth7: entered allmulticast mode [ 701.531019][T28998] ip6gre2: entered allmulticast mode [ 701.537369][T28998] bond3: entered allmulticast mode [ 701.543838][T28998] ip6tnl1: entered allmulticast mode [ 701.552044][T28998] macsec0: entered allmulticast mode [ 701.559605][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11061'. [ 701.578771][T29035] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 702.050475][T29075] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.145854][T29083] netlink: 'syz.0.11084': attribute type 10 has an invalid length. [ 702.154715][T29083] team0: left allmulticast mode [ 702.170867][T29083] netlink: 'syz.0.11084': attribute type 10 has an invalid length. [ 702.178845][T29083] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11084'. [ 702.197510][T29079] openvswitch: netlink: Actions may not be safe on all matching packets [ 702.256588][T29083] team0: entered promiscuous mode [ 702.280297][T29083] bond0: entered promiscuous mode [ 702.293056][T29083] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.300443][T29083] bridge0: port 3(team0) entered blocking state [ 702.307192][T29083] bridge0: port 3(team0) entered disabled state [ 702.317191][T29083] team0: entered allmulticast mode [ 704.540384][ T4649] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 704.646603][T29209] netlink: 216 bytes leftover after parsing attributes in process `syz.4.11140'. [ 704.705019][ T4649] usb 2-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 704.718530][ T4649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.767930][ T4649] usb 2-1: Product: syz [ 704.786590][ T4649] usb 2-1: Manufacturer: syz [ 704.797637][ T4649] usb 2-1: SerialNumber: syz [ 704.821591][ T4649] usb 2-1: config 0 descriptor?? [ 705.048341][ T46] usb 2-1: USB disconnect, device number 33 [ 705.470508][ T5308] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 705.511970][ T5294] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 705.640438][ T5308] usb 5-1: Using ep0 maxpacket: 32 [ 705.669540][ T5308] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 705.690258][ T5294] usb 3-1: Using ep0 maxpacket: 32 [ 705.702968][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.711317][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.727191][ T5308] usb 5-1: Product: syz [ 705.732480][ T5308] usb 5-1: Manufacturer: syz [ 705.738499][ T5308] usb 5-1: SerialNumber: syz [ 705.748152][ T5308] usb 5-1: config 0 descriptor?? [ 705.761023][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.792477][ T5294] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 705.835332][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.856318][ T5294] usb 3-1: config 0 descriptor?? [ 705.873099][ T5294] hub 3-1:0.0: USB hub found [ 706.114947][ T5294] hub 3-1:0.0: 1 port detected [ 706.315858][ T5294] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 706.322315][ T5294] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 706.356174][ T5294] usbhid 3-1:0.0: can't add hid device: -71 [ 706.365625][ T5294] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 706.382912][ T5308] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 706.405578][ T5308] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 706.413688][ T5308] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 706.425947][ T5294] usb 3-1: USB disconnect, device number 20 [ 706.532975][ T5308] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 706.596734][ T8] usb 5-1: USB disconnect, device number 57 [ 707.307918][ T2528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.528669][ T2528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.621356][T29262] tap0: tun_chr_ioctl cmd 1074025677 [ 707.627788][T29262] tap0: linktype set to 1 [ 707.826189][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 707.841143][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 707.851404][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 707.863293][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 707.874712][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 707.878723][ T2528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.896451][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.034813][T29272] misc userio: Can't change port type on an already running userio instance [ 708.119104][ T2528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.564457][ T2528] bridge_slave_1: left allmulticast mode [ 708.571057][ T2528] bridge_slave_1: left promiscuous mode [ 708.576909][ T2528] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.627014][ T2528] bridge_slave_0: left allmulticast mode [ 708.677156][ T2528] bridge_slave_0: left promiscuous mode [ 708.706827][ T2528] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.529475][ T2528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.543772][ T2528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.556973][ T2528] bond0 (unregistering): Released all slaves [ 709.857935][T29270] chnl_net:caif_netlink_parms(): no params data found [ 709.990490][T23999] Bluetooth: hci1: command tx timeout [ 710.063968][T29315] hub 9-0:1.0: USB hub found [ 710.073069][T29315] hub 