last executing test programs: 54.923357648s ago: executing program 0 (id=13332): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0xfd9931a74040da92, 0xc, 0x8, {0x8, 0x11, "9fea3163fdfa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 51.758149031s ago: executing program 0 (id=13347): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r1, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000400), 0x1) 26.417300313s ago: executing program 3 (id=13463): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8) 25.979147957s ago: executing program 3 (id=13466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x5}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000000600)=""/4076, 0xfec, 0x97) 25.626880246s ago: executing program 3 (id=13468): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 25.294175625s ago: executing program 3 (id=13469): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="24d41e88f7000000000000008100", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 25.078693628s ago: executing program 3 (id=13470): syz_open_procfs(0xffffffffffffffff, &(0x7f0000001340)='setgroups\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') 24.051466832s ago: executing program 3 (id=13476): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xfde4) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) 23.109457651s ago: executing program 1 (id=13481): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) futex(&(0x7f0000000040), 0x80, 0x0, 0x0, 0x0, 0x0) 22.80938432s ago: executing program 1 (id=13483): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r0, 0x63) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 22.492495962s ago: executing program 1 (id=13485): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 21.834776997s ago: executing program 1 (id=13488): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYRES8], 0x2) 21.511753016s ago: executing program 1 (id=13490): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000840), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000880)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 21.193763921s ago: executing program 1 (id=13492): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000200)) 16.457527398s ago: executing program 0 (id=13387): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc940) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)='\x00\x00\x00', 0x3}, {&(0x7f00000003c0)="5e96825ebd", 0x5}], 0x2) 15.842009678s ago: executing program 0 (id=13503): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 15.49142566s ago: executing program 0 (id=13507): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe000001"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 14.518223699s ago: executing program 0 (id=13512): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) 7.503216974s ago: executing program 2 (id=13533): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) 7.308901258s ago: executing program 4 (id=13534): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) r0 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000001440)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r1) 6.789947054s ago: executing program 4 (id=13535): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 4.353035603s ago: executing program 2 (id=13536): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{0x0, 0x7, 0x6}], 0x1, 0x29b, 0x0, 0x0, 0x0, 0x45}) 3.898017255s ago: executing program 2 (id=13537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500feffffff0000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}}, 0x0) 1.354358434s ago: executing program 4 (id=13538): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) read$dsp(r0, &(0x7f0000000280)=""/205, 0xcd) 1.197802204s ago: executing program 2 (id=13539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="2e00000010008102040f46ecdb4cb9cca7480ef43c000000e3bd6efb4400090009002e0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 765.890091ms ago: executing program 4 (id=13540): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 543.113267ms ago: executing program 2 (id=13541): io_uring_setup(0xc90, &(0x7f0000000080)) r0 = io_uring_setup(0x4166, &(0x7f00000002c0)={0x0, 0x4, 0x1, 0x3, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x0, 0x0, 0x1f, 0x0, 0x0) 280.663014ms ago: executing program 4 (id=13542): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) creat(&(0x7f0000000280)='./file0\x00', 0x0) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='security.selinux\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x2) 219.42053ms ago: executing program 2 (id=13543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) 0s ago: executing program 4 (id=13544): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xd7, 0xf6, 0x49, 0x10, 0x499, 0x102a, 0xed36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x0, 0x3, 0x10, 0x4, [{{0x9, 0x4, 0xcc, 0x9, 0x0, 0x11, 0x7f, 0x67, 0xd1, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x1}, [@feature_unit={0x11, 0x24, 0x6, 0x5, 0x4, 0x5, [0x7, 0x8, 0x0, 0x9, 0x6], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x5, 0xc, 0xd3ac, 0x10}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x7], 0x6}]}]}}]}}]}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000220001"], 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): = -90 [ 836.585288][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.605234][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.633517][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.665918][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.685198][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.706688][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.733655][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.783843][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.825273][ T5282] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 836.862379][ T5282] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 836.902221][ T5282] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 836.976749][ T5282] usb 3-1: USB disconnect, device number 71 [ 839.006306][ T5352] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 839.175444][ T5352] usb 3-1: Using ep0 maxpacket: 16 [ 839.191309][ T5352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.209309][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.222094][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.233445][ T5352] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 839.264686][ T5352] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.284349][ T5352] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 839.296127][ T5352] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.304170][ T5352] usb 3-1: Manufacturer: syz [ 839.314463][ T5352] usb 3-1: config 0 descriptor?? [ 839.335370][ T5308] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 839.495305][ T5308] usb 2-1: Using ep0 maxpacket: 16 [ 839.505985][ T5308] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 839.518616][ T5308] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 839.537615][ T5308] usb 2-1: Product: syz [ 839.541847][ T5308] usb 2-1: Manufacturer: syz [ 839.547100][ T5308] usb 2-1: SerialNumber: syz [ 839.563821][ T5308] usb 2-1: config 0 descriptor?? [ 839.665320][ T5352] rc_core: IR keymap rc-hauppauge not found [ 839.679963][ T5352] Registered IR keymap rc-empty [ 839.696608][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.715238][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.747373][ T5352] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 839.774564][ T5352] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input184 [ 839.828259][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.836861][ T5308] usb 2-1: USB disconnect, device number 63 [ 839.888628][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.925351][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.945319][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.966752][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 839.995358][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.017590][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.045901][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.081795][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.117018][ T5352] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 840.137303][ T5352] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 840.145759][ T5352] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 840.161670][ T5352] usb 3-1: USB disconnect, device number 72 [ 840.296678][ T5283] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 840.459339][ T5283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 840.476924][ T5283] usb 5-1: not running at top speed; connect to a high speed hub [ 840.489974][ T5283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.505851][ T5283] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 840.534151][ T5283] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 840.568477][ T5283] usb 5-1: config 1 interface 0 has no altsetting 0 [ 840.587863][ T5283] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.605411][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.615214][ T5283] usb 5-1: Product: syz [ 840.620296][ T5283] usb 5-1: Manufacturer: syz [ 840.627162][ T5283] usb 5-1: SerialNumber: syz [ 840.913842][ T5283] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 840.985291][ T5283] usb 5-1: USB disconnect, device number 65 [ 841.791205][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.906491][ C1] bridge0: port 3(team0) entered forwarding state [ 841.912982][ C1] bridge0: topology change detected, propagating [ 841.967809][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.170751][T31901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.185669][T31901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.200296][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.222756][T31901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.238199][T31901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.246255][T31901] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 842.265451][T31901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.497665][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.778815][ T1345] chnl_net:caif_netlink_parms(): no params data found [ 842.821276][ T11] bridge_slave_1: left allmulticast mode [ 842.827391][ T11] bridge_slave_1: left promiscuous mode [ 842.833159][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.843957][ T11] bridge_slave_0: left allmulticast mode [ 842.852255][ T11] bridge_slave_0: left promiscuous mode [ 842.858296][ T5283] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 842.859742][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.049421][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.061527][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.071907][ T5283] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 843.086065][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.107344][ T5283] usb 5-1: config 0 descriptor?? [ 843.816309][ T5283] usb 5-1: USB disconnect, device number 66 [ 843.889950][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.911658][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.928837][ T11] bond0 (unregistering): Released all slaves [ 844.309261][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.328723][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.349231][ T1345] bridge_slave_0: entered allmulticast mode [ 844.365424][ T1345] bridge_slave_0: entered promiscuous mode [ 844.385174][ T54] Bluetooth: hci5: command tx timeout [ 844.649082][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.692159][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.746312][ T1345] bridge_slave_1: entered allmulticast mode [ 844.753223][ T1345] bridge_slave_1: entered promiscuous mode [ 844.897002][ T11] hsr_slave_0: left promiscuous mode [ 844.920154][ T11] hsr_slave_1: left promiscuous mode [ 844.994838][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.011256][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.056471][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.064543][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.194089][ T11] veth1_macvtap: left promiscuous mode [ 845.245860][ T11] veth0_macvtap: left promiscuous mode [ 845.252290][ T11] veth1_vlan: left promiscuous mode [ 845.292527][ T11] veth0_vlan: left promiscuous mode [ 846.471860][ T54] Bluetooth: hci5: command tx timeout [ 847.174851][ T11] team0 (unregistering): Port device team_slave_1 removed [ 847.283983][ T11] team0 (unregistering): Port device team_slave_0 removed [ 848.490188][ T1345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.545385][ T54] Bluetooth: hci5: command tx timeout [ 848.561788][ T1345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.772118][ T1345] team0: Port device team_slave_0 added [ 848.831530][ T1345] team0: Port device team_slave_1 added [ 849.000182][ T1345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.045400][ T1345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.109604][ T1345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.188553][ T1345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.200829][ T1345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.230149][ T1345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.672466][ T1345] hsr_slave_0: entered promiscuous mode [ 849.706107][ T1345] hsr_slave_1: entered promiscuous mode [ 849.731428][ T1345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.747546][ T1345] Cannot create hsr debugfs directory [ 849.766200][ T1458] netlink: 'syz.1.13196': attribute type 1 has an invalid length. [ 849.785881][ T1458] netlink: 'syz.1.13196': attribute type 2 has an invalid length. [ 850.278451][T31901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 850.293203][T31901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 850.302069][T31901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 850.349378][T31901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 850.372129][T31901] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 850.383197][T31901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 850.629828][ T54] Bluetooth: hci5: command tx timeout [ 850.810637][ T1473] chnl_net:caif_netlink_parms(): no params data found [ 851.691885][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.702952][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.715211][ T1473] bridge_slave_0: entered allmulticast mode [ 851.722616][ T1473] bridge_slave_0: entered promiscuous mode [ 852.062513][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.190137][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.208031][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.253561][ T1473] bridge_slave_1: entered allmulticast mode [ 852.266881][T31901] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 852.279211][T31901] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 852.285872][ T1473] bridge_slave_1: entered promiscuous mode [ 852.294045][T31901] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 852.311850][T31901] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 852.321509][T31901] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 852.330891][T31901] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 852.475128][ T54] Bluetooth: hci3: command tx timeout [ 852.482676][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.624923][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.728841][ T1473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.914009][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.964509][ T1473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.028183][ T1345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 853.064967][ T1345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 853.255631][ T1345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 853.312190][ T1345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 853.396716][ T1473] team0: Port device team_slave_0 added [ 853.445288][ T1473] team0: Port device team_slave_1 added [ 853.722239][ T1473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.758087][ T1473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.849391][ T1473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.892052][ T35] bridge_slave_1: left allmulticast mode [ 853.900235][ T35] bridge_slave_1: left promiscuous mode [ 853.910777][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.006822][ T35] bridge_slave_0: left allmulticast mode [ 854.013581][ T35] bridge_slave_0: left promiscuous mode [ 854.043452][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.397253][T31901] Bluetooth: hci8: command tx timeout [ 854.547039][T31901] Bluetooth: hci3: command tx timeout [ 855.151701][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.199209][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.233171][ T35] bond0 (unregistering): Released all slaves [ 855.281064][ T1473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.295468][ T1473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.328203][ T1473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.462137][ T35] tipc: Left network mode [ 855.870493][ T1473] hsr_slave_0: entered promiscuous mode [ 855.895260][ T1473] hsr_slave_1: entered promiscuous mode [ 855.941831][ T1473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 855.971823][ T1473] Cannot create hsr debugfs directory [ 856.371624][ T35] hsr_slave_0: left promiscuous mode [ 856.450160][ T35] hsr_slave_1: left promiscuous mode [ 856.465316][T31901] Bluetooth: hci8: command 0x041b tx timeout [ 856.482689][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.508955][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.543939][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.562721][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.625842][T31901] Bluetooth: hci3: command tx timeout [ 856.659174][ T35] veth1_macvtap: left promiscuous mode [ 856.679279][ T35] veth0_macvtap: left promiscuous mode [ 856.692459][ T35] veth1_vlan: left promiscuous mode [ 856.702169][ T35] veth0_vlan: left promiscuous mode [ 857.622760][ T29] audit: type=1326 audit(1728938696.460:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.4.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d137dff9 code=0x7ffc0000 [ 857.706289][ T29] audit: type=1326 audit(1728938696.460:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.4.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d137dff9 code=0x7ffc0000 [ 857.729834][ T29] audit: type=1326 audit(1728938696.460:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.4.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f86d137dff9 code=0x7ffc0000 [ 857.755218][ T29] audit: type=1326 audit(1728938696.460:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.4.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d137dff9 code=0x7ffc0000 [ 857.781904][ T29] audit: type=1326 audit(1728938696.460:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1627 comm="syz.4.13231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d137dff9 code=0x7ffc0000 [ 858.556288][T31901] Bluetooth: hci8: command 0x041b tx timeout [ 858.602831][ T35] team0 (unregistering): Port device team_slave_1 removed [ 858.715172][ T54] Bluetooth: hci3: command tx timeout [ 858.757518][ T35] team0 (unregistering): Port device team_slave_0 removed [ 860.337025][ T1345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.515833][ T1345] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.585334][ T1523] chnl_net:caif_netlink_parms(): no params data found [ 860.631602][ T54] Bluetooth: hci8: command 0x041b tx timeout [ 860.676234][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.683513][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.041835][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.049038][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.321466][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.343128][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.365363][ T1523] bridge_slave_0: entered allmulticast mode [ 861.388417][ T1523] bridge_slave_0: entered promiscuous mode [ 861.553433][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.561811][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.573993][ T1523] bridge_slave_1: entered allmulticast mode [ 861.589074][ T1523] bridge_slave_1: entered promiscuous mode [ 861.663723][ T1523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.732612][ T1523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.888655][ T1345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.938821][ T1523] team0: Port device team_slave_0 added [ 861.961536][ T1523] team0: Port device team_slave_1 added [ 862.075655][ T5283] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 862.104093][ T1523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.163286][ T1523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.237627][ T1523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.271337][ T5283] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 862.289273][ T1473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 862.297686][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.314798][ T5283] usb 5-1: config 0 descriptor?? [ 862.347413][ T1523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.362391][ T5283] cp210x 5-1:0.0: cp210x converter detected [ 862.371911][ T1523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.399442][ T1523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.414790][ T1473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 862.434138][ T1473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 862.463332][ T1345] veth0_vlan: entered promiscuous mode [ 862.502607][ T1473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 862.561679][ T1345] veth1_vlan: entered promiscuous mode [ 862.650096][ T1523] hsr_slave_0: entered promiscuous mode [ 862.662779][ T1523] hsr_slave_1: entered promiscuous mode [ 862.677907][ T1523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.687332][ T1523] Cannot create hsr debugfs directory [ 862.706083][ T54] Bluetooth: hci8: command 0x041b tx timeout [ 862.777206][ T5283] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 862.821558][ T5283] usb 5-1: cp210x converter now attached to ttyUSB0 [ 862.853775][ T1345] veth0_macvtap: entered promiscuous mode [ 862.881054][ T1345] veth1_macvtap: entered promiscuous mode [ 862.998913][ T5283] usb 5-1: USB disconnect, device number 67 [ 863.010467][ T5283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 863.027436][ T5283] cp210x 5-1:0.0: device disconnected [ 863.045587][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.066938][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.078756][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.090248][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.102181][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.113953][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.133448][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.145144][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.163403][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.179181][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.189304][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.199804][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.209702][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.220218][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.232377][ T1345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.341100][ T1523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.412992][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.426053][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.439030][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.453143][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.464488][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.477906][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.490121][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.501724][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.512754][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.523658][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.534479][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.545270][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.560006][ T1345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.571746][ T1345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.587754][ T1345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.801173][ T1523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.819183][T31901] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 863.836701][T31901] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 863.867424][T31901] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 863.881469][T31901] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 863.899901][T31901] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 863.901169][ T1345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.921033][T31901] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 863.969165][ T1345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.979991][ T1345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.990259][ T1345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.034451][ T1473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.076760][ T1523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.214597][ T1523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.228839][ T54] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 864.239718][ T54] Bluetooth: hci7: Injecting HCI hardware error event [ 864.258356][T31901] Bluetooth: hci7: hardware error 0x00 [ 864.372277][ T1473] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.480610][T27989] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.487796][T27989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.596636][T27989] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.603824][T27989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.766181][T27989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.774078][T27989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.783450][ T1523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 864.791616][ T54] Bluetooth: hci8: command 0x041b tx timeout [ 864.827858][ T1523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 864.980711][ T1523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 864.987784][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.021274][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.042945][ T1523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 865.141483][ T1707] chnl_net:caif_netlink_parms(): no params data found [ 865.536311][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.556918][ T1707] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.564250][ T1707] bridge_slave_0: entered allmulticast mode [ 865.574498][ T1707] bridge_slave_0: entered promiscuous mode [ 865.584029][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.600785][ T1707] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.612309][ T1707] bridge_slave_1: entered allmulticast mode [ 865.628609][ T1707] bridge_slave_1: entered promiscuous mode [ 865.673205][ T1473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.745472][ T5282] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 865.822807][ T1707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.883525][ T1707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.918434][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.935721][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.945741][ T5282] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 865.954811][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.969088][ T5282] usb 5-1: config 0 descriptor?? [ 865.992187][ T54] Bluetooth: hci9: command tx timeout [ 866.026590][ T1707] team0: Port device team_slave_0 added [ 866.068647][ T1523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.099358][ T1707] team0: Port device team_slave_1 added [ 866.214808][ T1707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.222261][ T1707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.276657][ T1707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.298170][ T1473] veth0_vlan: entered promiscuous mode [ 866.315223][T31901] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 866.336585][ T1473] veth1_vlan: entered promiscuous mode [ 866.368934][ T1523] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.387093][ T1707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.390840][ T5282] sony 0003:054C:024B.00C2: unexpected long global item [ 866.394568][ T1707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.415303][ T5282] sony 0003:054C:024B.00C2: parse failed [ 866.434618][ T5282] sony 0003:054C:024B.00C2: probe with driver sony failed with error -22 [ 866.451308][ T1707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.574947][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.582111][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.619496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.626713][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.632049][ T5283] usb 5-1: USB disconnect, device number 68 [ 866.790262][ T1707] hsr_slave_0: entered promiscuous mode [ 866.815613][ T1707] hsr_slave_1: entered promiscuous mode [ 866.863493][ T1707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.886821][ T1707] Cannot create hsr debugfs directory [ 866.904639][ T1473] veth0_macvtap: entered promiscuous mode [ 866.946480][ T1473] veth1_macvtap: entered promiscuous mode [ 867.008198][ T1745] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13261'. [ 867.081244][ T1523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.160624][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.215179][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.253108][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.305279][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.315373][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.327017][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.338228][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.349949][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.364847][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.376314][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.386399][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.400919][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.412659][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.424420][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.435225][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.446822][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.459258][ T1473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.478595][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.523335][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.575088][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.586789][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.596806][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.607323][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.617265][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.627803][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.637728][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.648253][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.658169][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.668978][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.679495][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.690589][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.700510][ T1473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.711062][ T1473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.722253][ T1473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.772705][ T1473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.787824][ T1473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.797575][ T1473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.807446][ T1473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.925267][ T5283] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 868.065928][T31901] Bluetooth: hci9: command tx timeout [ 868.085247][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 868.113132][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.137922][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.149754][ T5283] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 868.159836][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.212226][ T5283] usb 4-1: config 0 descriptor?? [ 868.231934][ T1707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.351988][ T1523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.448355][ T1707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.592774][ T1707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.619544][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.648592][ T1756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.667145][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.697106][ T1707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.712575][ T1756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.744070][ T5283] hid (null): bogus close delimiter [ 868.766881][ T1523] veth0_vlan: entered promiscuous mode [ 868.814503][ T1523] veth1_vlan: entered promiscuous mode [ 868.840453][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.871943][ T1523] veth0_macvtap: entered promiscuous mode [ 868.876514][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.956515][ T5283] usb 4-1: string descriptor 0 read error: -71 [ 868.998596][ T1523] veth1_macvtap: entered promiscuous mode [ 869.015498][ T5283] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 869.045996][ T5283] letsketch 0003:6161:4D15.00C3: probe with driver letsketch failed with error -32 [ 869.069574][ T5283] usb 4-1: USB disconnect, device number 17 [ 869.209367][ T1707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 869.238521][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.304099][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.335749][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.348869][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.363721][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.374962][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.385803][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.399667][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.412527][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.456492][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.480578][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.505412][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.524935][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.536879][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.546818][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.558691][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.569786][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.581554][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.648887][ T1523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.674738][ T1707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 869.692637][ T1707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.768047][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.810734][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.855267][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.867079][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.877964][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.889169][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.899251][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.910623][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.920763][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.932804][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.990338][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.032810][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.044354][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.056559][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.068120][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.080226][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.091632][ T1523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.102804][ T1523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.116411][ T1523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.125096][ T1707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 870.159848][T31901] Bluetooth: hci9: command tx timeout [ 870.208758][ T1523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.251826][ T1523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.260830][ T1523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.270333][ T1523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.338098][ T1786] tmpfs: Unknown parameter ',2oºtmode' [ 870.453793][ T29] audit: type=1326 audit(1728938709.300:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1789 comm="syz.0.13281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb10977dff9 code=0x0 [ 870.664835][T27989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.695425][T27989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.707722][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.714076][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.910284][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.017209][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.043449][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.174388][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.230434][ T1707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.449213][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.496145][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 871.513432][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 871.526218][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 871.537073][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 871.548653][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 871.557724][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 871.729516][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.856820][ T1707] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.924642][T27989] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.931834][T27989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.002451][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.009691][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.217523][ T1707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 872.237091][ T5283] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 872.239117][ T54] Bluetooth: hci9: command tx timeout [ 872.395674][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 872.458307][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.505325][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.530859][ T5283] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 872.540710][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.553611][ T5283] usb 4-1: config 0 descriptor?? [ 872.570338][ T5283] hub 4-1:0.0: USB hub found [ 872.623732][ T11] bridge_slave_1: left allmulticast mode [ 872.678004][ T5308] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 872.697471][ T11] bridge_slave_1: left promiscuous mode [ 872.712227][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.776549][ T11] bridge_slave_0: left allmulticast mode [ 872.796472][ T11] bridge_slave_0: left promiscuous mode [ 872.802290][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.828516][ T1840] Cannot find add_set index 1 as target [ 872.875182][ T5308] usb 3-1: Using ep0 maxpacket: 8 [ 872.881368][ T5283] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 872.894039][ T5308] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 872.907421][ T5308] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.922486][ T5308] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.936557][ T5308] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 872.949302][ T5308] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 872.963421][ T5308] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 872.995300][ T5308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.109461][ T5283] usbhid 4-1:0.0: can't add hid device: -71 [ 873.124273][ T5283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 873.167337][ T5283] usb 4-1: USB disconnect, device number 18 [ 873.232351][ T5308] usb 3-1: GET_CAPABILITIES returned 0 [ 873.238169][ T5308] usbtmc 3-1:16.0: can't read capabilities [ 873.483106][ T1825] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 873.517353][ T5282] usb 3-1: USB disconnect, device number 73 [ 873.586845][ T54] Bluetooth: hci7: command tx timeout [ 874.372617][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.440752][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.477023][ T11] bond0 (unregistering): Released all slaves [ 874.632203][ T1707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.642437][ T1809] chnl_net:caif_netlink_parms(): no params data found [ 875.143310][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13315'. [ 875.465314][ T11] hsr_slave_0: left promiscuous mode [ 875.478637][ T11] hsr_slave_1: left promiscuous mode [ 875.558170][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.585308][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.602545][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.611097][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.652132][ T11] veth1_macvtap: left promiscuous mode [ 875.658108][ T11] veth0_macvtap: left promiscuous mode [ 875.664361][ T11] veth1_vlan: left promiscuous mode [ 875.670066][ T11] veth0_vlan: left promiscuous mode [ 875.671250][ T54] Bluetooth: hci7: command tx timeout [ 877.520184][ T11] team0 (unregistering): Port device team_slave_1 removed [ 877.647866][ T11] team0 (unregistering): Port device team_slave_0 removed [ 877.754559][ T54] Bluetooth: hci7: command tx timeout [ 878.687276][ T1707] veth0_vlan: entered promiscuous mode [ 878.696775][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.703911][ T1809] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.728946][ T1809] bridge_slave_0: entered allmulticast mode [ 878.738235][ T1809] bridge_slave_0: entered promiscuous mode [ 878.799479][ T1923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13327'. [ 878.827896][ T1707] veth1_vlan: entered promiscuous mode [ 878.878293][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.889823][ T1809] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.907242][ T1809] bridge_slave_1: entered allmulticast mode [ 878.953327][ T1809] bridge_slave_1: entered promiscuous mode [ 879.234091][ T1809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.276906][ T1809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.538801][ T1809] team0: Port device team_slave_0 added [ 879.556967][ T1809] team0: Port device team_slave_1 added [ 879.672966][ T1707] veth0_macvtap: entered promiscuous mode [ 879.762982][ T1809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.786565][ T1809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.814628][ T1942] sctp: [Deprecated]: syz.3.13335 (pid 1942) Use of int in maxseg socket option. [ 879.814628][ T1942] Use struct sctp_assoc_value instead [ 879.832891][ T54] Bluetooth: hci7: command tx timeout [ 879.895817][ T1809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.959079][ T1707] veth1_macvtap: entered promiscuous mode [ 879.997754][ T1809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.004761][ T1809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.031435][ T1809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.079004][ T1948] netlink: 'syz.2.13336': attribute type 14 has an invalid length. [ 880.119112][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13337'. [ 880.271340][ T1957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13338'. [ 880.379320][ T1809] hsr_slave_0: entered promiscuous mode [ 880.440550][ T1809] hsr_slave_1: entered promiscuous mode [ 880.460863][ T1809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.486177][ T1809] Cannot create hsr debugfs directory [ 880.523991][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.538223][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.554521][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.570382][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.581963][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.592628][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.602559][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.614905][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.624846][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.640923][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.656800][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.687841][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.699029][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.709620][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.719603][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.730262][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.741671][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.754054][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.769922][ T1707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.829010][ T1971] tipc: Started in network mode [ 880.833942][ T1971] tipc: Node identity ac14140f, cluster identity 4711 [ 880.845663][ T1971] tipc: New replicast peer: 255.255.255.255 [ 880.851955][ T1971] tipc: Enabled bearer , priority 10 [ 880.914274][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.939285][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.953068][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.964878][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.984480][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.025476][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.055249][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.085623][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.116438][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.145175][T22890] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 881.145595][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.184682][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.197525][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.208427][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.220163][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.234401][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.246053][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.257021][ T1707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.267729][ T1707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.279142][ T1707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.325354][T22890] usb 4-1: Using ep0 maxpacket: 32 [ 881.349097][T22890] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 881.381797][ T1707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.385157][T22890] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 881.410997][T22890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.414545][ T1707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.424779][T22890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.441424][T22890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.450655][T22890] usb 4-1: Product: syz [ 881.455979][T22890] usb 4-1: Manufacturer: syz [ 881.461466][T22890] usb 4-1: SerialNumber: syz [ 881.497138][ T1707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.519572][ T1707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.680357][T22890] usb 4-1: 0:2 : does not exist [ 881.719153][T22890] usb 4-1: USB disconnect, device number 19 [ 881.729434][ T29] audit: type=1326 audit(1728938720.580:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 881.795247][ T29] audit: type=1326 audit(1728938720.610:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 881.845230][ T5282] tipc: Node number set to 2886997007 [ 882.192959][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.211370][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.586476][T27989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.599097][ T29] audit: type=1326 audit(1728938721.450:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 882.621869][T27989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.729753][ T29] audit: type=1326 audit(1728938721.450:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 882.795300][ T29] audit: type=1326 audit(1728938721.620:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 882.876724][ T29] audit: type=1326 audit(1728938721.620:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 882.987411][ T29] audit: type=1326 audit(1728938721.620:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1978 comm="syz.2.13346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734277dff9 code=0x7ffc0000 [ 883.301811][ T2013] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 883.732487][ T1809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 883.803989][ T1809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.911410][ T2027] netlink: 'syz.1.13358': attribute type 2 has an invalid length. [ 884.006975][ T1809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 884.078531][ T1809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 884.512443][ T1809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.616146][ T1809] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.651141][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.658418][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.717359][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.724485][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.077521][ T1809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.224665][ T1809] veth0_vlan: entered promiscuous mode [ 885.317418][ T1809] veth1_vlan: entered promiscuous mode [ 885.375300][T22890] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 885.456633][ T1809] veth0_macvtap: entered promiscuous mode [ 885.506197][ T1809] veth1_macvtap: entered promiscuous mode [ 885.560782][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.571592][T22890] usb 2-1: Using ep0 maxpacket: 32 [ 885.586570][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.596358][T22890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 885.608679][T22890] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 885.618178][T22890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.628059][T22890] usb 2-1: Product: syz [ 885.632410][T22890] usb 2-1: Manufacturer: syz [ 885.639375][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.639713][T22890] usb 2-1: SerialNumber: syz [ 885.681321][T22890] usb 2-1: config 0 descriptor?? [ 885.694229][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.735598][ T2072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 885.757766][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.785994][T22890] hub 2-1:0.0: bad descriptor, ignoring hub [ 885.813059][T22890] hub 2-1:0.0: probe with driver hub failed with error -5 [ 885.815060][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.836296][T22890] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input185 [ 885.842257][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.856170][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.866122][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.876629][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.886643][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.897145][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.907744][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.920496][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.930450][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.941072][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.951030][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.961552][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.971459][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.982111][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.993792][ T1809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.019979][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.061292][ T5282] usb 2-1: USB disconnect, device number 64 [ 886.061389][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 886.089130][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.134971][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.186875][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.235149][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.269110][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.313129][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.342574][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.375881][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.415531][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.437288][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.455352][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.470552][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.488641][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.534416][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.559563][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.585457][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.625478][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.655189][ T1809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.666921][ T1809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.755545][ T1809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.940014][ T1809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.971263][ T1809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.995972][ T1809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.006170][ T1809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.272585][ T999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.641341][ T999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.051426][T31901] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 888.052783][ T999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.076361][T31901] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 888.090610][T31901] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 888.104968][T31901] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 888.113337][T31901] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 888.124721][T31901] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 888.358126][ T999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.483124][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.505785][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.612690][ T2075] warn_alloc: 3 callbacks suppressed [ 888.612712][ T2075] syz.3.13370: vmalloc error: size 3485696, failed to allocated page array size 6808, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 888.642305][ T2075] CPU: 1 UID: 0 PID: 2075 Comm: syz.3.13370 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 888.653140][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 888.663237][ T2075] Call Trace: [ 888.666546][ T2075] [ 888.669516][ T2075] dump_stack_lvl+0x241/0x360 [ 888.674241][ T2075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.676689][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.679454][ T2075] ? __pfx__printk+0x10/0x10 [ 888.691907][ T2075] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 888.698362][ T2075] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 888.704905][ T2075] warn_alloc+0x278/0x410 [ 888.709276][ T2075] ? __pfx_warn_alloc+0x10/0x10 [ 888.714181][ T2075] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 888.720367][ T2075] ? __get_vm_area_node+0x23d/0x270 [ 888.725585][ T2075] __vmalloc_node_range_noprof+0x691/0x13f0 [ 888.731506][ T2075] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 888.737509][ T2075] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 888.743843][ T2075] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 888.750018][ T2075] ? __get_vm_area_node+0x23d/0x270 [ 888.755234][ T2075] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 888.761144][ T2075] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 888.767300][ T2075] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 888.773047][ T2075] ? rcu_is_watching+0x15/0xb0 [ 888.777826][ T2075] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 888.784164][ T2075] ? rcu_is_watching+0x15/0xb0 [ 888.788958][ T2075] ? trace_kmalloc+0x1f/0xd0 [ 888.793554][ T2075] ? __kmalloc_node_noprof+0x247/0x440 [ 888.799038][ T2075] ? __kvmalloc_node_noprof+0x72/0x190 [ 888.804506][ T2075] __kvmalloc_node_noprof+0x142/0x190 [ 888.809886][ T2075] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 888.816051][ T2075] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 888.822148][ T2075] ? tpg_update_mv_step+0x361/0x4f0 [ 888.827378][ T2075] vivid_update_format_cap+0x133c/0x2090 [ 888.833059][ T2075] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 888.839148][ T2075] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 888.844970][ T2075] __video_do_ioctl+0xc23/0xdd0 [ 888.849836][ T2075] ? __pfx___video_do_ioctl+0x10/0x10 [ 888.855303][ T2075] ? __might_fault+0xc6/0x120 [ 888.859982][ T2075] video_usercopy+0x89b/0x1180 [ 888.864753][ T2075] ? __pfx___video_do_ioctl+0x10/0x10 [ 888.870151][ T2075] ? __pfx_video_usercopy+0x10/0x10 [ 888.875391][ T2075] ? __fget_files+0x29/0x470 [ 888.880010][ T2075] ? __fget_files+0x3f3/0x470 [ 888.884696][ T2075] v4l2_ioctl+0x189/0x1e0 [ 888.889150][ T2075] ? __pfx_v4l2_ioctl+0x10/0x10 [ 888.894004][ T2075] __se_sys_ioctl+0xf9/0x170 [ 888.898602][ T2075] do_syscall_64+0xf3/0x230 [ 888.903305][ T2075] ? clear_bhb_loop+0x35/0x90 [ 888.908015][ T2075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.914100][ T2075] RIP: 0033:0x7f37fb97dff9 [ 888.918611][ T2075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.938223][ T2075] RSP: 002b:00007f37fc7bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.946839][ T2075] RAX: ffffffffffffffda RBX: 00007f37fbb35f80 RCX: 00007f37fb97dff9 [ 888.954835][ T2075] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 888.962818][ T2075] RBP: 00007f37fb9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 888.970795][ T2075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.978780][ T2075] R13: 0000000000000000 R14: 00007f37fbb35f80 R15: 00007f37fbc5fa28 [ 888.986772][ T2075] [ 888.991391][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.022398][ T2075] Mem-Info: [ 889.026189][ T2075] active_anon:7545 inactive_anon:0 isolated_anon:0 [ 889.026189][ T2075] active_file:14155 inactive_file:3549 isolated_file:0 [ 889.026189][ T2075] unevictable:768 dirty:103 writeback:0 [ 889.026189][ T2075] slab_reclaimable:5830 slab_unreclaimable:119187 [ 889.026189][ T2075] mapped:39929 shmem:1237 pagetables:1040 [ 889.026189][ T2075] sec_pagetables:0 bounce:0 [ 889.026189][ T2075] kernel_misc_reclaimable:0 [ 889.026189][ T2075] free:1256947 free_pcp:854 free_cma:0 [ 889.073770][ T2075] Node 0 active_anon:30080kB inactive_anon:0kB active_file:56616kB inactive_file:14188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159712kB dirty:408kB writeback:0kB shmem:3412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11596kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no [ 889.109669][ T2075] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no [ 889.141153][ T2075] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.170705][ T2075] lowmem_reserve[]: 0 2465 2466 0 0 [ 889.177223][ T2075] Node 0 DMA32 free:1085256kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:29824kB inactive_anon:0kB active_file:56504kB inactive_file:13712kB unevictable:1536kB