last executing test programs: 26.172071178s ago: executing program 4 (id=10873): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 25.210715256s ago: executing program 4 (id=10875): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000080)=0xe6be, 0x4) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa7f, @mcast1, 0x5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000480)="a378bca5e00e39471524dfd491e96eabd8591717f52ad8ce188a323d8a7848067c39fddfbca45857285956f6b482c246c049b93850ef2f98f6dc366c02cab36a81199000c79135b2bcebdbdb45c8747b793bedd2812d54aca907016fa8fb8249aea9b9a5ab1e21f19b76c8402fac279b1aaaf7650d8dfbbf23913cc7443bb28213c6169600f1e949ed87aad401d5cec60fef181a4a2fc45246e44954e19eb85cbd338fa75d489972f5aafe6b62f7c1210148819f241dc531d2df2601092b610c540ac36d8d", 0xc5}, {&(0x7f0000000380)="d8e25e", 0x3}, {&(0x7f0000000580)="97eb1879ffb8284169e479b27f53faddeb5fb90dd08e015cd398833e43b1d676c9bbc9d13915e9e99a15da235270ac4fb55208042a576c3f7caf898494382233e2f78806f0c6ea6fe247623c2eeb9092bbdb5cce63cedd7f4aebe13143502de3e8ec31830977ed1526d3382955be51d269706b2973b086754eefe9438bd02614c8eca2d13d21a2feb972fdcb60811e4983d1dffa9c0b6e3dd8487f43db625647e0eee402bc5dd8eda0f1274f6cc8f94fc4448e886e28c995cdf506e98b9f522760e937f7127d818d14f5e8b066b3bb0e60e2c2cd7f130e8d56d776af4155b720e2fe944f4e16", 0xe6}, {&(0x7f0000006880)="a1ef0aaba1c28b391d7ea10bbe180fa6be9d7635c863e3ad6e60fcb9f602369b76f460f9de4306b634a7643858fb3c0ba79948b8e4f857c0740ca844a2c20c2451d1267065acf29ddb8c8e60951f3a46843fd37ea31205f6c4e7d1b1", 0x5c}, {&(0x7f00000006c0)="6289ec55d0e4c1b0745627f88d2e6dfaea85b6f1ab7d27a3c7beb0c7b824bb70035a68c14ddef53c97878f63601307c6a23ac3ec95907ceeb06347dcdaf2d82f074a7ed0fc5d4debd96c655e771e30dc45cf97dd9ff26b8cf45c2af6119235460bf1d2b18165db9f4e5d27e1e278023045c94b7d46214abc96848d47c1be17f92ec4d13c568d6a0691e103c7f7da0fb63fd1e1c48cab7b3089da1eb0a001406339ffde77", 0xa4}, {&(0x7f00000007c0)="396991a74ef4f9342047f817b74bdb4de92754c87606184b14cec94fd93e7a031565c0347793bae7eb7f89fe9e35fab412ccc523c07f8387c08f518be29d9a83b0b37da89c4fa2eb5c7f1afccf91d35d", 0x50}], 0x6, &(0x7f0000006900)=[@dstopts_2292={{0xe0, 0x29, 0x4, {0x87, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @generic={0x4, 0x5c, "20086d4afd50249b94cf72eebb225804b25d0e98aef3a76b22f243ef1379b0211ec08a55b1d9cfbf3042f24354a59088568bf94232970c913ed6a96bac3f29bbcbc2afdf5b03e4f54f2714737e30f7d86cb045b67a3f6e131a018632"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0x5, 0x45, "a65a120280cb8155ba818e088699ac722354bff86059c8794afda1dc7d5d165d41e03140b9687233463255df91ce13081e912fe362735525618d1223a80bc6c92f84276751"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)="221601af49c48b7fe03158d08e28047df2a03c97f3b42c01ae00f8473466e817085d0d7ca132f334b341e99ad9c8293d9c4146aaf4ff0168d4bbbb0e3e19abb843bada763131284d9464abcde7d4126e478480452a122eb5dd369ed0ae1909d4b3db7891a263ff9db847f51447fce1673a6452f00814f58f93a3d38d11de970501cd3854ba66af48cdf6b24ef847fd6e25a871545f968b923f2fcc469459a3088f992d386b7ce2724888a0427516ca9c9b652a9a48818c43f1087facf37b7d79adf11b3dfd1b870f29102317c6a5e0d9ac09121f16f29a84efba5e9884", 0xdd}], 0x1}}], 0x2, 0xc000) 24.963676684s ago: executing program 4 (id=10876): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 23.396550877s ago: executing program 4 (id=10890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0a0703000000000000000002000000080003400000000a0900010073797a30000000000c0006"], 0x5c}}, 0x0) 22.942162422s ago: executing program 4 (id=10894): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffc}}, {{0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 22.477728038s ago: executing program 4 (id=10896): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}]) 5.36144481s ago: executing program 3 (id=11057): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x97, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) 5.173293698s ago: executing program 0 (id=11058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x7fe9, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1}}}}, 0x30}}, 0x0) 5.126500475s ago: executing program 2 (id=11060): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 5.08454381s ago: executing program 3 (id=11061): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) 4.824479283s ago: executing program 0 (id=11062): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5, 0x2, 0x0, 0x100000}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0400f9f40700090401800020000000000000000000bcf4ab0600000000", 0x24) 4.787824676s ago: executing program 2 (id=11064): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 4.758552305s ago: executing program 3 (id=11065): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 4.436940265s ago: executing program 2 (id=11066): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4.384113417s ago: executing program 0 (id=11067): unshare(0x20040600) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) 4.235391558s ago: executing program 2 (id=11068): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close(r0) 4.219255602s ago: executing program 0 (id=11069): r0 = epoll_create1(0x80000) r1 = timerfd_create(0x0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 4.042759151s ago: executing program 0 (id=11070): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe000200e}) 3.920124141s ago: executing program 2 (id=11071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001200)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}}, 0x0) 3.867169607s ago: executing program 0 (id=11072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000001000000000000e7ffff"], 0xfdef) 3.520024638s ago: executing program 3 (id=11073): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14c8c, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 3.373070761s ago: executing program 3 (id=11074): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000300)={0xffffffff, 0x2, 0x1, 0xffffffff}) 1.872081348s ago: executing program 2 (id=11075): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.776023456s ago: executing program 1 (id=11076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.652695692s ago: executing program 1 (id=11077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_SIZE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 1.525538643s ago: executing program 1 (id=11078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 1.122483232s ago: executing program 1 (id=11079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) 1.004204971s ago: executing program 1 (id=11080): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfe43, 0x0, 0xffffffffffffff52, 0x0, r1}) 858.75685ms ago: executing program 1 (id=11081): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x1}, 0x10) write(r0, &(0x7f00000002c0)="1c0000001a005f0214f9d5f0fd8361ff812300000400683cd5740095", 0x1c) 0s ago: executing program 3 (id=11082): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.395295][ T4648] usb 3-1: config 0 descriptor?? [ 678.435087][T23865] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 678.628113][T23865] usb 4-1: Using ep0 maxpacket: 32 [ 678.693488][T23865] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 678.715004][T23865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.723159][T23865] usb 4-1: Product: syz [ 678.727693][T23865] usb 4-1: Manufacturer: syz [ 678.732328][T23865] usb 4-1: SerialNumber: syz [ 678.743609][T23865] usb 4-1: config 0 descriptor?? [ 678.757632][T23865] hub 4-1:0.0: bad descriptor, ignoring hub [ 678.764826][T23865] hub 4-1:0.0: probe with driver hub failed with error -5 [ 678.776655][T23865] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 678.838600][ T4648] elo 0003:04E7:0030.005A: item fetching failed at offset 5/7 [ 678.871100][ T4648] elo 0003:04E7:0030.005A: parse failed [ 678.885310][ T4648] elo 0003:04E7:0030.005A: probe with driver elo failed with error -22 [ 679.045015][ T5302] usb 3-1: USB disconnect, device number 112 [ 679.383009][T23865] gspca_vc032x: reg_r err -71 [ 679.387878][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.393194][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.399708][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.405534][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.410875][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.416597][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.421926][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.427628][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.432952][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.438818][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.444165][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.449866][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.455534][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.464098][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.469771][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.475380][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.480696][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.486462][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.491777][T23865] gspca_vc032x: I2c Bus Busy Wait 00 [ 679.497470][T23865] gspca_vc032x: Unknown sensor... [ 679.503083][T23865] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 679.536059][T23865] usb 4-1: USB disconnect, device number 21 [ 679.725145][ T5286] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 679.885291][ T5286] usb 2-1: Using ep0 maxpacket: 16 [ 679.893183][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.954014][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.964849][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 679.979198][ T5286] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 679.988585][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.999119][ T5286] usb 2-1: config 0 descriptor?? [ 680.098115][T26671] tipc: Enabling of bearer rejected, already enabled [ 680.369154][T26683] --map-set only usable from mangle table [ 680.491695][ T5286] cmedia_hs100b 0003:0D8C:0014.005B: item fetching failed at offset 0/2 [ 680.510387][ T5286] cmedia_hs100b 0003:0D8C:0014.005B: probe with driver cmedia_hs100b failed with error -22 [ 680.669689][T26699] netlink: 'syz.0.10087': attribute type 298 has an invalid length. [ 680.713365][ T5302] usb 2-1: USB disconnect, device number 30 [ 680.927125][T23865] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 681.156066][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.168516][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.182182][T23865] usb 4-1: New USB device found, idVendor=0463, idProduct=c537, bcdDevice=34.39 [ 681.195677][T23865] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 681.204827][T23865] usb 