9-0:1.0: 8 ports detected [ 710.899192][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.911540][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.941416][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.949922][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.960461][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 710.969000][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 711.001410][ T2528] hsr_slave_0: left promiscuous mode [ 711.086790][ T2528] hsr_slave_1: left promiscuous mode [ 711.122803][ T2528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.150429][ T2528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.222542][ T2528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.229995][ T2528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.311505][ T2528] veth1_macvtap: left promiscuous mode [ 711.348727][ T2528] veth0_macvtap: left promiscuous mode [ 711.364790][ T2528] veth1_vlan: left promiscuous mode [ 711.380127][ T2528] veth0_vlan: left promiscuous mode [ 712.080684][T23999] Bluetooth: hci1: command tx timeout [ 712.196821][ T2528] team0 (unregistering): Port device team_slave_1 removed [ 712.286772][ T2528] team0 (unregistering): Port device team_slave_0 removed [ 713.032646][T23999] Bluetooth: hci5: command tx timeout [ 713.123829][T29343] mac80211_hwsim hwsim9 wlan0: Caught tx_queue_len zero misconfig [ 713.168094][T29358] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 713.333686][T29270] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.374700][T29270] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.404408][T29270] bridge_slave_0: entered allmulticast mode [ 713.413226][T29270] bridge_slave_0: entered promiscuous mode [ 713.423242][T29270] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.430960][T29270] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.438154][T29270] bridge_slave_1: entered allmulticast mode [ 713.445005][T29270] bridge_slave_1: entered promiscuous mode [ 713.557777][T29270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.625427][T29270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.893188][T29270] team0: Port device team_slave_0 added [ 713.971720][T29270] team0: Port device team_slave_1 added [ 714.148902][T29382] netlink: 'syz.3.11203': attribute type 23 has an invalid length. [ 714.158703][T23999] Bluetooth: hci1: command tx timeout [ 714.173897][T29382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11203'. [ 714.201021][T29382] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.234783][T29382] bridge0: entered promiscuous mode [ 714.277474][T29270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.297207][T29270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.344490][T29270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.359242][T29270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.373087][T29270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.403571][T29270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.592493][T29270] hsr_slave_0: entered promiscuous mode [ 714.599863][T29270] hsr_slave_1: entered promiscuous mode [ 714.663197][T29270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.672060][T29270] Cannot create hsr debugfs directory [ 714.776380][T29400] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 714.792282][ T30] INFO: task syz.3.9428:25156 blocked for more than 143 seconds. [ 714.800054][ T30] Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 714.815835][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 714.825654][ T30] task:syz.3.9428 state:D stack:27360 pid:25156 tgid:25155 ppid:5258 flags:0x00000004 [ 714.932440][ T30] Call Trace: [ 714.935795][ T30] [ 714.938761][ T30] __schedule+0x18af/0x4bd0 [ 714.943548][ T30] ? __pfx___schedule+0x10/0x10 [ 714.948455][ T30] ? __pfx_lock_release+0x10/0x10 [ 714.953709][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 714.959745][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 714.966969][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 714.973103][ T30] ? schedule+0x90/0x320 [ 714.978276][ T30] schedule+0x14b/0x320 [ 714.983529][ T30] schedule_preempt_disabled+0x13/0x30 [ 714.989928][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 714.997448][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 715.004527][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 715.011418][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 715.030343][ T30] ? __might_fault+0xaa/0x120 [ 715.035069][ T30] ? __pfx_lock_release+0x10/0x10 [ 715.040203][ T30] down_write+0x1d7/0x220 [ 715.044572][ T30] ? __pfx_down_write+0x10/0x10 [ 715.049480][ T30] ? __might_fault+0xc6/0x120 [ 715.055217][ T30] blkdev_common_ioctl+0x150b/0x2480 [ 715.060613][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 715.066281][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 715.072017][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 715.078057][ T30] ? file_to_blk_mode+0xcc/0x140 [ 715.083969][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 715.088525][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 715.093679][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 