Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. 1970/01/01 00:00:38 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:39 parsed 1 programs [ 42.547058][ T6529] cgroup: Unknown subsys name 'net' [ 42.650696][ T6529] cgroup: Unknown subsys name 'cpuset' [ 42.654391][ T6529] cgroup: Unknown subsys name 'rlimit' [ 42.886483][ T6529] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 52.878703][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 52.921021][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.921413][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.921568][ T6542] bridge_slave_0: entered allmulticast mode [ 52.922487][ T6542] bridge_slave_0: entered promiscuous mode [ 52.924539][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.924593][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.924688][ T6542] bridge_slave_1: entered allmulticast mode [ 52.925525][ T6542] bridge_slave_1: entered promiscuous mode [ 52.945019][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.947733][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.963328][ T6542] team0: Port device team_slave_0 added [ 52.964833][ T6542] team0: Port device team_slave_1 added [ 52.978722][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.978795][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.978828][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.981307][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.981335][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.981365][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.018316][ T6542] hsr_slave_0: entered promiscuous mode [ 53.018872][ T6542] hsr_slave_1: entered promiscuous mode [ 53.096621][ T6542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.101679][ T6542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.105227][ T6542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.109073][ T6542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.127009][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.127131][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.127441][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.127524][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.153230][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.160881][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.161880][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.172304][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.181220][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.181304][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.185235][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.185287][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.284077][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.305307][ T6542] veth0_vlan: entered promiscuous mode [ 53.309948][ T6542] veth1_vlan: entered promiscuous mode [ 53.322637][ T6542] veth0_macvtap: entered promiscuous mode [ 53.325371][ T6542] veth1_macvtap: entered promiscuous mode [ 53.334952][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.337011][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.341342][ T6542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.341416][ T6542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.341448][ T6542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.341478][ T6542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.413864][ T6542] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.781079][ T347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.860473][ T347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.940156][ T347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.030925][ T347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.956399][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.960647][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.974308][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.974369][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.493748][ T6622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.495007][ T6622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.495486][ T6622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.496211][ T6622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.496635][ T6622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:55 executed programs: 0 [ 55.860315][ T6093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.860985][ T6093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.861355][ T6093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.861938][ T6093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.862463][ T6093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.956596][ T6632] chnl_net:caif_netlink_parms(): no params data found [ 55.996026][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.996153][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.996284][ T6632] bridge_slave_0: entered allmulticast mode [ 55.997142][ T6632] bridge_slave_0: entered promiscuous mode [ 55.999181][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.999229][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.999347][ T6632] bridge_slave_1: entered allmulticast mode [ 56.000201][ T6632] bridge_slave_1: entered promiscuous mode [ 56.019853][ T6632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.021607][ T6632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.037419][ T6632] team0: Port device team_slave_0 added [ 56.040743][ T6632] team0: Port device team_slave_1 added [ 56.054528][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.054583][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.054619][ T6632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.055757][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.055782][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.055814][ T6632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.085648][ T6632] hsr_slave_0: entered promiscuous mode [ 56.086228][ T6632] hsr_slave_1: entered promiscuous mode [ 56.086577][ T6632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.086680][ T6632] Cannot create hsr debugfs directory [ 56.765776][ T347] bridge_slave_1: left allmulticast mode [ 56.768082][ T347] bridge_slave_1: left promiscuous mode [ 56.770245][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.776860][ T347] bridge_slave_0: left allmulticast mode [ 56.778086][ T347] bridge_slave_0: left promiscuous mode [ 56.778406][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.868738][ T6622] Bluetooth: hci0: command tx timeout [ 58.360763][ T347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.410454][ T347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.469617][ T347] bond0 (unregistering): Released all slaves [ 58.599433][ T347] hsr_slave_0: left promiscuous mode [ 58.599994][ T347] hsr_slave_1: left promiscuous mode [ 58.600485][ T347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.600546][ T347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.601329][ T347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.601376][ T347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.630510][ T347] veth1_macvtap: left promiscuous mode [ 58.638540][ T347] veth0_macvtap: left promiscuous mode [ 58.640310][ T347] veth1_vlan: left promiscuous mode [ 58.642268][ T347] veth0_vlan: left promiscuous mode [ 59.948020][ T6622] Bluetooth: hci0: command tx timeout [ 60.690068][ T347] team0 (unregistering): Port device team_slave_1 removed [ 60.900705][ T347] team0 (unregistering): Port device team_slave_0 removed [ 62.027993][ T6622] Bluetooth: hci0: command tx timeout [ 63.555310][ T6632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.557153][ T6632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.560153][ T6632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.563605][ T6632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.993776][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.001555][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.006508][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.006582][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.023413][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.023489][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.041366][ T6632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.044925][ T6632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.107930][ T6622] Bluetooth: hci0: command tx timeout [ 64.170681][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.310439][ T6632] veth0_vlan: entered promiscuous mode [ 64.313306][ T6632] veth1_vlan: entered promiscuous mode [ 64.325172][ T6632] veth0_macvtap: entered promiscuous mode [ 64.326867][ T6632] veth1_macvtap: entered promiscuous mode [ 64.332825][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.334541][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.335909][ T6632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.335948][ T6632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.335978][ T6632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.336008][ T6632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.432403][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.432462][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.447758][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.450569][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.831084][ T2405] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.831211][ T2405] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.848187][ T2327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.998060][ T2327] usb 1-1: Using ep0 maxpacket: 8 [ 65.002425][ T2327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.002516][ T2327] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 65.002552][ T2327] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 65.002581][ T2327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 66, changing to 7 [ 65.002617][ T2327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 41605, setting to 1024 [ 65.005234][ T2327] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 65.005271][ T2327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.005295][ T2327] usb 1-1: Product: syz [ 65.005 ** replaying previous printk message ** [ 65.005316][ T2327] usb 1-1: Manufacturer: syz [ 65.005337][ T2327] usb 1-1: SerialNumber: syz [ 65.010875][ T2327] usb 1-1: config 0 descriptor?? [ 65.017374][ T2327] smsusb:smsusb_probe: board id=2, interface number 0 [ 65.021220][ T2327] smsusb:siano_media_device_register: media controller created [ 65.023929][ T2327] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 65.023973][ T2327] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 65.024727][ T2327] ------------[ cut here ]------------ [ 65.024744][ T2327] WARNING: CPU: 1 PID: 2327 at mm/slub.c:4753 free_large_kmalloc+0x138/0x1f4 [ 65.041702][ T2327] Modules linked in: [ 65.042998][ T2327] CPU: 1 UID: 0 PID: 2327 Comm: kworker/1:2 Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT [ 65.046111][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.048944][ T2327] Workqueue: usb_hub_wq hub_event [ 65.050395][ T2327] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 65.052655][ T2327] pc : free_large_kmalloc+0x138/0x1f4 [ 65.054263][ T2327] lr : kfree+0x25c/0x474 [ 65.055476][ T2327] sp : ffff8000a0f66930 [ 65.056723][ T2327] x29: ffff8000a0f66930 x28: ffff80008ccf6ab8 x27: ffff0000d9c103f0 [ 65.058987][ T2327] x26: 1fffe0001b382001 x25: ffff0000cc7a5b80 x24: 1fffe00018e89c1e [ 65.061325][ T2327] x23: dfff800000000000 x22: ffff0000ec2e2000 x21: dfff800000000000 [ 65.063597][ T2327] x20: fffffdffc3b0b880 x19: fffffdffc3b0b880 x18: 00000000ffffffff [ 65.065774][ T2327] x17: ffff800093364000 x16: ffff80008aefc458 x15: 0000000000000001 [ 65.068109][ T2327] x14: 1fffe0001c22ed60 x13: 0000000000000000 x12: 0000000000000000 [ 65.070428][ T2327] x11: ffff60001c22ed61 x10: 0000000000ff0100 x9 : 00000000f8000000 [ 65.072757][ T2327] x8 : 00000000ff000000 x7 : ffff800086587b10 x6 : ffff80008657803c [ 65.074969][ T2327] x5 : ffff0000c5799358 x4 : ffff8000a0f667b8 x3 : ffff80008659beec [ 65.077268][ T2327] x2 : 0000000000000001 x1 : ffff80008ec64010 x0 : fffffdffc3b0b880 [ 65.079707][ T2327] Call trace: [ 65.080565][ T2327] free_large_kmalloc+0x138/0x1f4 (P) [ 65.082035][ T2327] kfree+0x25c/0x474 [ 65.083200][ T2327] usb_free_urb+0xd0/0x140 [ 65.084579][ T2327] smsusb_term_device+0x19c/0x32c [ 65.085927][ T2327] smsusb_probe+0x1490/0x1a04 [ 65.087283][ T2327] usb_probe_interface+0x584/0xa44 [ 65.088633][ T2327] really_probe+0x394/0x910 [ 65.089880][ T2327] __driver_probe_device+0x180/0x2d4 [ 65.091323][ T2327] driver_probe_device+0x78/0x330 [ 65.092681][ T2327] __device_attach_driver+0x290/0x4e0 [ 65.094244][ T2327] bus_for_each_drv+0x220/0x2b4 [ 65.095569][ T2327] __device_attach+0x26c/0x388 [ 65.096992][ T2327] device_initial_probe+0x24/0x34 [ 65.098501][ T2327] bus_probe_device+0x178/0x240 [ 65.099924][ T2327] device_add+0x71c/0xa60 [ 65.101138][ T2327] usb_set_configuration+0x1640/0x1bac [ 65.102666][ T2327] usb_generic_driver_probe+0x8c/0x144 [ 65.104281][ T2327] usb_probe_device+0x1a4/0x348 [ 65.105671][ T2327] really_probe+0x394/0x910 [ 65.106947][ T2327] __driver_probe_device+0x180/0x2d4 [ 65.108472][ T2327] driver_probe_device+0x78/0x330 [ 65.109869][ T2327] __device_attach_driver+0x290/0x4e0 [ 65.111411][ T2327] bus_for_each_drv+0x220/0x2b4 [ 65.112816][ T2327] __device_attach+0x26c/0x388 [ 65.114176][ T2327] device_initial_probe+0x24/0x34 [ 65.115572][ T2327] bus_probe_device+0x178/0x240 [ 65.116891][ T2327] device_add+0x71c/0xa60 [ 65.118133][ T2327] usb_new_device+0x7f0/0x1220 [ 65.119567][ T2327] hub_event+0x2148/0x3cf0 [ 65.120813][ T2327] process_one_work+0x7e8/0x155c [ 65.122261][ T2327] worker_thread+0x958/0xed8 [ 65.123536][ T2327] kthread+0x5fc/0x75c [ 65.124709][ T2327] ret_from_fork+0x10/0x20 [ 65.126020][ T2327] irq event stamp: 119130 [ 65.127298][ T2327] hardirqs last enabled at (119129): [] kasan_quarantine_put+0x1a0/0x1c8 [ 65.130262][ T2327] hardirqs last disabled at (119130): [] el1_brk64+0x1c/0x48 [ 65.132635][ T2327] softirqs last enabled at (118160): [] handle_softirqs+0xaf8/0xc88 [ 65.135279][ T2327] softirqs last disabled at (118151): [] __do_softirq+0x14/0x20 [ 65.137970][ T2327] ---[ end trace 0000000000000000 ]--- [ 65.141373][ T2327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c2e2 [ 65.141436][ T2327] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 65.141465][ T2327] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 65.141488][ T2327] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 65.141507][ T2327] page dumped because: Not a kmalloc allocation [ 65.144951][ T2327] smsusb:smsusb_probe: Device initialized with return code -22 [ 65.164604][ T2327] smsusb 1-1:0.0: probe with driver smsusb failed with error -22 [ 65.215846][ T2327] usb 1-1: USB disconnect, device number 2