4-1: Manufacturer: syz [ 681.221900][T23865] usb 4-1: config 0 descriptor?? [ 681.646950][T23865] hid-generic 0003:0463:C537.005C: unknown main item tag 0x0 [ 681.666009][T23865] hid-generic 0003:0463:C537.005C: unknown main item tag 0x0 [ 681.731070][T23865] hid-generic 0003:0463:C537.005C: unknown main item tag 0x0 [ 681.747010][T23865] hid-generic 0003:0463:C537.005C: unknown main item tag 0x0 [ 681.754570][T23865] hid-generic 0003:0463:C537.005C: unknown main item tag 0x0 [ 681.771851][T23865] hid-generic 0003:0463:C537.005C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 681.869244][ T5286] usb 4-1: USB disconnect, device number 22 [ 681.876520][T26740] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10107'. [ 681.938442][ T29] audit: type=1326 audit(1728049915.519:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.030122][ T29] audit: type=1326 audit(1728049915.539:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.082255][ T29] audit: type=1326 audit(1728049915.539:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.205161][ T29] audit: type=1326 audit(1728049915.539:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.265178][ T29] audit: type=1326 audit(1728049915.549:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.314811][ T29] audit: type=1326 audit(1728049915.549:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.351518][ T29] audit: type=1326 audit(1728049915.549:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26742 comm="syz.4.10108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe655d7dff9 code=0x7ffc0000 [ 682.749763][T26774] random: crng reseeded on system resumption [ 683.755180][ T5286] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 683.942245][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.992318][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.016552][ T5286] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 684.026242][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.052372][ T5286] usb 5-1: config 0 descriptor?? [ 684.141773][T26826] CIFS: VFS: Malformed UNC in devname [ 684.496980][ T5286] a4tech 0003:09DA:022B.005D: item fetching failed at offset 3/5 [ 684.507698][ T5286] a4tech 0003:09DA:022B.005D: parse failed [ 684.523659][ T5286] a4tech 0003:09DA:022B.005D: probe with driver a4tech failed with error -22 [ 684.702981][T23865] usb 5-1: USB disconnect, device number 31 [ 684.840552][T26854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10159'. [ 684.965381][ T5302] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 685.095345][T26865] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10162'. [ 685.142251][ T5302] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=75.3e [ 685.152814][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.175980][ T5302] usb 4-1: Product: syz [ 685.180214][ T5302] usb 4-1: Manufacturer: syz [ 685.219023][ T5302] usb 4-1: SerialNumber: syz [ 685.247943][ T5302] usb 4-1: config 0 descriptor?? [ 685.256533][ T5302] gspca_main: etoms-2.14.0 probing 102c:6251 [ 685.543839][ T5302] usb 4-1: USB disconnect, device number 23 [ 685.901867][T26899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10180'. [ 685.994384][T26904] loop6: detected capacity change from 0 to 524287999 [ 686.055562][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.061920][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.142998][T26908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10184'. [ 686.686014][ T5280] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 686.847267][ T5280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.861329][ T5280] usb 4-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=7c.21 [ 686.886585][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.896191][ T5280] usb 4-1: Product: syz [ 686.901422][ T5280] usb 4-1: Manufacturer: syz [ 686.912084][ T5280] usb 4-1: SerialNumber: syz [ 686.927501][ T5280] usb 4-1: config 0 descriptor?? [ 687.144664][ T5280] usb 4-1: USB disconnect, device number 24 [ 687.375734][ T5302] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 687.567340][ T5302] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 687.576968][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.602879][ T5302] usb 5-1: config 0 descriptor?? [ 687.646806][ T5302] usb 5-1: Invalid firmware size=18. [ 687.893667][T26962] syz.1.10208 (26962): drop_caches: 4 [ 687.934556][ T5302] usb 5-1: USB disconnect, device number 32 [ 688.092419][T26921] syz.0.10190: vmalloc error: size 3633152, failed to allocated page array size 7096, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 688.121631][T26921] CPU: 0 UID: 0 PID: 26921 Comm: syz.0.10190 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 688.132570][T26921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 688.142675][T26921] Call Trace: [ 688.145993][T26921] [ 688.148957][T26921] dump_stack_lvl+0x241/0x360 [ 688.153705][T26921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.158953][T26921] ? __pfx__printk+0x10/0x10 [ 688.163603][T26921] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 688.170066][T26921] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 688.176720][T26921] warn_alloc+0x278/0x410 [ 688.181104][T26921] ? __pfx_warn_alloc+0x10/0x10 [ 688.186017][T26921] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 688.192218][T26921] ? __get_vm_area_node+0x23d/0x270 [ 688.197479][T26921] __vmalloc_node_range_noprof+0x691/0x13f0 [ 688.203443][T26921] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 688.209571][T26921] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 688.215953][T26921] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 688.222202][T26921] ? __get_vm_area_node+0x23d/0x270 [ 688.227470][T26921] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 688.233438][T26921] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 688.239643][T26921] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 688.245441][T26921] ? rcu_is_watching+0x15/0xb0 [ 688.250277][T26921] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 688.256668][T26921] ? rcu_is_watching+0x15/0xb0 [ 688.261505][T26921] ? trace_kmalloc+0x1f/0xd0 [ 688.265446][T26975] [U]  [ 688.266134][T26921] ? __kmalloc_node_noprof+0x247/0x440 [ 688.274767][T26921] ? __kvmalloc_node_noprof+0x72/0x190 [ 688.280293][T26921] __kvmalloc_node_noprof+0x142/0x190 [ 688.285723][T26921] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 688.291935][T26921] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 688.297969][T26921] ? tpg_update_mv_step+0x312/0x4f0 [ 688.303228][T26921] vivid_update_format_cap+0x133c/0x2090 [ 688.308926][T26921] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 688.314975][T26921] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 688.320864][T26921] __video_do_ioctl+0xc23/0xdd0 [ 688.325794][T26921] ? __pfx___video_do_ioctl+0x10/0x10 [ 688.331234][T26921] ? __might_fault+0xc6/0x120 [ 688.335965][T26921] video_usercopy+0x89b/0x1180 [ 688.340800][T26921] ? __pfx___video_do_ioctl+0x10/0x10 [ 688.346262][T26921] ? __pfx_video_usercopy+0x10/0x10 [ 688.351535][T26921] ? __fget_files+0x29/0x470 [ 688.356177][T26921] ? __fget_files+0x3f3/0x470 [ 688.360909][T26921] v4l2_ioctl+0x189/0x1e0 [ 688.365304][T26921] ? __pfx_v4l2_ioctl+0x10/0x10 [ 688.370231][T26921] __se_sys_ioctl+0xf9/0x170 [ 688.374888][T26921] do_syscall_64+0xf3/0x230 [ 688.379433][T26921] ? clear_bhb_loop+0x35/0x90 [ 688.384163][T26921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.390116][T26921] RIP: 0033:0x7ffaa377dff9 [ 688.394573][T26921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.414244][T26921] RSP: 002b:00007ffaa456d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.422721][T26921] RAX: ffffffffffffffda RBX: 00007ffaa3935f80 RCX: 00007ffaa377dff9 [ 688.430747][T26921] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 688.438766][T26921] RBP: 00007ffaa37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 688.446788][T26921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.454814][T26921] R13: 0000000000000000 R14: 00007ffaa3935f80 R15: 00007ffaa3a5fa28 [ 688.462855][T26921] [ 688.475589][T26921] Mem-Info: [ 688.481665][T26921] active_anon:4624 inactive_anon:1 isolated_anon:0 [ 688.481665][T26921] active_file:1989 inactive_file:2548 isolated_file:0 [ 688.481665][T26921] unevictable:768 dirty:265 writeback:0 [ 688.481665][T26921] slab_reclaimable:8217 slab_unreclaimable:107161 [ 688.481665][T26921] mapped:28818 shmem:1224 pagetables:991 [ 688.481665][T26921] sec_pagetables:0 bounce:0 [ 688.481665][T26921] kernel_misc_reclaimable:0 [ 688.481665][T26921] free:1301057 free_pcp:6308 free_cma:0 [ 688.541666][T26921] Node 0 active_anon:18496kB inactive_anon:4kB active_file:7904kB inactive_file:10184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115272kB dirty:1056kB writeback:0kB shmem:3360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10808kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no [ 688.578389][T26921] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 688.611351][T26921] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.639770][T26921] lowmem_reserve[]: 0 2465 2466 0 0 [ 688.645225][T26921] Node 0 DMA32 free:1286000kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18164kB inactive_anon:4kB active_file:7700kB inactive_file:9764kB unevictable:1536kB writepending:1056kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:2344kB local_pcp:1640kB free_cma:0kB [ 688.679384][T26921] lowmem_reserve[]: 0 0 0 0 0 [ 688.684213][T26921] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:232kB inactive_anon:0kB active_file:204kB inactive_file:420kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 688.685613][T23865] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 688.713200][T26921] lowmem_reserve[]: 0 0 0 0 0 [ 688.724171][T26921] Node 1 Normal free:3904384kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22356kB local_pcp:22356kB free_cma:0kB [ 688.753764][T26921] lowmem_reserve[]: 0 0 0 0 0 [ 688.758620][T26921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 688.774605][T26921] Node 0 DMA32: 60*4kB (UE) 215*8kB (UME) 528*16kB (UME) 429*32kB (UME) 333*64kB (UME) 202*128kB (ME) 116*256kB (UME) 58*512kB (ME) 26*1024kB (UM) 17*2048kB (UM) 267*4096kB (M) = 1285768kB [ 688.794763][T26921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 688.806620][T26921] Node 1 Normal: 206*4kB (UME) 69*8kB (UME) 38*16kB (UE) 200*32kB (UE) 85*64kB (UE) 27*128kB (UME) 6*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 946*4096kB (M) = 3904384kB [ 688.826610][T26921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.836329][T26921] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 