715.098775][ T30] __se_sys_ioctl+0xf9/0x170 [ 715.103463][ T30] do_syscall_64+0xf3/0x230 [ 715.108017][ T30] ? clear_bhb_loop+0x35/0x90 [ 715.114105][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.120059][ T30] RIP: 0033:0x7fb6ae77dff9 [ 715.125112][ T30] RSP: 002b:00007fb6af510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.130559][T23999] Bluetooth: hci5: command tx timeout [ 715.133583][ T30] RAX: ffffffffffffffda RBX: 00007fb6ae935f80 RCX: 00007fb6ae77dff9 [ 715.147774][ T30] RDX: 0000000020000240 RSI: 000000000000127f RDI: 0000000000000003 [ 715.155830][ T30] RBP: 00007fb6ae7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 715.163904][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.172542][ T30] R13: 0000000000000000 R14: 00007fb6ae935f80 R15: 00007fb6aea5fa28 [ 715.180600][ T30] [ 715.183701][ T30] [ 715.183701][ T30] Showing all locks held in the system: [ 715.185694][T29400] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 715.191667][ T30] 1 lock held by khungtaskd/30: [ 715.191687][ T30] #0: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 715.191773][ T30] 3 locks held by kworker/u8:6/1096: [ 715.191801][ T30] 4 locks held by kworker/u8:8/2528: [ 715.228861][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 715.241221][ T30] #1: ffffc9000999fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 715.244334][T29400] team0: Device virt_wifi0 failed to register rx_handler [ 715.252167][ T30] #2: ffffffff8fcc63d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 715.269244][ T30] #3: ffffffff8fcd2ec8 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_net_exit_batch+0x20/0x90 [ 715.279429][ T30] 1 lock held by dhcpcd/4903: [ 715.284392][ T30] #0: ffffffff8fcd2ec8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 715.294070][ T30] 2 locks held by getty/4985: [ 715.298752][ T30] #0: ffff88814d8180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 715.309223][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 715.319739][ T30] 1 lock held by syz.2.8746/23665: [ 715.325853][ T30] 1 lock held by syz.3.9428/25156: [ 715.331422][ T30] #0: ffff888148c9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 715.343079][ T30] 1 lock held by syz.3.10528/27650: [ 715.348339][ T30] #0: ffff888148c9e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 715.359798][ T30] 1 lock held by syz-executor/29270: [ 715.365758][ T30] #0: ffffffff8fcd2ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 715.376125][ T30] 1 lock held by syz-executor/29351: [ 715.382719][ T30] #0: ffffffff8fcd2ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 715.393539][ T30] 3 locks held by syz.4.11208/29400: [ 715.399702][ T30] #0: ffffffff8fcd2ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 715.410038][ T30] #1: ffff888062fd4d40 (team->team_lock_key#2){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 715.422754][ T30] #2: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 715.436093][ T30] 1 lock held by syz.3.11210/29404: [ 715.442465][ T30] #0: ffffffff8e93d3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 715.454581][ T30] [ 715.456949][ T30] ============================================= [ 715.456949][ T30] [ 715.465665][ T30] NMI backtrace for cpu 0 [ 715.470024][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 715.480563][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 715.490657][ T30] Call Trace: [ 715.493962][ T30] [ 715.496921][ T30] dump_stack_lvl+0x241/0x360 [ 715.501639][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.506882][ T30] ? __pfx__printk+0x10/0x10 [ 715.511511][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 715.516460][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 715.521924][ T30] ? _printk+0xd5/0x120 [ 715.526092][ T30] ? __pfx__printk+0x10/0x10 [ 715.530695][ T30] ? __wake_up_klogd+0xcc/0x110 [ 715.535574][ T30] ? __pfx__printk+0x10/0x10 [ 715.540193][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 715.545253][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 715.551279][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 715.557312][ T30] watchdog+0xff4/0x1040 [ 715.561569][ T30] ? watchdog+0x1ea/0x1040 [ 715.566012][ T30] ? __pfx_watchdog+0x10/0x10 [ 715.570699][ T30] kthread+0x2f0/0x390 [ 715.574778][ T30] ? __pfx_watchdog+0x10/0x10 [ 715.579470][ T30] ? __pfx_kthread+0x10/0x10 [ 715.584078][ T30] ret_from_fork+0x4b/0x80 [ 715.588542][ T30] ? __pfx_kthread+0x10/0x10 [ 715.593172][ T30] ret_from_fork_asm+0x1a/0x30 [ 715.597969][ T30] [ 715.602838][ T30] Sending NMI from CPU 0 to CPUs 1: [ 715.608097][ C1] NMI backtrace for cpu 1 [ 715.608112][ C1] CPU: 1 UID: 0 PID: 23731 Comm: syz.0.8778 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 715.608133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 715.608144][ C1] RIP: 0010:memset_orig+0x33/0xb0 [ 715.608168][ C1] Code: b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 715.608227][ C1] RSP: 0018:ffffc9001698f898 EFLAGS: 00010202 [ 715.608254][ C1] RAX: f8f8f8f8f8f8f8f8 RBX: 1ffff11005a12032 RCX: 0000000000000137 [ 715.608268][ C1] RDX: 0000000000040000 RSI: 00000000000000f8 RDI: fffff5200203a000 [ 715.608280][ C1] RBP: 0000000000000000 R08: ffffffff81ed148b R09: 0000000000000000 [ 715.608292][ C1] R10: fffff52001ffee00 R11: fffffbfff2039fe6 R12: 1ffff11005a12033 [ 715.608306][ C1] R13: ffff88802d090190 R14: ffff88802d090180 R15: ffff888031c8ed68 [ 715.608320][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 715.608335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.608347][ C1] CR2: 0000001b33216ff8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 715.608362][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 715.608374][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 715.608386][ C1] Call Trace: [ 715.608393][ C1] [ 715.608402][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 715.608437][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 715.608464][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 715.608486][ C1] ? nmi_handle+0x2a/0x5a0 [ 715.608510][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 715.608534][ C1] ? nmi_handle+0x14f/0x5a0 [ 715.608551][ C1] ? nmi_handle+0x2a/0x5a0 [ 715.608570][ C1] ? memset_orig+0x33/0xb0 [ 715.608587][ C1] ? default_do_nmi+0x63/0x160 [ 715.608610][ C1] ? exc_nmi+0x123/0x1f0 [ 715.608631][ C1] ? end_repeat_nmi+0xf/0x53 [ 715.608651][ C1] ? remove_vm_area+0x22b/0x300 [ 715.608678][ C1] ? memset_orig+0x33/0xb0 [ 715.608696][ C1] ? memset_orig+0x33/0xb0 [ 715.608715][ C1] ? memset_orig+0x33/0xb0 [ 715.608734][ C1] [ 715.608740][ C1] [ 715.608746][ C1] remove_vm_area+0x25e/0x300 [ 715.608774][ C1] vfree+0x7c/0x2e0 [ 715.608799][ C1] kcov_close+0x28/0x50 [ 715.608821][ C1] ? __pfx_kcov_close+0x10/0x10 [ 715.608843][ C1] __fput+0x23f/0x880 [ 715.608872][ C1] task_work_run+0x24f/0x310 [ 715.608890][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 715.608910][ C1] ? __pfx_task_work_run+0x10/0x10 [ 715.608929][ C1] ? do_exit+0xa2a/0x28e0 [ 715.608946][ C1] ? kmem_cache_free+0x1a2/0x420 [ 715.608969][ C1] ? do_exit+0xa2a/0x28e0 [ 715.608987][ C1] do_exit+0xa2f/0x28e0 [ 715.609007][ C1] ? __pfx_do_exit+0x10/0x10 [ 715.609027][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 715.609054][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 715.609083][ C1] do_group_exit+0x207/0x2c0 [ 715.609100][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.609125][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 715.609143][ C1] get_signal+0x16a3/0x1740 [ 715.609171][ C1] ? __pfx_get_signal+0x10/0x10 [ 715.609192][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 715.609213][ C1] arch_do_signal_or_restart+0x96/0x860 [ 715.609238][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 715.609261][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 715.609292][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 715.609311][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 715.609330][ C1] do_syscall_64+0x100/0x230 [ 715.609348][ C1] ? clear_bhb_loop+0x35/0x90 [ 715.609367][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.609393][ C1] RIP: 0033:0x7fed859b00e5 [ 715.609407][ C1] Code: Unable to access opcode bytes at 0x7fed859b00bb. [ 715.609421][ C1] RSP: 002b:00007fed86760f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 715.609438][ C1] RAX: fffffffffffffdfc RBX: 00007fed85b35f80 RCX: 00007fed859b00e5 [ 715.609451][ C1] RDX: 00007fed86760fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.609462][ C1] RBP: 00007fed859f0296 R08: 0000000000000000 R09: 0000000000000000 [ 715.609473][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 715.609483][ C1] R13: 0000000000000001 R14: 00007fed85b35f80 R15: 00007fed85c5fa28 [ 715.609502][ C1] [ 716.050974][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 716.057869][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 716.068400][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 716.078484][ T30] Call Trace: [ 716.081794][ T30] [ 716.084740][ T30] dump_stack_lvl+0x241/0x360 [ 716.089444][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.094668][ T30] ? __pfx__printk+0x10/0x10 [ 716.099282][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 716.105336][ T30] ? vscnprintf+0x5d/0x90 [ 716.109696][ T30] panic+0x349/0x880 [ 716.113618][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 716.119812][ T30] ? __pfx_panic+0x10/0x10 [ 716.124260][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 716.129684][ T30] ? __irq_work_queue_local+0x137/0x410 [ 716.135268][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 716.140675][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 716.146867][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 716.153076][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 716.159304][ T30] watchdog+0x1033/0x1040 [ 716.163693][ T30] ? watchdog+0x1ea/0x1040 [ 716.168157][ T30] ? __pfx_watchdog+0x10/0x10 [ 716.172872][ T30] kthread+0x2f0/0x390 [ 716.176962][ T30] ? __pfx_watchdog+0x10/0x10 [ 716.181699][ T30] ? __pfx_kthread+0x10/0x10 [ 716.186315][ T30] ret_from_fork+0x4b/0x80 [ 716.190767][ T30] ? __pfx_kthread+0x10/0x10 [ 716.195384][ T30] ret_from_fork_asm+0x1a/0x30 [ 716.200210][ T30] [ 716.203385][ T30] Kernel Offset: disabled [ 716.207719][ T30] Rebooting in 86400 seconds..