writepending:408kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:3580kB local_pcp:1772kB free_cma:0kB [ 889.210344][ T2075] lowmem_reserve[]: 0 0 0 0 0 [ 889.217117][ T2075] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:256kB inactive_anon:0kB active_file:112kB inactive_file:476kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:28kB free_cma:0kB [ 889.244766][ T2075] lowmem_reserve[]: 0 0 0 0 0 [ 889.250864][ T2075] Node 1 Normal free:3926948kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.282008][ T2075] lowmem_reserve[]: 0 0 0 0 0 [ 889.287111][ T2075] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 889.301079][ T2075] Node 0 DMA32: 124*4kB (UME) 962*8kB (ME) 424*16kB (M) 705*32kB (UME) 265*64kB (UME) 19*128kB (ME) 39*256kB (UME) 26*512kB (UME) 18*1024kB (ME) 12*2048kB (UM) 235*4096kB (UM) = 1085792kB [ 889.320248][ T2075] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 889.334033][ T2075] Node 1 Normal: 215*4kB (UME) 81*8kB (UME) 52*16kB (UME) 198*32kB (UME) 97*64kB (UME) 25*128kB (UME) 15*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 950*4096kB (UM) = 3926948kB [ 889.382429][ T999] bridge_slave_1: left allmulticast mode [ 889.403556][ T2075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.414264][ T999] bridge_slave_1: left promiscuous mode [ 889.428933][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.445688][ T2075] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 889.463490][ T999] bridge_slave_0: left allmulticast mode [ 889.469218][ T999] bridge_slave_0: left promiscuous mode [ 889.474911][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.483635][ T2075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.517635][ T2075] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 889.528263][ T2075] 18949 total pagecache pages [ 889.533017][ T2075] 0 pages in swap cache [ 889.542551][ T2075] Free swap = 124436kB [ 889.565393][ T2075] Total swap = 124996kB [ 889.571055][ T2075] 2097051 pages RAM [ 889.582102][ T2075] 0 pages HighMem/MovableOnly [ 889.597939][ T2075] 427075 pages reserved [ 889.608213][ T2075] 0 pages cma reserved [ 889.655372][ T5283] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 889.829221][ T5283] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 889.838827][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.878592][ T5283] usb 5-1: Product: syz [ 889.893123][ T5283] usb 5-1: Manufacturer: syz [ 889.903555][ T5283] usb 5-1: SerialNumber: syz [ 889.937513][ T5283] usb 5-1: config 0 descriptor?? [ 890.179581][ T5283] usb 5-1: USB disconnect, device number 69 [ 890.225926][ T54] Bluetooth: hci8: command tx timeout [ 890.620471][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.642315][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.662119][ T999] bond0 (unregistering): Released all slaves [ 890.877993][ T999] tipc: Disabling bearer [ 890.883914][ T999] tipc: Left network mode [ 891.273325][ T2138] chnl_net:caif_netlink_parms(): no params data found [ 891.701141][ T999] hsr_slave_0: left promiscuous mode [ 891.730167][ T999] hsr_slave_1: left promiscuous mode [ 891.806539][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.814080][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.871674][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.908496][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.072416][ T999] veth1_macvtap: left promiscuous mode [ 892.099837][ T999] veth0_macvtap: left promiscuous mode [ 892.136264][ T999] veth1_vlan: left promiscuous mode [ 892.141641][ T999] veth0_vlan: left promiscuous mode [ 892.305694][ T54] Bluetooth: hci8: command tx timeout [ 893.168602][T31901] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 893.183542][T31901] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 893.194894][T31901] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 893.208775][T31901] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 893.220395][T31901] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 893.228932][T31901] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 894.387775][ T54] Bluetooth: hci8: command tx timeout [ 894.700722][ T999] team0 (unregistering): Port device team_slave_1 removed [ 894.797782][ T999] team0 (unregistering): Port device team_slave_0 removed [ 895.350950][ T54] Bluetooth: hci10: command tx timeout [ 896.037346][ T2228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13392'. [ 896.063435][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.071016][ T2138] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.078396][ T2138] bridge_slave_0: entered allmulticast mode [ 896.085622][ T2138] bridge_slave_0: entered promiscuous mode [ 896.093720][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.101381][ T2138] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.108734][ T2138] bridge_slave_1: entered allmulticast mode [ 896.116044][ T2138] bridge_slave_1: entered promiscuous mode [ 896.126588][ T2230] ALSA: mixer_oss: invalid OSS volume 'Ñc›' [ 896.269832][ T2138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.284833][ T2138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.458633][ T2138] team0: Port device team_slave_0 added [ 896.467123][ T54] Bluetooth: hci8: command tx timeout [ 896.514142][ T2138] team0: Port device team_slave_1 added [ 896.842797][ T2138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.925094][ T2138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.053049][ T2138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.239546][ T2138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.248846][ T2138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.277757][ T2138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.433705][ T54] Bluetooth: hci10: command tx timeout [ 897.468494][ T2138] hsr_slave_0: entered promiscuous mode [ 897.498467][ T2138] hsr_slave_1: entered promiscuous mode [ 897.534181][ T2138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.564179][ T2138] Cannot create hsr debugfs directory [ 897.662917][ T2224] chnl_net:caif_netlink_parms(): no params data found [ 898.057061][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.057412][ T1981] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 898.064700][ T2224] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.102580][ T2224] bridge_slave_0: entered allmulticast mode [ 898.128387][ T2224] bridge_slave_0: entered promiscuous mode [ 898.147155][ T2224] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.163424][ T2224] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.184840][ T2224] bridge_slave_1: entered allmulticast mode [ 898.227258][ T2224] bridge_slave_1: entered promiscuous mode [ 898.275386][ T1981] usb 5-1: Using ep0 maxpacket: 16 [ 898.285509][ T1981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.299820][ T1981] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 898.331863][ T1981] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 898.347790][ T1981] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 898.362537][ T1981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.374031][ T1981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 898.383621][ T1981] usb 5-1: SerialNumber: syz [ 898.387542][ T2224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.406791][ T2292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.445555][ T2292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.504754][ T1981] hub 5-1:1.0: bad descriptor, ignoring hub [ 898.514129][ T1981] hub 5-1:1.0: probe with driver hub failed with error -5 [ 898.514345][ T2224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.672465][ T2312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13415'. [ 898.711665][ T2224] team0: Port device team_slave_0 added [ 898.759254][ T2292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.768050][ T2292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.790466][ T2224] team0: Port device team_slave_1 added [ 899.168393][ T2224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.215701][ T2224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.242955][ T2224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.258701][ T1981] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 899.259170][ T2224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.277451][ T2224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.303570][ T2224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.527038][ T54] Bluetooth: hci10: command tx timeout [ 899.545822][ T1981] usb 5-1: USB disconnect, device number 70 [ 899.558663][ T1981] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 900.446640][ T2224] hsr_slave_0: entered promiscuous mode [ 900.493394][ T2224] hsr_slave_1: entered promiscuous mode [ 900.530215][ T2224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 900.559417][ T2224] Cannot create hsr debugfs directory [ 900.723156][ T2357] Option ' ' to dns_resolver key: bad/missing value [ 901.235951][ T29] audit: type=1326 audit(1728938740.090:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 901.381935][ T29] audit: type=1326 audit(1728938740.110:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 901.591944][ T54] Bluetooth: hci10: command tx timeout [ 901.604619][ T29] audit: type=1326 audit(1728938740.150:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 901.627041][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.865503][ T29] audit: type=1326 audit(1728938740.170:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 901.968699][ T2138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 902.015778][ T29] audit: type=1326 audit(1728938740.170:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 902.094691][ T2138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 902.159068][ T29] audit: type=1326 audit(1728938740.170:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 902.181439][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.356914][ T29] audit: type=1326 audit(1728938740.170:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 902.379205][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.565752][ T29] audit: type=1326 audit(1728938740.170:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2365 comm="syz.3.13430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37fb97dff9 code=0x7ffc0000 [ 902.617447][ T2224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.811478][ T2138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 902.849582][ T2138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 903.322823][ T2138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.468839][ T2138] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.536504][T27989] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.543694][T27989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.628173][T27989] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.635408][T27989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.944623][ T2138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 904.045291][ T2138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 904.440199][ T5308] IPVS: starting estimator thread 0... [ 904.565926][ T2431] IPVS: using max 18 ests per chain, 43200 per kthread [ 906.257075][ T2224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.498700][ T2138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.753361][ T2138] veth0_vlan: entered promiscuous mode [ 906.901215][ T2138] veth1_vlan: entered promiscuous mode [ 907.101108][ T2138] veth0_macvtap: entered promiscuous mode [ 907.204183][ T2138] veth1_macvtap: entered promiscuous mode [ 907.366004][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.435623][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.499413][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.586304][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.605035][ C1] sched: DL replenish lagged too much [ 907.692473][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.749445][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.804150][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.878202][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.937397][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.010084][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.093870][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.144359][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.203677][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.275345][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.351821][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.443654][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.505416][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.549455][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.591191][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.642099][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.701447][ T2138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.741300][ T2492] netlink: 'syz.1.13462': attribute type 1 has an invalid length. [ 908.754456][ T2492] netlink: 'syz.1.13462': attribute type 2 has an invalid length. [ 908.782101][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13462'. [ 908.998520][ T2224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.062047][ T29] audit: type=1326 audit(1728938747.910:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2514 comm="syz.3.13470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37fb97dff9 code=0x0 [ 909.141896][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.209237][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.268908][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.319778][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.363605][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.412484][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.477956][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.526643][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.572677][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.607582][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.630928][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.657013][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.686585][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.711977][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.734310][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.766387][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.805561][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.831543][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.854362][ T2138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.897567][ T2138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.961399][ T2138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.192991][ T2224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.277058][ T2138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.341949][ T2138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.364133][ T2138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.400347][ T2138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.843608][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.905320][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.171599][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.189508][ T2224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 911.217491][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.257226][ T2224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 911.322625][ T2224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 911.419157][ T2224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 911.597200][ T2549] IPVS: stopping backup sync thread 2552 ... [ 911.613375][ T2552] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 911.653275][ T2553] netlink: 'syz.1.13485': attribute type 21 has an invalid length. [ 911.674926][ T2553] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13485'. [ 911.701721][ T2553] netlink: 'syz.1.13485': attribute type 4 has an invalid length. [ 911.725256][ T2553] netlink: 'syz.1.13485': attribute type 5 has an invalid length. [ 911.742812][ T2553] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13485'. [ 911.811768][ T2554] netlink: 'syz.1.13485': attribute type 21 has an invalid length. [ 911.860705][ T2554] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13485'. [ 911.926835][ T2554] netlink: 'syz.1.13485': attribute type 5 has an invalid length. [ 911.978161][ T2554] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13485'. [ 912.348397][ T2224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.484447][ T2224] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.571122][T27989] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.578390][T27989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.681871][T27989] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.689156][T27989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.953282][ T2224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.179098][ T2224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.421367][ T2224] veth0_vlan: entered promiscuous mode [ 913.514273][ T2224] veth1_vlan: entered promiscuous mode [ 913.710792][ T2224] veth0_macvtap: entered promiscuous mode [ 913.787827][ T2224] veth1_macvtap: entered promiscuous mode [ 913.882234][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.975262][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.051545][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.110033][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.158817][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.235148][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.276734][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.325536][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.365218][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.415220][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.465590][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.515140][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.572787][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.618117][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.671635][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.724325][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.776093][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.832177][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.872914][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.931060][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.971955][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.026259][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.080025][ T2224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.150389][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.239269][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.305318][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.355206][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.411488][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.507190][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.560950][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.610546][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.666159][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.745646][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.778890][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.830719][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.871458][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.928796][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.985689][ T5283] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 916.005166][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.053417][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.097196][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.157004][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.197064][ T5283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.217131][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.252485][ T5283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 916.294730][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.310558][ T5283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 916.358336][ T2224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.375300][ T5283] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 916.411048][ T2224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.447678][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.477373][ T2587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 916.506549][ T2224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.542218][ T5283] hub 5-1:1.0: bad descriptor, ignoring hub [ 916.608154][ T5283] hub 5-1:1.0: probe with driver hub failed with error -5 [ 916.648657][ T2224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.675700][ T5283] cdc_wdm 5-1:1.0: skipping garbage [ 916.703678][ T5283] cdc_wdm 5-1:1.0: skipping garbage [ 916.709448][ T2224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.747991][ T5283] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 916.789420][ T2224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.805497][ T5283] cdc_wdm 5-1:1.0: Unknown control protocol [ 916.829479][ T2224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.844203][ T29] audit: type=1326 audit(1728938755.690:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.2.13502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e1f17dff9 code=0x0 [ 916.907384][ T5283] usb 5-1: USB disconnect, device number 71 [ 917.230820][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.284936][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.381185][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.407504][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.553677][ T2570] warn_alloc: 3 callbacks suppressed [ 917.553699][ T2570] syz.1.13492: vmalloc error: size 3268608, failed to allocated page array size 6384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 917.658794][ T2570] CPU: 0 UID: 0 PID: 2570 Comm: syz.1.13492 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 917.669645][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 917.679740][ T2570] Call Trace: [ 917.683047][ T2570] [ 917.685998][ T2570] dump_stack_lvl+0x241/0x360 [ 917.690714][ T2570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.695942][ T2570] ? __pfx__printk+0x10/0x10 [ 917.700584][ T2570] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 917.707032][ T2570] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 917.713577][ T2570] warn_alloc+0x278/0x410 [ 917.717940][ T2570] ? __pfx_warn_alloc+0x10/0x10 [ 917.722824][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 917.729012][ T2570] ? __get_vm_area_node+0x23d/0x270 [ 917.734279][ T2570] __vmalloc_node_range_noprof+0x691/0x13f0 [ 917.740228][ T2570] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 917.746246][ T2570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 917.752605][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 917.758792][ T2570] ? __get_vm_area_node+0x23d/0x270 [ 917.764032][ T2570] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 917.769957][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 917.776149][ T2570] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 917.781925][ T2570] ? rcu_is_watching+0x15/0xb0 [ 917.786722][ T2570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 917.793082][ T2570] ? rcu_is_watching+0x15/0xb0 [ 917.797874][ T2570] ? trace_kmalloc+0x1f/0xd0 [ 917.802495][ T2570] ? __kmalloc_node_noprof+0x247/0x440 [ 917.807994][ T2570] ? __kvmalloc_node_noprof+0x72/0x190 [ 917.813490][ T2570] __kvmalloc_node_noprof+0x142/0x190 [ 917.818897][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 917.825092][ T2570] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 917.831115][ T2570] ? tpg_update_mv_step+0x361/0x4f0 [ 917.836354][ T2570] vivid_update_format_cap+0x133c/0x2090 [ 917.842033][ T2570] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 917.848050][ T2570] ? __pfx___mutex_lock+0x10/0x10 [ 917.853116][ T2570] vidioc_s_input+0x374/0x1560 [ 917.857917][ T2570] ? video_devdata+0x6b/0xc0 [ 917.862553][ T2570] __video_do_ioctl+0xc23/0xdd0 [ 917.867453][ T2570] ? __pfx___video_do_ioctl+0x10/0x10 [ 917.872868][ T2570] ? __might_fault+0xc6/0x120 [ 917.877587][ T2570] video_usercopy+0x89b/0x1180 [ 917.882396][ T2570] ? __pfx___video_do_ioctl+0x10/0x10 [ 917.887806][ T2570] ? __pfx_video_usercopy+0x10/0x10 [ 917.893053][ T2570] ? __fget_files+0x29/0x470 [ 917.897679][ T2570] ? __fget_files+0x3f3/0x470 [ 917.902390][ T2570] v4l2_ioctl+0x189/0x1e0 [ 917.906752][ T2570] ? __pfx_v4l2_ioctl+0x10/0x10 [ 917.911639][ T2570] __se_sys_ioctl+0xf9/0x170 [ 917.916265][ T2570] do_syscall_64+0xf3/0x230 [ 917.920792][ T2570] ? clear_bhb_loop+0x35/0x90 [ 917.925498][ T2570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.931431][ T2570] RIP: 0033:0x7f82dad7dff9 [ 917.935883][ T2570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.955540][ T2570] RSP: 002b:00007f82dbb94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.963996][ T2570] RAX: ffffffffffffffda RBX: 00007f82daf35f80 RCX: 00007f82dad7dff9 [ 917.972003][ T2570] RDX: 00000000200000c0 RSI: 00000000c0045627 RDI: 0000000000000003 [ 917.980004][ T2570] RBP: 00007f82dadf0296 R08: 0000000000000000 R09: 0000000000000000 [ 917.988006][ T2570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.996011][ T2570] R13: 0000000000000000 R14: 00007f82daf35f80 R15: 00007f82db05fa28 [ 918.004209][ T2570] [ 918.277020][ T2599] cgroup: fork rejected by pids controller in /syz0 [ 918.820182][ T2611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13509'. [ 918.946382][ T2570] Mem-Info: [ 918.956630][ T2570] active_anon:7704 inactive_anon:0 isolated_anon:0 [ 918.956630][ T2570] active_file:14187 inactive_file:3578 isolated_file:0 [ 918.956630][ T2570] unevictable:768 dirty:182 writeback:0 [ 918.956630][ T2570] slab_reclaimable:5753 slab_unreclaimable:124673 [ 918.956630][ T2570] mapped:43506 shmem:1252 pagetables:1049 [ 918.956630][ T2570] sec_pagetables:0 bounce:0 [ 918.956630][ T2570] kernel_misc_reclaimable:0 [ 918.956630][ T2570] free:1245290 free_pcp:604 free_cma:0 [ 919.170154][ T2570] Node 0 active_anon:34916kB inactive_anon:0kB active_file:56744kB inactive_file:14304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:174020kB dirty:728kB writeback:0kB shmem:3472kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11808kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no [ 919.330893][ T2570] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no [ 919.487014][ T2570] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 919.699403][ T2570] lowmem_reserve[]: 0 2465 2466 0 0 [ 919.704746][ T2570] Node 0 DMA32 free:1037012kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:39300kB inactive_anon:0kB active_file:56632kB inactive_file:13828kB unevictable:1536kB writepending:748kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:2972kB local_pcp:2200kB free_cma:0kB [ 919.937476][ T2570] lowmem_reserve[]: 0 0 0 0 0 [ 919.942304][ T2570] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:260kB inactive_anon:0kB active_file:112kB inactive_file:476kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 919.987831][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.101604][ T2570] lowmem_reserve[]: 0 0 0 0 0 [ 920.134017][ T2570] Node 1 Normal free:3926940kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.285302][ T2570] lowmem_reserve[]: 0 0 0 0 0 [ 920.290135][ T2570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 920.426772][ T2570] Node 0 DMA32: 1382*4kB (UE) 1302*8kB (UME) 622*16kB (UME) 825*32kB (UME) 410*64kB (UME) 86*128kB (UME) 57*256kB (UME) 30*512kB (UME) 52*1024kB (UME) 33*2048kB (UM) 203*4096kB (UM) = 1071816kB [ 920.559836][ T2570] Node 0 Normal: 2*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 920.639832][ T2570] Node 1 Normal: 213*4kB (UME) 81*8kB (UME) 52*16kB (UME) 198*32kB (UME) 97*64kB (UME) 25*128kB (UME) 15*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 950*4096kB (UM) = 3926940kB [ 920.737572][ T2570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.806042][ T2570] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 920.874039][ T2570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.935898][ T2570] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 920.997597][ T2570] 19022 total pagecache pages [ 921.018076][ T2570] 0 pages in swap cache [ 921.046693][ T2570] Free swap = 124472kB [ 921.072708][ T2570] Total swap = 124996kB [ 921.099888][ T2570] 2097051 pages RAM [ 921.122748][ T2570] 0 pages HighMem/MovableOnly [ 921.156239][ T2570] 427075 pages reserved [ 921.189158][ T2570] 0 pages cma reserved [ 921.468348][T31901] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 921.480958][T31901] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 921.490726][T31901] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 921.502932][T31901] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 921.511460][T31901] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 921.556299][T31901] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 921.714198][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.735391][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 921.770219][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 921.783271][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 921.796639][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 921.804771][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 921.815586][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 922.135245][ T5283] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 922.321069][ T5283] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 922.341202][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.370770][ T5283] usb 5-1: Product: syz [ 922.384535][ T5283] usb 5-1: Manufacturer: syz [ 922.402063][ T5283] usb 5-1: SerialNumber: syz [ 922.432638][ T5283] usb 5-1: config 0 descriptor?? [ 922.688471][ T5283] hso 5-1:0.0: Failed to find BULK IN ep [ 922.714157][ T5283] usb-storage 5-1:0.0: USB Mass Storage device detected [ 923.056830][ T5283] usb 5-1: USB disconnect, device number 72 [ 923.665269][T31901] Bluetooth: hci10: command tx timeout [ 923.905390][T31901] Bluetooth: hci11: command tx timeout [ 923.985655][T31901] Bluetooth: hci0: command 0x0406 tx timeout [ 924.054188][T31901] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 924.067247][T31901] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 924.077053][T31901] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 924.089702][T31901] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 924.128136][T31901] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 924.137979][T31901] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 924.396853][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.504524][ T2647] batman_adv: batadv0: Adding interface: ipvlan1 [ 924.547266][ T2647] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.669742][ T2647] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 925.263455][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.745821][ T54] Bluetooth: hci10: command tx timeout [ 925.986358][T31901] Bluetooth: hci11: command tx timeout [ 926.226633][T31901] Bluetooth: hci12: command tx timeout [ 926.642177][ T2630] chnl_net:caif_netlink_parms(): no params data found [ 926.953000][ T52] bridge_slave_1: left allmulticast mode [ 926.975256][ T5308] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 927.005099][ T52] bridge_slave_1: left promiscuous mode [ 927.010871][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.223134][ T5308] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 927.270525][ T52] bridge_slave_0: left allmulticast mode [ 927.304403][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.348896][ T52] bridge_slave_0: left promiscuous mode [ 927.372756][ T5308] usb 3-1: Product: syz [ 927.395884][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.407034][ T5308] usb 3-1: Manufacturer: syz [ 927.433615][ T5308] usb 3-1: SerialNumber: syz [ 927.488870][ T5308] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 927.567648][ T1981] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 927.825393][T31901] Bluetooth: hci10: command tx timeout [ 928.065616][T31901] Bluetooth: hci11: command tx timeout [ 928.309297][T31901] Bluetooth: hci12: command tx timeout [ 928.471774][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.543943][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.710217][ T1981] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 928.764375][ T1981] ath9k_htc: Failed to initialize the device [ 928.882751][ T1981] usb 3-1: ath9k_htc: USB layer deinitialized [ 929.040262][T22899] usb 3-1: USB disconnect, device number 74 [ 929.905658][T31901] Bluetooth: hci10: command tx timeout [ 930.148643][T31901] Bluetooth: hci11: command tx timeout [ 930.214516][ T2570] warn_alloc: 1 callbacks suppressed [ 930.214539][ T2570] syz.1.13492: vmalloc error: size 3268608, failed to allocated page array size 6384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 930.300724][ T2570] CPU: 0 UID: 0 PID: 2570 Comm: syz.1.13492 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 930.311577][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 930.321668][ T2570] Call Trace: [ 930.324971][ T2570] [ 930.327925][ T2570] dump_stack_lvl+0x241/0x360 [ 930.332638][ T2570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.337873][ T2570] ? __pfx__printk+0x10/0x10 [ 930.342507][ T2570] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 930.348955][ T2570] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 930.355500][ T2570] warn_alloc+0x278/0x410 [ 930.359870][ T2570] ? __pfx_warn_alloc+0x10/0x10 [ 930.364766][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 930.370963][ T2570] ? __get_vm_area_node+0x23d/0x270 [ 930.376213][ T2570] __vmalloc_node_range_noprof+0x691/0x13f0 [ 930.382170][ T2570] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 930.388211][ T2570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 930.394585][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 930.400776][ T2570] ? __get_vm_area_node+0x23d/0x270 [ 930.406015][ T2570] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 930.411940][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 930.418133][ T2570] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 930.423908][ T2570] ? rcu_is_watching+0x15/0xb0 [ 930.428709][ T2570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 930.435074][ T2570] ? rcu_is_watching+0x15/0xb0 [ 930.439872][ T2570] ? trace_kmalloc+0x1f/0xd0 [ 930.444514][ T2570] ? __kmalloc_node_noprof+0x247/0x440 [ 930.450025][ T2570] ? __kvmalloc_node_noprof+0x72/0x190 [ 930.455523][ T2570] __kvmalloc_node_noprof+0x142/0x190 [ 930.460938][ T2570] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 930.467140][ T2570] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 930.473164][ T2570] ? tpg_update_mv_step+0x361/0x4f0 [ 930.478405][ T2570] vivid_update_format_cap+0x133c/0x2090 [ 930.484088][ T2570] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 930.490123][ T2570] ? __pfx___mutex_lock+0x10/0x10 [ 930.495201][ T2570] vidioc_s_input+0x374/0x1560 [ 930.500012][ T2570] ? video_devdata+0x6b/0xc0 [ 930.504655][ T2570] __video_do_ioctl+0xc23/0xdd0 [ 930.509607][ T2570] ? __pfx___video_do_ioctl+0x10/0x10 [ 930.515029][ T2570] ? __might_fault+0xc6/0x120 [ 930.519744][ T2570] video_usercopy+0x89b/0x1180 [ 930.524563][ T2570] ? __pfx___video_do_ioctl+0x10/0x10 [ 930.529972][ T2570] ? __pfx_video_usercopy+0x10/0x10 [ 930.535222][ T2570] ? __fget_files+0x29/0x470 [ 930.539850][ T2570] ? __fget_files+0x3f3/0x470 [ 930.544569][ T2570] v4l2_ioctl+0x189/0x1e0 [ 930.548939][ T2570] ? __pfx_v4l2_ioctl+0x10/0x10 [ 930.553827][ T2570] __se_sys_ioctl+0xf9/0x170 [ 930.558460][ T2570] do_syscall_64+0xf3/0x230 [ 930.562996][ T2570] ? clear_bhb_loop+0x35/0x90 [ 930.567718][ T2570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.573656][ T2570] RIP: 0033:0x7f82dad7dff9 [ 930.578104][ T2570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.597750][ T2570] RSP: 002b:00007f82dbb94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.606207][ T2570] RAX: ffffffffffffffda RBX: 00007f82daf35f80 RCX: 00007f82dad7dff9 [ 930.614230][ T2570] RDX: 00000000200000c0 RSI: 00000000c0045627 RDI: 0000000000000003 [ 930.622234][ T2570] RBP: 00007f82dadf0296 R08: 0000000000000000 R09: 0000000000000000 [ 930.630237][ T2570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.638242][ T2570] R13: 0000000000000000 R14: 00007f82daf35f80 R15: 00007f82db05fa28 [ 930.646264][ T2570] [ 930.713509][T31901] Bluetooth: hci12: command tx timeout [ 930.954340][ T2570] Mem-Info: [ 930.980638][ T2570] active_anon:8054 inactive_anon:0 isolated_anon:0 [ 930.980638][ T2570] active_file:14187 inactive_file:3588 isolated_file:0 [ 930.980638][ T2570] unevictable:768 dirty:85 writeback:0 [ 930.980638][ T2570] slab_reclaimable:5753 slab_unreclaimable:126922 [ 930.980638][ T2570] mapped:50674 shmem:1260 pagetables:1104 [ 930.980638][ T2570] sec_pagetables:0 bounce:0 [ 930.980638][ T2570] kernel_misc_reclaimable:0 [ 930.980638][ T2570] free:1225175 free_pcp:648 free_cma:0 [ 931.137080][ T2570] Node 0 active_anon:32216kB inactive_anon:0kB active_file:56744kB inactive_file:14344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:202692kB dirty:336kB writeback:0kB shmem:3504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12052kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no [ 931.211066][ T2570] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB sec_pagetables:0kB all_unreclaimable? no [ 931.312379][ T2570] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.416901][ T2570] lowmem_reserve[]: 0 2465 2466 0 0 [ 931.444925][ T2570] Node 0 DMA32 free:961700kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:31964kB inactive_anon:0kB active_file:56632kB inactive_file:13868kB unevictable:1536kB writepending:336kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:1092kB local_pcp:196kB free_cma:0kB [ 931.501644][ T2570] lowmem_reserve[]: 0 0 0 0 0 [ 931.565464][ T2570] Node 0 Normal free:12kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:252kB inactive_anon:0kB active_file:112kB inactive_file:476kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 931.653630][ T2570] lowmem_reserve[]: 0 0 0 0 0 [ 931.685319][ T2570] Node 1 Normal free:3926940kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 931.774537][ T2570] lowmem_reserve[]: 0 0 0 0 0 [ 931.795337][ T2570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 931.843116][ T2570] Node 0 DMA32: 126*4kB (UME) 749*8kB (UME) 444*16kB (UME) 725*32kB (UME) 264*64kB (UME) 19*128kB (ME) 39*256kB (UME) 27*512kB (UME) 20*1024kB (UME) 12*2048kB (UM) 203*4096kB (UM) = 956480kB [ 931.903414][ T2570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 931.925220][ T2570] Node 1 Normal: 213*4kB (UME) 81*8kB (UME) 52*16kB (UME) 198*32kB (UME) 97*64kB (UME) 25*128kB (UME) 15*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 950*4096kB (UM) = 3926940kB [ 931.970316][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.984776][ T2570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.013815][ T2570] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 932.025519][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.044472][ T2570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.067855][ T52] bond0 (unregistering): Released all slaves [ 932.080144][ T2570] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 932.115443][ T2570] 19036 total pagecache pages [ 932.128840][ T2570] 0 pages in swap cache [ 932.152001][ T2570] Free swap = 124472kB [ 932.170923][ T2570] Total swap = 124996kB [ 932.188168][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.215678][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.226758][ T2570] 2097051 pages RAM [ 932.230629][ T2570] 0 pages HighMem/MovableOnly [ 932.255538][ T2570] 427075 pages reserved [ 932.265422][ T2570] 0 pages cma reserved [ 932.311208][ T2634] chnl_net:caif_netlink_parms(): no params data found [ 932.367387][ T2682] netlink: 'syz.4.13535': attribute type 10 has an invalid length. [ 932.394207][ T2682] netlink: 'syz.4.13535': attribute type 4 has an invalid length. [ 932.449629][ T2682] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13535'. [ 932.511080][ T2682] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 932.787409][T31901] Bluetooth: hci12: command tx timeout [ 933.194633][ T2707] netlink: 'syz.2.13539': attribute type 46 has an invalid length. [ 933.235563][ T2707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13539'. [ 933.809985][ T2645] chnl_net:caif_netlink_parms(): no params data found [ 934.066157][ T30] INFO: task syz.3.12679:32524 blocked for more than 143 seconds. [ 934.082395][ T30] Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 934.112167][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 934.135306][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 934.182679][ T30] task:syz.3.12679 state:D stack:27360 pid:32524 tgid:32523 ppid:28231 flags:0x00000004 [ 934.237962][ T30] Call Trace: [ 934.241316][ T30] [ 934.244279][ T30] __schedule+0x1895/0x4b30 [ 934.285383][ T30] ? __pfx___schedule+0x10/0x10 [ 934.290324][ T30] ? __pfx_lock_release+0x10/0x10 [ 934.345792][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.405304][T22890] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 934.431447][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 934.460907][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.471969][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.537352][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 934.543612][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 934.576240][ T30] ? schedule+0x90/0x320 [ 934.580574][ T30] schedule+0x14b/0x320 [ 934.584771][ T30] schedule_preempt_disabled+0x13/0x30 [ 934.625415][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.665221][T22890] usb 5-1: Using ep0 maxpacket: 16 [ 934.674035][ T8] usb 3-1: config 0 descriptor?? [ 934.717765][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 934.723659][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 934.775190][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 934.781445][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 934.836170][ T30] ? __might_fault+0xaa/0x120 [ 934.841151][ T30] ? __pfx_lock_release+0x10/0x10 [ 934.869959][ T30] down_write+0x1d7/0x220 [ 934.874411][ T30] ? __pfx_down_write+0x10/0x10 [ 934.915314][ T30] ? __might_fault+0xc6/0x120 [ 934.920122][ T30] blkdev_common_ioctl+0x150b/0x2480 [ 934.965368][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 934.971183][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 935.015226][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 935.021521][ T30] ? file_to_blk_mode+0xcc/0x140 [ 935.069684][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 935.074324][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 935.115366][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 935.120532][ T30] __se_sys_ioctl+0xf9/0x170 [ 935.162320][ T30] do_syscall_64+0xf3/0x230 [ 935.189254][ T30] ? clear_bhb_loop+0x35/0x90 [ 935.194101][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.235311][ T30] RIP: 0033:0x7f49f7b7dff9 [ 935.240035][ T30] RSP: 002b:00007f49f88f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.305148][ T30] RAX: ffffffffffffffda RBX: 00007f49f7d35f80 RCX: 00007f49f7b7dff9 [ 935.313282][ T30] RDX: 0000000020000100 RSI: 000000000000127f RDI: 0000000000000003 [ 935.386317][ T30] RBP: 00007f49f7bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 935.394448][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.455352][ T30] R13: 0000000000000000 R14: 00007f49f7d35f80 R15: 00007f49f7e5fa28 [ 935.505363][ T30] [ 935.523549][ T30] [ 935.523549][ T30] Showing all locks held in the system: [ 935.586513][ T30] 5 locks held by kworker/0:0/8: [ 935.615185][ T30] #0: ffff8880206e5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 935.694775][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 935.795235][ T30] #2: ffff88823be42990 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 935.849830][ T30] #3: ffff88805e7f9190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 935.925343][ T30] #4: ffff888027d9c668 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_configuration+0x4fb/0x1fb0 [ 936.005344][ T30] 1 lock held by khungtaskd/30: [ 936.015603][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 936.095137][ T30] 6 locks held by kworker/u8:3/52: [ 936.100375][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 936.205346][ T30] #1: ffffc90000bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 936.245219][ T30] #2: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 936.254836][ T30] #3: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 936.325288][ T30] #4: ffff88807cc60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 936.375144][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 936.415259][ T30] 3 locks held by kworker/u8:4/62: [ 936.420518][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 936.509374][ T30] #1: ffffc900015e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 936.585128][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 936.640014][ T30] 3 locks held by kworker/u8:5/999: [ 936.681013][ T30] #0: ffff88801ad4a148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 936.735810][ T30] #1: ffffc90003b87d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 936.797948][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 936.845763][ T30] 2 locks held by dhcpcd/4898: [ 936.850679][ T30] #0: ffffffff8fcb6fa8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 936.905224][ T30] #1: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 936.951672][ T30] 2 locks held by getty/4983: [ 936.979915][ T30] #0: ffff88814d0a00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 937.035485][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 937.085307][ T30] 6 locks held by kworker/1:5/5282: [ 937.090631][ T30] 3 locks held by kworker/0:5/5283: [ 937.124601][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 937.175902][ T30] #1: ffffc90003f67d00 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 937.235421][ T30] #2: ffffffff8ea343a8 (vmap_purge_lock){+.