688.847507][T26921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.857208][T26921] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 688.866734][T26921] 5764 total pagecache pages [ 688.873626][T26921] 1 pages in swap cache [ 688.877917][T26921] Free swap = 124084kB [ 688.882314][T26921] Total swap = 124996kB [ 688.918065][T26921] 2097051 pages RAM [ 688.922054][T26921] 0 pages HighMem/MovableOnly [ 688.928500][T26921] 427075 pages reserved [ 688.932782][T26921] 0 pages cma reserved [ 689.065212][T23865] usb 4-1: Using ep0 maxpacket: 16 [ 689.077783][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.089385][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.116587][T23865] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 689.134068][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.276341][T23865] usb 4-1: config 0 descriptor?? [ 689.685374][ T5302] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 689.727624][T23865] wacom 0003:056A:0084.005E: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0 [ 689.867908][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.893334][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.957259][ T5302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.991967][T23865] usb 4-1: USB disconnect, device number 25 [ 690.019108][ T5302] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 690.077391][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.116032][ T5302] usb 3-1: config 0 descriptor?? [ 690.578536][ T5302] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 690.645339][ T5302] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 690.688175][ T5302] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 690.733454][ T5302] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 690.790537][ T5302] prodikeys 0003:041E:2801.005F: unknown main item tag 0x0 [ 690.862473][ T5302] prodikeys 0003:041E:2801.005F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 690.979640][ T5302] usb 3-1: USB disconnect, device number 113 [ 692.036463][T27048] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10250'. [ 692.971171][ T29] audit: type=1326 audit(1728049926.539:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27074 comm="syz.4.10263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe655d7dff9 code=0x0 [ 693.757676][ T5302] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 693.905927][ T5286] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 693.927068][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.947014][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.975945][ T5302] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 693.996515][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.035444][ T5302] usb 4-1: config 0 descriptor?? [ 694.084433][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.109670][ T5286] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 694.133002][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.155069][ T5286] usb 3-1: config 0 descriptor?? [ 694.233478][ T29] audit: type=1326 audit(1728049927.809:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.256170][ T29] audit: type=1326 audit(1728049927.809:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.279516][ T29] audit: type=1326 audit(1728049927.849:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.350164][ T29] audit: type=1326 audit(1728049927.929:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.376480][ T29] audit: type=1326 audit(1728049927.929:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27131 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffaa37b00e5 code=0x7ffc0000 [ 694.401549][ T29] audit: type=1326 audit(1728049927.979:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.458239][ T29] audit: type=1326 audit(1728049928.039:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.487113][ T5302] glorious 0003:22D4:1503.0060: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 694.544679][ T29] audit: type=1326 audit(1728049928.039:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.577083][ T5286] petalynx 0003:18B1:0037.0061: unknown main item tag 0xd [ 694.602931][ T6578] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 694.620578][ T5286] petalynx 0003:18B1:0037.0061: unexpected long global item [ 694.636553][ T5286] petalynx 0003:18B1:0037.0061: parse failed [ 694.643051][ T5286] petalynx 0003:18B1:0037.0061: probe with driver petalynx failed with error -22 [ 694.666133][ T29] audit: type=1326 audit(1728049928.089:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27131 comm="syz.0.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 694.702263][ T5302] usb 4-1: USB disconnect, device number 26 [ 694.798256][ T5286] usb 3-1: USB disconnect, device number 114 [ 694.811121][ T6578] usb 5-1: config 0 has no interfaces? [ 694.819796][ T6578] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.841709][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.871395][ T6578] usb 5-1: config 0 descriptor?? [ 695.126495][ T5286] usb 5-1: USB disconnect, device number 33 [ 695.195253][ T4648] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 695.360037][ T4648] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 695.360079][ T4648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.360105][ T4648] usb 1-1: Product: syz [ 695.360124][ T4648] usb 1-1: Manufacturer: syz [ 695.360142][ T4648] usb 1-1: SerialNumber: syz [ 695.362253][ T4648] usb 1-1: config 0 descriptor?? [ 695.372027][ T4648] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 695.712876][ T4648] usb 1-1: USB disconnect, device number 27 [ 695.876059][T27171] netlink: 'syz.3.10308': attribute type 21 has an invalid length. [ 695.932272][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10310'. [ 695.943662][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10310'. [ 695.945312][T27171] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10308'. [ 696.061140][T27176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10311'. [ 696.357787][ T5302] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 696.531712][T27188] netlink: 'syz.3.10318': attribute type 29 has an invalid length. [ 696.545090][ T5302] usb 3-1: Using ep0 maxpacket: 16 [ 696.554414][T27188] netlink: 'syz.3.10318': attribute type 29 has an invalid length. [ 696.563779][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.588913][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.628030][ T5302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.697252][ T5302] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 696.741941][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.783124][ T5302] usb 3-1: config 0 descriptor?? [ 697.237762][ T5302] microsoft 0003:045E:07DA.0062: ignoring exceeding usage max [ 697.268985][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 697.316760][ T5302] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0062/input/input121 [ 697.369527][ T5302] microsoft 0003:045E:07DA.0062: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 697.453714][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 697.462748][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.485072][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.506497][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.587606][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 697.615075][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 697.623182][ T9] usb 1-1: Product: syz [ 697.627475][ T9] usb 1-1: Manufacturer: syz [ 697.674167][ T6578] usb 3-1: USB disconnect, device number 115 [ 697.698314][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 697.703591][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 697.720334][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 697.731486][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 698.016534][T23865] usb 1-1: USB disconnect, device number 28 [ 698.310183][T27252] netlink: 'syz.4.10346': attribute type 10 has an invalid length. [ 698.352518][T27252] bridge0: port 3(hsr0) entered disabled state [ 698.359024][T27252] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.389584][T27252] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 698.440177][T27252] bridge0: port 3(hsr0) entered blocking state [ 698.446544][T27252] bridge0: port 3(hsr0) entered forwarding state [ 698.453177][T27252] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.460416][T27252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.489295][T27252] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 698.536330][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10346'. [ 698.573163][T27259] hsr0: left allmulticast mode [ 698.581561][T27259] hsr_slave_0: left allmulticast mode [ 698.587471][T27259] hsr_slave_1: left allmulticast mode [ 698.598430][T27259] hsr0: left promiscuous mode [ 698.603438][T27259] bridge0: port 3(hsr0) entered disabled state [ 698.716151][T27259] batadv0: left allmulticast mode [ 698.721353][T27259] batadv0: left promiscuous mode [ 698.767544][T27259] bridge0: port 2(batadv0) entered disabled state [ 698.809029][T27259] bridge_slave_0: left allmulticast mode [ 698.817318][T27259] bridge_slave_0: left promiscuous mode [ 698.833420][T27259] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.883653][T27259] bond0: (slave bridge0): Releasing backup interface [ 698.891282][T27259] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 699.134170][ T4648] IPVS: starting estimator thread 0... [ 699.286135][T27287] IPVS: using max 15 ests per chain, 36000 per kthread [ 699.695082][ T5286] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 699.975218][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.988857][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.000027][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.013399][ T5286] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 700.022849][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.047599][ T5286] usb 4-1: config 0 descriptor?? [ 700.465096][T23865] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 700.516519][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.523732][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.577826][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.604008][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.625890][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.643324][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.655219][T23865] usb 1-1: Using ep0 maxpacket: 8 [ 700.666686][ T5286] glorious 0003:258A:0036.0063: unknown main item tag 0x0 [ 700.672461][T23865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.691697][T23865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.701912][T23865] usb 1-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 700.711325][T23865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.726045][T23865] usb 1-1: config 0 descriptor?? [ 700.774109][ T5286] glorious 0003:258A:0036.0063: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 700.863334][ T5286] usb 4-1: USB disconnect, device number 27 [ 701.142224][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.150609][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.158645][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.166779][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.173747][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.180829][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.187967][T23865] wacom 0003:056A:0302.0064: unknown main item tag 0x0 [ 701.195753][T23865] wacom 0003:056A:0302.0064: Unknown device_type for 'HID 056a:0302'. Assuming pen. [ 701.247530][T23865] wacom 0003:056A:0302.0064: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.0-1/input0 [ 701.262226][T23865] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0302.0064/input/input122 [ 701.345432][T23865] usb 1-1: USB disconnect, device number 29 [ 701.776929][ T6578] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 701.948446][ T6578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.979324][ T6578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.000758][ T6578] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 702.010006][ T6578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.038434][ T6578] usb 4-1: config 0 descriptor?? [ 702.500151][ T6578] dragonrise 0003:0079:0006.0065: item fetching failed at offset 2/5 [ 702.514631][ T6578] dragonrise 0003:0079:0006.0065: parse failed [ 702.562824][ T6578] dragonrise 0003:0079:0006.0065: probe with driver dragonrise failed with error -22 [ 702.757487][ T4648] usb 4-1: USB disconnect, device number 28 [ 703.865254][T27437] openvswitch: netlink: Actions may not be safe on all matching packets [ 703.925155][T23865] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 704.096933][T23865] usb 4-1: New USB device found, idVendor=0733, idProduct=2211, bcdDevice=6b.0d [ 704.106458][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.183505][T23865] usb 4-1: config 0 descriptor?? [ 704.208643][T23865] gspca_main: sunplus-2.14.0 probing 0733:2211 [ 704.455933][T23865] gspca_sunplus: reg_r err -71 [ 704.460824][T23865] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 704.497159][T23865] usb 4-1: USB disconnect, device number 29 [ 705.060931][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 705.060952][ T29] audit: type=1326 audit(1728049938.639:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27459 comm="syz.2.10430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ab77dff9 code=0x0 [ 705.133901][T27464] netlink: 'syz.0.10432': attribute type 2 has an invalid length. [ 705.485281][ T5286] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 705.591521][T27483] netlink: 'syz.1.10441': attribute type 10 has an invalid length. [ 705.613398][T27483] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.621086][T27483] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.643745][T27483] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.650981][T27483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.658530][T27483] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.665755][T27483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.674243][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 705.687297][ T5286] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 705.690432][T27483] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 705.696644][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.716118][ T5286] usb 1-1: config 0 descriptor?? [ 705.723802][T27485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10441'. [ 705.735981][T27485] bridge_slave_1: left allmulticast mode [ 705.741780][T27485] bridge_slave_1: left promiscuous mode [ 705.748203][T27485] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.760457][T27485] bridge_slave_0: left allmulticast mode [ 705.770406][T27485] bridge_slave_0: left promiscuous mode [ 705.779062][T27485] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.820352][T27485] bond0: (slave bridge0): Releasing backup interface [ 705.952794][ T5286] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 705.961433][ T5286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.975101][ T5286] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 705.983362][ T5286] usb 1-1: media controller created [ 706.006248][ T5286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.359966][ T5286] az6027: usb out operation failed. (-71) [ 706.367030][ T5286] stb0899_attach: Driver disabled by Kconfig [ 706.373182][ T5286] az6027: no front-end attached [ 706.373182][ T5286] [ 706.385717][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 706.396107][ T5286] az6027: usb out operation failed. (-71) [ 706.403121][ T5286] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 706.415284][ T5286] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input125 [ 706.429990][ T5286] dvb-usb: schedule remote query interval to 400 msecs. [ 706.439471][ T5286] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 706.459872][ T5286] usb 1-1: USB disconnect, device number 30 [ 706.521151][ T5286] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 706.547777][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.559953][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.578626][ T9] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 706.589662][ T6578] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 706.600174][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.615762][ T9] usb 3-1: config 0 descriptor?? [ 706.751777][ T6578] usb 2-1: Using ep0 maxpacket: 32 [ 706.759991][ T6578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.780378][ T6578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.795198][ T6578] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 706.809901][ T6578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.836412][ T6578] usb 2-1: config 0 descriptor?? [ 706.987605][T27499] netlink: 'syz.3.10448': attribute type 29 has an invalid length. [ 707.012890][T27499] netlink: 'syz.3.10448': attribute type 29 has an invalid length. [ 707.067339][ T9] hid-multitouch 0003:0EEF:72D0.0066: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0 [ 707.247581][T23865] usb 3-1: USB disconnect, device number 116 [ 707.304267][ T6578] belkin 0003:050D:3201.0067: item fetching failed at offset 5/7 [ 707.315555][ T6578] belkin 0003:050D:3201.0067: parse failed [ 707.321516][ T6578] belkin 0003:050D:3201.0067: probe with driver belkin failed with error -22 [ 707.554578][T23865] usb 2-1: USB disconnect, device number 31 [ 708.064341][T27521] netlink: 'syz.3.10457': attribute type 29 has an invalid length. [ 708.076089][T27521] netlink: 'syz.3.10457': attribute type 29 has an invalid length. [ 708.105576][T27522] netlink: 'syz.2.10459': attribute type 10 has an invalid length. [ 708.446272][T27534] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 708.790148][T27543] program syz.3.10470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.817139][T27542] tipc: Started in network mode [ 708.822073][T27542] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 708.832239][T27542] tipc: Enabled bearer , priority 10 [ 709.702972][T27579] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10486'. [ 709.714073][T27579] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10486'. [ 709.741135][T27579] netlink: 'syz.2.10486': attribute type 5 has an invalid length. [ 709.812977][T27579] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10486'. [ 709.851193][ T4648] tipc: Node number set to 15444650 [ 710.377773][T27609] netlink: 'syz.0.10501': attribute type 2 has an invalid length. [ 711.235178][ T4648] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 711.405351][ T4648] usb 2-1: Using ep0 maxpacket: 8 [ 711.422668][ T4648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.449061][ T4648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.472928][ T4648] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 711.489593][ T4648] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 711.498901][ T4648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.509995][ T4648] usb 2-1: config 0 descriptor?? [ 711.947908][ T4648] uclogic 0003:5543:0064.0068: item fetching failed at offset 5/7 [ 711.959098][ T4648] uclogic 0003:5543:0064.0068: parse failed [ 711.966628][ T4648] uclogic 0003:5543:0064.0068: probe with driver uclogic failed with error -22 [ 712.025258][T25598] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 712.158594][ T6578] usb 2-1: USB disconnect, device number 32 [ 712.188708][T25598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.220578][T25598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.249638][T25598] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 712.260157][T25598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.274171][T25598] usb 1-1: config 0 descriptor?? [ 712.699524][T25598] konepure 0003:1E7D:2DB4.0069: unknown main item tag 0x0 [ 712.711866][T25598] konepure 0003:1E7D:2DB4.0069: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 712.972529][ T9] usb 1-1: USB disconnect, device number 31 [ 713.727340][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10528'. [ 714.505906][T25598] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 714.721833][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 714.733457][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 714.743426][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 714.809378][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 714.827726][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 714.836893][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 714.890634][T25598] usb 1-1: Using ep0 maxpacket: 32 [ 714.911464][T25598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.922982][T25598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.939431][T25598] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 714.956172][T25598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.027359][T25598] usb 1-1: config 0 descriptor?? [ 715.469232][T25598] elecom 0003:056E:00E6.006A: item fetching failed at offset 2/5 [ 715.477885][T25598] elecom 0003:056E:00E6.006A: probe with driver elecom failed with error -22 [ 715.490702][ T4648] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 715.580200][T27701] chnl_net:caif_netlink_parms(): no params data found [ 715.670071][ T4648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.681313][ T4648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.691436][ T4648] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 715.700887][ T4648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.703829][T27724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.720181][T23865] usb 1-1: USB disconnect, device number 32 [ 715.731243][ T4648] usb 2-1: config 0 descriptor?? [ 715.929706][T27701] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.951847][T27701] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.959391][T27701] bridge_slave_0: entered allmulticast mode [ 715.973301][T27701] bridge_slave_0: entered promiscuous mode [ 715.984233][T27701] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.994027][T27701] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.012382][T27701] bridge_slave_1: entered allmulticast mode [ 716.020035][T27701] bridge_slave_1: entered promiscuous mode [ 716.039899][T27731] kernel read not supported for file /eth0 (pid: 27731 comm: syz.2.10553) [ 716.070623][ T29] audit: type=1800 audit(1728049949.649:405): pid=27731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10553" name="eth0" dev="mqueue" ino=83915 res=0 errno=0 [ 716.116898][T27701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.153279][T27701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.184514][ T4648] zeroplus 0003:0C12:0030.006B: unknown main item tag 0x0 [ 716.199001][ T4648] zeroplus 0003:0C12:0030.006B: unknown main item tag 0x0 [ 716.226231][ T4648] zeroplus 0003:0C12:0030.006B: unbalanced collection at end of report description [ 716.237228][ T4648] zeroplus 0003:0C12:0030.006B: parse failed [ 716.243383][ T4648] zeroplus 0003:0C12:0030.006B: probe with driver zeroplus failed with error -22 [ 716.346829][T27701] team0: Port device team_slave_0 added [ 716.370044][T27701] team0: Port device team_slave_1 added [ 716.450107][ T4648] usb 2-1: USB disconnect, device number 33 [ 716.564836][T27701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.575824][T27701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.663698][T27701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.685253][T27701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.692344][T27701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.738087][T27701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.887234][T27701] hsr_slave_0: entered promiscuous mode [ 716.921257][T27701] hsr_slave_1: entered promiscuous mode [ 716.935993][T23977] Bluetooth: hci4: command tx timeout [ 716.992800][T27701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.000935][T27701] Cannot create hsr debugfs directory [ 717.383017][T27701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.548834][T27701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.719222][T27701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.875173][T27701] tipc: Resetting bearer [ 717.891868][T27701] team0: Port device netdevsim0 removed [ 717.917337][T27701] tipc: Disabling bearer [ 717.925164][T27701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.234387][T27701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 718.258202][T27701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 718.329487][T27701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 718.370651][T27701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 718.553622][T27798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 718.560215][T27798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 718.633748][T27800] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 718.640344][T27800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 718.649019][T27800] vhci_hcd vhci_hcd.0: Device attached [ 718.657538][T27798] vhci_hcd vhci_hcd.0: Device attached [ 718.709791][T27802] vhci_hcd: connection closed [ 718.711751][T27799] vhci_hcd: connection closed [ 718.727849][T27701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.758891][T27701] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.768649][ T2898] vhci_hcd: stop threads [ 718.774480][ T2898] vhci_hcd: release socket [ 718.780380][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.787560][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.805060][ T2898] vhci_hcd: disconnect device [ 718.821796][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.829013][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.891050][ T2898] vhci_hcd: stop threads [ 718.902296][ T2898] vhci_hcd: release socket [ 718.935290][ T2898] vhci_hcd: disconnect device [ 719.005392][T23977] Bluetooth: hci4: command tx timeout [ 719.020998][T27701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.062424][T27701] veth0_vlan: entered promiscuous mode [ 719.079132][T27701] veth1_vlan: entered promiscuous mode [ 719.104019][T27701] veth0_macvtap: entered promiscuous mode [ 719.116069][T27701] veth1_macvtap: entered promiscuous mode [ 719.132372][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.143206][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.153441][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.164263][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.174480][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.185103][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.195682][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.206417][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.216799][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.227582][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.237516][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.248201][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.258256][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.268796][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.282533][T27701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.292821][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.303431][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.313480][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.324107][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.334999][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.346108][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.356189][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.366845][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.376755][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.387734][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.397683][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.408673][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.418684][T27701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.429338][T27701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.440899][T27701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.446596][ T5286] usb usb10-port1: attempt power cycle [ 719.472648][T27701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.486530][T27701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.495700][T27701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.510166][T27701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.526279][T27822] lo: entered allmulticast mode [ 719.688035][T27827] macvlan2: entered promiscuous mode [ 719.717811][T27827] macvlan2: entered allmulticast mode [ 719.788237][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.796607][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.919688][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.927736][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.116040][ T5286] usb usb10-port1: unable to enumerate USB device [ 720.425157][ T4648] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 720.585202][ T4648] usb 5-1: Using ep0 maxpacket: 8 [ 720.602868][ T4648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.627044][ T4648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.639827][ T4648] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 720.650814][ T4648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.671224][ T4648] usb 5-1: config 0 descriptor?? [ 721.037017][T27889] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 721.086751][T23977] Bluetooth: hci4: command tx timeout [ 721.091847][ T4648] waltop 0003:172F:0034.006C: collection stack underflow [ 721.105261][ T4648] waltop 0003:172F:0034.006C: item 0 0 0 12 parsing failed [ 721.113105][ T4648] waltop 0003:172F:0034.006C: probe with driver waltop failed with error -22 [ 721.311121][ T5286] usb 5-1: USB disconnect, device number 34 [ 721.363996][ T5280] IPVS: starting estimator thread 0... [ 721.465219][T27899] IPVS: using max 15 ests per chain, 36000 per kthread [ 721.666423][ T6578] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 721.827871][ T6578] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 721.877604][ T6578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.947811][ T6578] usb 2-1: config 0 descriptor?? [ 721.977655][T27913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 722.001455][ T6578] cp210x 2-1:0.0: cp210x converter detected [ 722.075352][ T5286] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 722.226315][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 722.237414][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.249268][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.262370][ T5286] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 722.274648][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.296069][ T5286] usb 3-1: config 0 descriptor?? [ 722.483008][T27928] x_tables: ip_tables: udp match: only valid for protocol 17 [ 722.648564][ T6578] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 722.666986][ T6578] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 722.682832][ T6578] usb 2-1: cp210x converter now attached to ttyUSB0 [ 722.719102][ T5286] logitech 0003:046D:C20E.006D: rdesc size test failed for formula gp [ 722.730680][ T5286] logitech 0003:046D:C20E.006D: unbalanced collection at end of report description [ 722.747633][ T6578] usb 2-1: USB disconnect, device number 34 [ 722.756672][ T5286] logitech 0003:046D:C20E.006D: parse failed [ 722.762911][ T5286] logitech 0003:046D:C20E.006D: probe with driver logitech failed with error -22 [ 722.779287][ T6578] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 722.789324][ T6578] cp210x 2-1:0.0: device disconnected [ 722.888771][ T4648] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 722.929283][ T5280] usb 3-1: USB disconnect, device number 117 [ 722.935767][T27938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10646'. [ 723.059490][ T4648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 723.088328][ T4648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.125171][ T4648] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 