+.}-{3:3}, at: drain_vmap_area_work+0x17/0x40 [ 937.325273][ T30] 2 locks held by kworker/0:8/5352: [ 937.330644][ T30] 5 locks held by kworker/0:2/22890: [ 937.365177][ T30] #0: ffff8880206e5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 937.445130][ T30] #1: ffffc900032ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 937.514603][ T30] #2: ffff888144fa1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 937.575202][ T30] #3: ffff888144fa4510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 937.625184][ T30] #4: ffff888144b52768 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 937.695267][ T30] 2 locks held by kworker/0:3/22899: [ 937.700671][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 937.915350][ T30] #1: ffffc9000333fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 938.007773][ T30] 1 lock held by syz.3.9635/25485: [ 938.012995][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 938.135193][ T30] 3 locks held by kworker/u8:7/27989: [ 938.140682][ T30] #0: ffff88802e1ed148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 938.235335][ T30] #1: ffffc90017c1fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 938.325226][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 938.396046][ T30] 1 lock held by syz.3.12679/32524: [ 938.401510][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 938.485237][ T30] 1 lock held by syz.4.12731/32632: [ 938.490549][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 938.605252][ T30] 1 lock held by syz.2.13155/1331: [ 938.610480][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 938.743469][ T30] 1 lock held by syz.1.13222/1541: [ 938.765302][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 938.855264][ T30] 2 locks held by kworker/u8:8/1601: [ 938.885338][ T30] 1 lock held by syz.0.13347/1989: [ 938.890747][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 938.985300][ T30] 1 lock held by syz.3.13476/2532: [ 938.990721][ T30] #0: ffff88802348e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 939.085968][ T30] 1 lock held by syz-executor/2630: [ 939.091389][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 939.175055][ T30] 1 lock held by syz-executor/2634: [ 939.180563][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 939.272985][ T30] 1 lock held by syz-executor/2645: [ 939.315561][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 939.385196][ T30] 3 locks held by syz.2.13543/2719: [ 939.390459][ T30] #0: ffff888068c78d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 939.467058][ T30] #1: ffff888068c78078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 939.515360][ T30] #2: ffffffff8fe3eda8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 939.592321][ T30] 4 locks held by syz.4.13544/2721: [ 939.625203][ T30] #0: ffff888029534d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 939.695268][ T30] #1: ffff888029534078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 939.746279][ T30] #2: ffffffff8fe3eda8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 939.759710][ T8] usb 3-1: can't set config #0, error -110 [ 939.782255][T22890] usb 5-1: device descriptor read/all, error -110 [ 939.815410][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 939.910484][ T30] 1 lock held by udevd/2724: [ 939.936004][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 939.989436][T22890] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 939.998129][ T30] [ 940.000501][ T30] ============================================= [ 940.000501][ T30] [ 940.055128][ T30] NMI backtrace for cpu 0 [ 940.059530][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 940.070063][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 940.080166][ T30] Call Trace: [ 940.083478][ T30] [ 940.086437][ T30] dump_stack_lvl+0x241/0x360 [ 940.091154][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.096387][ T30] ? __pfx__printk+0x10/0x10 [ 940.101022][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 940.105996][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 940.111481][ T30] ? _printk+0xd5/0x120 [ 940.115675][ T30] ? __pfx__printk+0x10/0x10 [ 940.120298][ T30] ? __wake_up_klogd+0xcc/0x110 [ 940.125183][ T30] ? __pfx__printk+0x10/0x10 [ 940.129806][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 940.134866][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 940.140884][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 940.146923][ T30] watchdog+0xff4/0x1040 [ 940.151210][ T30] ? watchdog+0x1ea/0x1040 [ 940.155681][ T30] ? __pfx_watchdog+0x10/0x10 [ 940.160407][ T30] kthread+0x2f0/0x390 [ 940.164511][ T30] ? __pfx_watchdog+0x10/0x10 [ 940.169223][ T30] ? __pfx_kthread+0x10/0x10 [ 940.173848][ T30] ret_from_fork+0x4b/0x80 [ 940.178315][ T30] ? __pfx_kthread+0x10/0x10 [ 940.182937][ T30] ret_from_fork_asm+0x1a/0x30 [ 940.187754][ T30] [ 940.192649][ T30] Sending NMI from CPU 0 to CPUs 1: [ 940.199075][ C1] NMI backtrace for cpu 1 [ 940.199091][ C1] CPU: 1 UID: 0 PID: 5280 Comm: kworker/1:4 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 940.199112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 940.199123][ C1] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 940.199151][ C1] RIP: 0010:__asan_memset+0x8/0x50 [ 940.199178][ C1] Code: 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 <48> 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 [ 940.199192][ C1] RSP: 0018:ffffc90000a17b60 EFLAGS: 00000246 [ 940.199206][ C1] RAX: ffffffff8d0e08c1 RBX: ffff888041369700 RCX: 24d0954305af0f00 [ 940.199220][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888041369718 [ 940.199231][ C1] RBP: ffff888041369728 R08: ffffffff942c88f7 R09: 1ffffffff285911e [ 940.199244][ C1] R10: dffffc0000000000 R11: fffffbfff285911f R12: dffffc0000000000 [ 940.199256][ C1] R13: ffffffff8fd94800 R14: 0000000000000002 R15: 00000000ffffffff [ 940.199268][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 940.199283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.199295][ C1] CR2: 00007fffd9a74fc8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 940.199310][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 940.199321][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 940.199331][ C1] Call Trace: [ 940.199338][ C1] [ 940.199345][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 940.199366][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 940.199387][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 940.199405][ C1] ? nmi_handle+0x2a/0x5a0 [ 940.199429][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 940.199449][ C1] ? nmi_handle+0x14f/0x5a0 [ 940.199465][ C1] ? nmi_handle+0x2a/0x5a0 [ 940.199481][ C1] ? __asan_memset+0x8/0x50 [ 940.199500][ C1] ? default_do_nmi+0x63/0x160 [ 940.199519][ C1] ? exc_nmi+0x123/0x1f0 [ 940.199537][ C1] ? end_repeat_nmi+0xf/0x53 [ 940.199558][ C1] ? __asan_memset+0x8/0x50 [ 940.199577][ C1] ? __asan_memset+0x8/0x50 [ 940.199597][ C1] ? __asan_memset+0x8/0x50 [ 940.199617][ C1] [ 940.199623][ C1] [ 940.199629][ C1] dst_init+0x14a/0x490 [ 940.199652][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 940.199673][ C1] dst_alloc+0x14f/0x190 [ 940.199689][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 940.199718][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 940.199738][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 940.199758][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 940.199779][ C1] ? __pfx_lock_release+0x10/0x10 [ 940.199798][ C1] ? kthread+0x2f0/0x390 [ 940.199818][ C1] ip_route_output_flow+0x29/0x140 [ 940.199839][ C1] ip_route_me_harder+0x80d/0x1300 [ 940.199864][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 940.199884][ C1] ? trace_kmalloc+0x1f/0xd0 [ 940.199902][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 940.199931][ C1] synproxy_send_tcp+0x356/0x6c0 [ 940.199955][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 940.199980][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 940.200001][ C1] ? synproxy_pernet+0x45/0x270 [ 940.200023][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 940.200045][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 940.200066][ C1] ? nf_ip_checksum+0x13a/0x500 [ 940.200089][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 940.200111][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 940.200133][ C1] ? __pfx_validate_chain+0x10/0x10 [ 940.200155][ C1] nft_do_chain+0x4ad/0x1da0 [ 940.200181][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 940.200199][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 940.200231][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 940.200250][ C1] nft_do_chain_inet+0x418/0x6b0 [ 940.200273][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 940.200292][ C1] ? ipt_do_table+0x312/0x1860 [ 940.200319][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 940.200337][ C1] nf_hook_slow+0xc3/0x220 [ 940.200356][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 940.200373][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 940.200390][ C1] NF_HOOK+0x29e/0x450 [ 940.200408][ C1] ? NF_HOOK+0x9a/0x450 [ 940.200423][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 940.200440][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 940.200460][ C1] ? ip_rcv_finish+0x406/0x560 [ 940.200477][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 940.200494][ C1] NF_HOOK+0x3a4/0x450 [ 940.200510][ C1] ? __lock_acquire+0x1384/0x2050 [ 940.200531][ C1] ? NF_HOOK+0x9a/0x450 [ 940.200546][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 940.200562][ C1] ? ip_rcv_core+0x801/0xd10 [ 940.200579][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 940.200599][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 940.200616][ C1] __netif_receive_skb+0x2bf/0x650 [ 940.200643][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 940.200663][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 940.200679][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 940.200700][ C1] ? __pfx_lock_release+0x10/0x10 [ 940.200719][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 940.200744][ C1] process_backlog+0x662/0x15b0 [ 940.200765][ C1] ? process_backlog+0x33b/0x15b0 [ 940.200787][ C1] ? __pfx_process_backlog+0x10/0x10 [ 940.200804][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 940.200825][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 940.200847][ C1] __napi_poll+0xcb/0x490 [ 940.200866][ C1] net_rx_action+0x89b/0x1240 [ 940.200894][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 940.200911][ C1] ? __run_timer_base+0x178/0x8e0 [ 940.200930][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 940.200965][ C1] handle_softirqs+0x2c5/0x980 [ 940.200985][ C1] ? do_softirq+0x11b/0x1e0 [ 940.201005][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 940.201027][ C1] do_softirq+0x11b/0x1e0 [ 940.201044][ C1] [ 940.201049][ C1] [ 940.201056][ C1] ? __pfx_do_softirq+0x10/0x10 [ 940.201074][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 940.201096][ C1] ? rcu_is_watching+0x15/0xb0 [ 940.201114][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 940.201133][ C1] ? wg_packet_send_queued_handshake_initiation+0x5b/0x350 [ 940.201153][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 940.201173][ C1] ? wg_packet_send_queued_handshake_initiation+0x5b/0x350 [ 940.201193][ C1] ? wg_packet_send_queued_handshake_initiation+0x2d0/0x350 [ 940.201214][ C1] wg_packet_tx_worker+0x705/0x810 [ 940.201232][ C1] ? wg_packet_tx_worker+0x25f/0x810 [ 940.201251][ C1] ? process_scheduled_works+0x976/0x1850 [ 940.201271][ C1] process_scheduled_works+0xa63/0x1850 [ 940.201302][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 940.201325][ C1] ? assign_work+0x364/0x3d0 [ 940.201345][ C1] worker_thread+0x870/0xd30 [ 940.201370][ C1] ? __kthread_parkme+0x169/0x1d0 [ 940.201392][ C1] ? __pfx_worker_thread+0x10/0x10 [ 940.201411][ C1] kthread+0x2f0/0x390 [ 940.201426][ C1] ? __pfx_worker_thread+0x10/0x10 [ 940.201445][ C1] ? __pfx_kthread+0x10/0x10 [ 940.201460][ C1] ret_from_fork+0x4b/0x80 [ 940.201479][ C1] ? __pfx_kthread+0x10/0x10 [ 940.201494][ C1] ret_from_fork_asm+0x1a/0x30 [ 940.201520][ C1] [ 941.155184][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 941.162106][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 941.172648][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 941.182740][ T30] Call Trace: [ 941.186043][ T30] [ 941.188998][ T30] dump_stack_lvl+0x241/0x360 [ 941.193705][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.198929][ T30] ? __pfx__printk+0x10/0x10 [ 941.203543][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 941.209562][ T30] ? vscnprintf+0x5d/0x90 [ 941.213930][ T30] panic+0x349/0x880 [ 941.217857][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 941.224046][ T30] ? __pfx_panic+0x10/0x10 [ 941.228496][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 941.233907][ T30] ? __irq_work_queue_local+0x137/0x410 [ 941.239517][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 941.244919][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 941.251103][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 941.257292][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 941.263489][ T30] watchdog+0x1033/0x1040 [ 941.267852][ T30] ? watchdog+0x1ea/0x1040 [ 941.272299][ T30] ? __pfx_watchdog+0x10/0x10 [ 941.277003][ T30] kthread+0x2f0/0x390 [ 941.281094][ T30] ? __pfx_watchdog+0x10/0x10 [ 941.285795][ T30] ? __pfx_kthread+0x10/0x10 [ 941.290405][ T30] ret_from_fork+0x4b/0x80 [ 941.294849][ T30] ? __pfx_kthread+0x10/0x10 [ 941.299457][ T30] ret_from_fork_asm+0x1a/0x30 [ 941.304257][ T30] [ 941.307613][ T30] Kernel Offset: disabled [ 941.311936][ T30] Rebooting in 86400 seconds..