723.165896][T23977] Bluetooth: hci4: command tx timeout [ 723.171000][ T4648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.221483][ T4648] usb 5-1: config 0 descriptor?? [ 723.670101][ T4648] aquacomputer_d5next 0003:0C70:F0BD.006E: unknown main item tag 0xe [ 723.680461][ T4648] aquacomputer_d5next 0003:0C70:F0BD.006E: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 723.700395][T27965] openvswitch: netlink: Actions may not be safe on all matching packets [ 723.884440][T27971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10661'. [ 723.946335][ T5280] usb 5-1: USB disconnect, device number 35 [ 724.079747][T27981] random: crng reseeded on system resumption [ 724.757320][T27981] Unrecognized hibernate image header format! [ 724.766503][T27981] PM: hibernation: Image mismatch: architecture specific data [ 724.977399][ T5280] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 724.985007][ T5283] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 725.035073][ T6578] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 725.042840][ T5286] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 725.141088][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.153616][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.158623][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.166209][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.189846][ T5283] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 725.199606][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.200481][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.207895][ T6578] usb 5-1: Using ep0 maxpacket: 32 [ 725.210056][ T6578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 725.239747][ T5286] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 725.244953][ T5280] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 725.250753][ T5283] usb 4-1: config 0 descriptor?? [ 725.265803][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.277912][ T5286] usb 2-1: config 0 descriptor?? [ 725.285974][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.301039][ T6578] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 725.316014][ T5286] cp210x 2-1:0.0: cp210x converter detected [ 725.329723][ T6578] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 725.339788][ T6578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.347961][ T6578] usb 5-1: Product: syz [ 725.350540][ T5280] usb 1-1: config 0 descriptor?? [ 725.352212][ T6578] usb 5-1: Manufacturer: syz [ 725.361914][ T6578] usb 5-1: SerialNumber: syz [ 725.369624][ T6578] usb 5-1: config 0 descriptor?? [ 725.379990][ T6578] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.443946][ T6578] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 725.515417][T25103] udevd[25103]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.662308][ T6578] usb 5-1: USB disconnect, device number 36 [ 725.755359][ T5283] elecom 0003:056E:00FD.006F: unknown main item tag 0x0 [ 725.762464][ T5283] elecom 0003:056E:00FD.006F: unknown main item tag 0x0 [ 725.776973][ T5283] elecom 0003:056E:00FD.006F: unknown main item tag 0x0 [ 725.784058][ T5283] elecom 0003:056E:00FD.006F: unknown main item tag 0x0 [ 725.794646][ T5283] elecom 0003:056E:00FD.006F: unknown main item tag 0x0 [ 725.818051][ T5283] elecom 0003:056E:00FD.006F: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 726.001420][ T6578] usb 4-1: USB disconnect, device number 30 [ 726.007618][ T5286] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 726.017232][ T5286] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 726.033791][ T5280] hid-led 0003:1D34:000A.0070: probe with driver hid-led failed with error -71 [ 726.057193][ T5286] usb 2-1: cp210x converter now attached to ttyUSB0 [ 726.070469][ T5286] usb 2-1: USB disconnect, device number 35 [ 726.080681][ T5286] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 726.106074][ T5280] usb 1-1: USB disconnect, device number 33 [ 726.121509][ T5286] cp210x 2-1:0.0: device disconnected [ 727.055270][ T5280] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 727.235302][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 727.265833][ T5280] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 727.296173][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.317834][ T5280] usb 4-1: config 0 descriptor?? [ 727.327900][ T5280] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 727.615212][T23865] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 727.785917][T23865] usb 3-1: Using ep0 maxpacket: 16 [ 727.798258][T23865] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.886627][T23865] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.896714][T23865] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.909807][T23865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 727.916557][T23865] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 727.926007][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.945076][T23865] usb 3-1: config 0 descriptor?? [ 727.956798][ T5280] gspca_nw80x: reg_w err -71 [ 727.961548][ T5280] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 727.973033][ T5280] usb 4-1: USB disconnect, device number 31 [ 728.364326][T23865] hid-generic 0003:045E:05DA.0071: item fetching failed at offset 30/34 [ 728.375154][T23865] hid-generic 0003:045E:05DA.0071: probe with driver hid-generic failed with error -22 [ 728.583285][ T6578] usb 3-1: USB disconnect, device number 118 [ 729.006328][ T6578] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 729.179637][ T6578] usb 1-1: Using ep0 maxpacket: 16 [ 729.206511][ T6578] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 729.217700][ T6578] usb 1-1: config 0 has no interface number 0 [ 729.223855][ T6578] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.238608][ T6578] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.269364][ T6578] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 729.315394][ T6578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.356312][ T6578] usb 1-1: config 0 descriptor?? [ 729.417462][T28096] nftables ruleset with unbound set [ 729.605067][ T5286] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 729.791344][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.805262][ T6578] uclogic 0003:5543:0081.0072: interface is invalid, ignoring [ 729.814684][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.824673][ T5286] usb 3-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 729.834750][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.847337][ T5286] usb 3-1: config 0 descriptor?? [ 730.008470][T23865] usb 1-1: USB disconnect, device number 34 [ 730.146366][ T6578] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 730.187974][ T5280] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 730.299248][ T5286] wacom 0003:056A:009F.0073: hidraw0: USB HID v0.00 Device [HID 056a:009f] on usb-dummy_hcd.2-1/input0 [ 730.335178][ T6578] usb 2-1: Using ep0 maxpacket: 16 [ 730.346824][ T5280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.349777][ T6578] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 730.364944][ T5280] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 730.367005][ T6578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.386285][ T6578] usb 2-1: Product: syz [ 730.388654][ T5280] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 730.407254][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.410129][ T6578] usb 2-1: Manufacturer: syz [ 730.431027][ T6578] usb 2-1: SerialNumber: syz [ 730.441946][ T5280] usb 4-1: config 0 descriptor?? [ 730.472301][ T6578] r8152-cfgselector 2-1: Unknown version 0x0000 [ 730.478882][ T6578] r8152-cfgselector 2-1: config 0 descriptor?? [ 730.480794][T23865] usb 3-1: USB disconnect, device number 119 [ 730.891694][ T29] audit: type=1326 audit(1728049964.469:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 730.965172][ T29] audit: type=1326 audit(1728049964.499:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 730.965226][ T29] audit: type=1326 audit(1728049964.499:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 730.965267][ T29] audit: type=1326 audit(1728049964.499:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 730.965315][ T29] audit: type=1326 audit(1728049964.499:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 730.965353][ T29] audit: type=1326 audit(1728049964.499:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 730.965393][ T29] audit: type=1326 audit(1728049964.499:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28134 comm="syz.0.10738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa377dff9 code=0x7ffc0000 [ 731.025430][T28139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10740'. [ 731.141138][T23984] r8152-cfgselector 2-1: USB disconnect, device number 36 [ 731.278231][ T5280] Bluetooth: Can't get version to change to load ram patch err [ 731.278258][ T5280] Bluetooth: Loading sysconfig file failed [ 731.278291][ T5280] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 731.285133][ T5280] usb 4-1: USB disconnect, device number 32 [ 731.581956][T28150] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 731.582488][T28149] IPVS: stopping master sync thread 28150 ... [ 732.046584][T28168] batadv0: entered promiscuous mode [ 732.064084][T28165] batadv0: left promiscuous mode [ 732.145106][T28174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10756'. [ 732.185427][T23984] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 732.355397][T23984] usb 3-1: Using ep0 maxpacket: 16 [ 732.363906][T23984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.382682][T23984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.450739][T23984] usb 3-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 732.494203][T23984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.515117][ T6578] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 732.550756][T23984] usb 3-1: config 0 descriptor?? [ 732.665126][ T6578] usb 1-1: Using ep0 maxpacket: 16 [ 732.674232][ T6578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.687459][ T6578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.698795][T28198] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 732.740875][T28198] [U] J"—E:ÀÆ" [ 732.744537][T28198] [U] ª‡Ó [ 732.750279][ T6578] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 732.783823][ T6578] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 732.793677][ T6578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.807278][ T6578] usb 1-1: config 0 descriptor?? [ 732.891139][T28204] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10771'. [ 732.915542][T28204] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 732.980475][T23984] aquacomputer_d5next 0003:0C70:F012.0074: unknown main item tag 0x0 [ 732.992542][T23984] aquacomputer_d5next 0003:0C70:F012.0074: unknown main item tag 0x0 [ 733.008084][T23984] aquacomputer_d5next 0003:0C70:F012.0074: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.2-1/input0 [ 733.201545][T23984] usb 3-1: USB disconnect, device number 120 [ 733.234487][ T6578] microsoft 0003:045E:07DA.0075: unknown main item tag 0x0 [ 733.263381][ T6578] microsoft 0003:045E:07DA.0075: ignoring exceeding usage max [ 733.280869][ T6578] microsoft 0003:045E:07DA.0075: nested delimiters [ 733.296739][ T6578] microsoft 0003:045E:07DA.0075: item 0 4 2 10 parsing failed [ 733.304777][ T6578] microsoft 0003:045E:07DA.0075: parse failed [ 733.312566][ T6578] microsoft 0003:045E:07DA.0075: probe with driver microsoft failed with error -22 [ 733.328980][ T5286] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 733.379424][T28218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10778'. [ 733.431796][ T5285] usb 1-1: USB disconnect, device number 35 [ 733.510198][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 733.541309][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.555458][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.565650][ T5286] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 733.574726][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.588744][ T5286] usb 2-1: config 0 descriptor?? [ 734.014222][ T5286] savu 0003:1E7D:2D5A.0076: unbalanced delimiter at end of report description [ 734.033417][ T5286] savu 0003:1E7D:2D5A.0076: parse failed [ 734.042393][ T5286] savu 0003:1E7D:2D5A.0076: probe with driver savu failed with error -22 [ 734.259010][ T5286] usb 2-1: USB disconnect, device number 37 [ 734.370440][T28243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 735.181727][T28284] tipc: Enabling of bearer rejected, failed to enable media [ 735.645362][ T5285] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 735.681257][T28308] sg_write: data in/out 655360/132 bytes for SCSI command 0xf2-- guessing data in; [ 735.681257][T28308] program syz.3.10816 not setting count and/or reply_len properly [ 735.945604][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 735.962208][ T5285] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 735.976007][ T5285] usb 1-1: config 0 has no interface number 0 [ 735.982163][ T5285] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.999374][ T5285] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.013115][ T5285] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 736.022576][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 736.031009][ T5285] usb 1-1: Product: syz [ 736.035529][ T5285] usb 1-1: SerialNumber: syz [ 736.043531][ T5285] usb 1-1: config 0 descriptor?? [ 736.052870][ T5285] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input129 [ 736.205148][T23865] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 736.263789][ C0] cm109_urb_ctl_callback: 80 callbacks suppressed [ 736.263819][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 736.265435][ T5280] usb 1-1: USB disconnect, device number 36 [ 736.270282][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 736.376406][ T5280] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 736.395647][T23865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.433219][T23865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.510232][T23865] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 736.575325][T23865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.655736][T23865] usb 2-1: config 0 descriptor?? [ 737.093055][T23865] hid-led 0003:0FC5:B080.0077: unknown main item tag 0x0 [ 737.342960][T23865] hid-led 0003:0FC5:B080.0077: probe with driver hid-led failed with error -71 [ 737.367422][T23865] usb 2-1: USB disconnect, device number 38 [ 737.553572][T28339] Cannot find add_set index 0 as target [ 737.971311][T28324] warn_alloc: 3 callbacks suppressed [ 737.971335][T28324] syz.4.10824: vmalloc error: size 3485696, failed to allocated page array size 6808, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 738.023327][T28324] CPU: 1 UID: 0 PID: 28324 Comm: syz.4.10824 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 738.034281][T28324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 738.044469][T28324] Call Trace: [ 738.047785][T28324] [ 738.050746][T28324] dump_stack_lvl+0x241/0x360 [ 738.055472][T28324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.060725][T28324] ? __pfx__printk+0x10/0x10 [ 738.065377][T28324] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 738.071838][T28324] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 738.078399][T28324] warn_alloc+0x278/0x410 [ 738.082779][T28324] ? __pfx_warn_alloc+0x10/0x10 [ 738.087675][T28324] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 738.093874][T28324] ? __get_vm_area_node+0x23d/0x270 [ 738.099133][T28324] __vmalloc_node_range_noprof+0x691/0x13f0 [ 738.105090][T28324] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 738.111121][T28324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 738.117505][T28324] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 738.123710][T28324] ? __get_vm_area_node+0x23d/0x270 [ 738.128976][T28324] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 738.134912][T28324] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 738.141116][T28324] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 738.146906][T28324] ? rcu_is_watching+0x15/0xb0 [ 738.151717][T28324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 738.158087][T28324] ? rcu_is_watching+0x15/0xb0 [ 738.162896][T28324] ? trace_kmalloc+0x1f/0xd0 [ 738.167538][T28324] ? __kmalloc_node_noprof+0x247/0x440 [ 738.173050][T28324] ? __kvmalloc_node_noprof+0x72/0x190 [ 738.178561][T28324] __kvmalloc_node_noprof+0x142/0x190 [ 738.183988][T28324] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 738.190200][T28324] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 738.196245][T28324] ? tpg_update_mv_step+0x361/0x4f0 [ 738.201508][T28324] vivid_update_format_cap+0x133c/0x2090 [ 738.207212][T28324] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 738.213252][T28324] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 738.219152][T28324] __video_do_ioctl+0xc23/0xdd0 [ 738.224075][T28324] ? __pfx___video_do_ioctl+0x10/0x10 [ 738.229517][T28324] ? __might_fault+0xc6/0x120 [ 738.234251][T28324] video_usercopy+0x89b/0x1180 [ 738.239084][T28324] ? __pfx___video_do_ioctl+0x10/0x10 [ 738.244513][T28324] ? __pfx_video_usercopy+0x10/0x10 [ 738.249788][T28324] ? __fget_files+0x29/0x470 [ 738.254428][T28324] ? __fget_files+0x3f3/0x470 [ 738.259167][T28324] v4l2_ioctl+0x189/0x1e0 [ 738.263553][T28324] ? __pfx_v4l2_ioctl+0x10/0x10 [ 738.268455][T28324] __se_sys_ioctl+0xf9/0x170 [ 738.273101][T28324] do_syscall_64+0xf3/0x230 [ 738.277655][T28324] ? clear_bhb_loop+0x35/0x90 [ 738.282382][T28324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.288335][T28324] RIP: 0033:0x7f1fce97dff9 [ 738.292787][T28324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.312434][T28324] RSP: 002b:00007f1fcf795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.320905][T28324] RAX: ffffffffffffffda RBX: 00007f1fceb35f80 RCX: 00007f1fce97dff9 [ 738.328925][T28324] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 738.336938][T28324] RBP: 00007f1fce9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 738.344949][T28324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.352955][T28324] R13: 0000000000000000 R14: 00007f1fceb35f80 R15: 00007f1fcec5fa28 [ 738.360994][T28324] [ 738.372085][T28324] Mem-Info: [ 738.375321][T28324] active_anon:4752 inactive_anon:1 isolated_anon:0 [ 738.375321][T28324] active_file:2051 inactive_file:2589 isolated_file:0 [ 738.375321][T28324] unevictable:768 dirty:408 writeback:0 [ 738.375321][T28324] slab_reclaimable:6742 slab_unreclaimable:109178 [ 738.375321][T28324] mapped:32497 shmem:1249 pagetables:936 [ 738.375321][T28324] sec_pagetables:0 bounce:0 [ 738.375321][T28324] kernel_misc_reclaimable:0 [ 738.375321][T28324] free:1294533 free_pcp:5330 free_cma:0 [ 738.421122][T28324] Node 0 active_anon:19008kB inactive_anon:4kB active_file:8152kB inactive_file:10348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129988kB dirty:1632kB writeback:0kB shmem:3460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10952kB pagetables:3744kB sec_pagetables:0kB all_unreclaimable? no [ 738.435018][ T5285] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 738.454066][T28324] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 738.494505][T28324] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.516510][T28354] binder: 28353:28354 ioctl c0306201 0 returned -14 [ 738.534167][T28354] binder: 28353:28354 ioctl c0306201 20000240 returned -11 [ 738.545444][T28324] lowmem_reserve[]: 0 2465 2466 0 0 [ 738.550882][T28324] Node 0 DMA32 free:1254712kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18776kB inactive_anon:4kB active_file:7948kB inactive_file:9928kB unevictable:1536kB writepending:1632kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:3264kB local_pcp:784kB free_cma:0kB [ 738.586308][T28356] ======================================================= [ 738.586308][T28356] WARNING: The mand mount option has been deprecated and [ 738.586308][T28356] and is ignored by this kernel. Remove the mand [ 738.586308][T28356] option from the mount to silence this warning. [ 738.586308][T28356] ======================================================= [ 738.693137][T28324] lowmem_reserve[]: 0 0 0 0 0 [ 738.715017][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 738.722007][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.737584][T28324] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:232kB inactive_anon:0kB active_file:204kB inactive_file:420kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 738.778467][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.798472][T28324] lowmem_reserve[]: 0 0 0 0 0 [ 738.803351][T28324] Node 1 Normal free:3908416kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18332kB local_pcp:0kB free_cma:0kB [ 738.818474][ T5285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 738.847705][ T5285] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 738.857836][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.869260][ T5285] usb 1-1: config 0 descriptor?? [ 738.915041][T28324] lowmem_reserve[]: 0 0 0 0 0 [ 738.930728][T28324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 738.961074][T28324] Node 0 DMA32: 52*4kB (ME) 261*8kB (UME) 649*16kB (ME) 466*32kB (UME) 342*64kB (UME) 206*128kB (UME) 117*256kB (UME) 59*512kB (UME) 62*1024kB (UM) 30*2048kB (UM) 243*4096kB (UM) = 1256264kB [ 738.976996][ T29] audit: type=1326 audit(1728049972.539:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28359 comm="syz.3.10842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fef7dff9 code=0x7ffc0000 [ 738.987132][T28324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 739.025168][ T29] audit: type=1326 audit(1728049972.599:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28359 comm="syz.3.10842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f22fef7dff9 code=0x7ffc0000 [ 739.028871][T28324] Node 1 Normal: 208*4kB (UME) 70*8kB (UME) 37*16kB (UE) 202*32kB (UE) 87*64kB (UE) 27*128kB (UME) 17*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 946*4096kB (M) = 3908416kB [ 739.075881][T28324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.111124][T28324] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 739.134389][ T29] audit: type=1326 audit(1728049972.599:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28359 comm="syz.3.10842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fef7dff9 code=0x7ffc0000 [ 739.175334][T28324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.190244][ T29] audit: type=1326 audit(1728049972.599:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28359 comm="syz.3.10842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f22fef7dff9 code=0x7ffc0000 [ 739.193278][T28324] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 739.224540][ T29] audit: type=1326 audit(1728049972.599:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28359 comm="syz.3.10842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fef7dff9 code=0x7ffc0000 [ 739.235171][T28324] 5895 total pagecache pages [ 739.257546][T28324] 1 pages in swap cache [ 739.264142][T28324] Free swap = 124444kB [ 739.270975][T28324] Total swap = 124996kB [ 739.279020][T28324] 2097051 pages RAM [ 739.305739][ T5285] sony 0003:054C:0268.0078: item fetching failed at offset 6/70 [ 739.308864][T28324] 0 pages HighMem/MovableOnly [ 739.321279][ T5285] sony 0003:054C:0268.0078: parse failed [ 739.326922][T28324] 427075 pages reserved [ 739.340115][ T5285] sony 0003:054C:0268.0078: probe with driver sony failed with error -22 [ 739.349118][T28324] 0 pages cma reserved [ 739.405597][ T5283] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 739.535246][ T5285] usb 1-1: USB disconnect, device number 37 [ 739.573761][ T5283] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 739.596111][ T5283] usb 4-1: config 0 has no interface number 0 [ 739.602309][ T5283] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.638090][T25060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.654542][ T5283] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.667231][ T5283] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 739.678471][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.694478][ T5283] usb 4-1: config 0 descriptor?? [ 740.006168][T25060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.168655][ T5283] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0079/input/input130 [ 740.327453][T25060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.395111][ T5283] holtek_kbd 0003:04D9:A055.0079: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 740.412236][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.429274][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.438364][ T5283] usb 4-1: USB disconnect, device number 33 [ 740.448864][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.457396][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.481557][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 740.490033][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.586465][T28369] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 740.731507][T25060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.775218][T23984] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 741.010065][T23984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.020470][T23984] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 741.029742][T23984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.171830][T23984] usb 3-1: config 0 descriptor?? [ 741.182336][T23984] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 741.189475][T23984] usb 3-1: No valid video chain found. [ 741.438717][T25598] usb 3-1: USB disconnect, device number 121 [ 741.541285][T23865] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 741.717628][T23865] usb 4-1: Using ep0 maxpacket: 32 [ 741.757841][T23865] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.773508][T23865] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.821829][T23865] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 741.874855][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.931750][T23865] hub 4-1:4.0: USB hub found [ 742.170687][T23865] hub 4-1:4.0: 2 ports detected [ 742.199054][T23865] usb 4-1: selecting invalid altsetting 1 [ 742.204851][T23865] hub 4-1:4.0: Using single TT (err -22) [ 742.256102][T28386] fuse: Unknown parameter 'nol' [ 742.374591][T23865] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 742.390305][T23865] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 742.460807][T23865] usb 4-1: USB disconnect, device number 34 [ 742.539894][ T5229] Bluetooth: hci5: command tx timeout [ 742.568308][T25060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.593640][T25060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.618876][T25060] bond0 (unregistering): Released all slaves [ 743.433173][T28373] chnl_net:caif_netlink_parms(): no params data found [ 743.669585][T25060] hsr_slave_0: left promiscuous mode [ 743.795139][T25060] hsr_slave_1: left promiscuous mode [ 743.884797][T25060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.915935][T25060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.995811][T25060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.003281][T25060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.146359][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10866'. [ 744.277165][T25060] veth1_macvtap: left promiscuous mode [ 744.313410][T25060] veth0_macvtap: left promiscuous mode [ 744.345254][T25060] veth1_vlan: left promiscuous mode [ 744.381638][T25060] veth0_vlan: left promiscuous mode [ 744.606171][ T5229] Bluetooth: hci5: command tx timeout [ 744.748896][ T29] audit: type=1326 audit(1728049978.319:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28439 comm="syz.4.10873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fce97dff9 code=0x0 [ 744.925142][T23865] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 745.135722][T23865] usb 4-1: Using ep0 maxpacket: 16 [ 745.148390][T23865] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 745.158838][T23865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.165224][T23984] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 745.169590][T23865] usb 4-1: Product: syz [ 745.194362][T23865] usb 4-1: Manufacturer: syz [ 745.201738][T23865] usb 4-1: SerialNumber: syz [ 745.226136][T23865] r8152-cfgselector 4-1: Unknown version 0x0000 [ 745.232918][T23865] r8152-cfgselector 4-1: config 0 descriptor?? [ 745.325077][T23984] usb 3-1: Using ep0 maxpacket: 16 [ 745.339572][T23984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.353704][T23984] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 745.376585][T23984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.385612][T23984] usb 3-1: Product: syz [ 745.403899][T23984] usb 3-1: Manufacturer: syz [ 745.410057][T23984] usb 3-1: SerialNumber: syz [ 745.439922][T23984] usb 3-1: config 0 descriptor?? [ 745.453222][T23865] r8152-cfgselector 4-1: Needed 1 retries to read version [ 745.466328][T23865] r8152-cfgselector 4-1: Unknown version 0x0000 [ 745.469540][T23984] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 745.486772][T23865] r8152-cfgselector 4-1: bad CDC descriptors [ 745.718536][ T5283] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 745.873270][T25060] team0 (unregistering): Port device team_slave_1 removed [ 745.946483][T25060] team0 (unregistering): Port device team_slave_0 removed [ 746.093162][T23984] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 746.100209][T23984] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 746.130029][T23984] usb 3-1: USB disconnect, device number 122 [ 746.726415][ T5229] Bluetooth: hci5: command tx timeout [ 746.764059][T28463] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10882'. [ 746.786202][T28463] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 747.286157][T23984] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 747.300898][T25060] lo (unregistering): left allmulticast mode [ 747.375029][ T5283] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 747.468619][T23984] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 747.477919][T23984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.488267][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.496886][T23984] usb 4-1: Product: syz [ 747.501104][T23984] usb 4-1: Manufacturer: syz [ 747.501324][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.508993][T23984] usb 4-1: SerialNumber: syz [ 747.522394][T23984] usb 4-1: config 0 descriptor?? [ 747.543951][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.595635][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.614421][ T5283] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 747.625921][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.643245][T23984] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 036 [ 747.667690][ T5283] usb 3-1: config 0 descriptor?? [ 747.881522][T28373] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.891992][T28373] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.955540][T28373] bridge_slave_0: entered allmulticast mode [ 747.963489][T28373] bridge_slave_0: entered promiscuous mode [ 747.975513][T28373] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.983075][T28373] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.991459][T28373] bridge_slave_1: entered allmulticast mode [ 747.999787][T28373] bridge_slave_1: entered promiscuous mode [ 748.138537][ T5283] pyra 0003:1E7D:2CF6.007A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 748.169121][T28500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10895'. [ 748.238231][T23984] i2c i2c-1: failure reading functionality [ 748.252779][T23984] i2c i2c-1: connected i2c-tiny-usb device [ 748.262108][T28373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.310254][T23984] usb 4-1: USB disconnect, device number 36 [ 748.312039][T28373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.329508][ T5283] pyra 0003:1E7D:2CF6.007A: couldn't init struct pyra_device [ 748.348819][ T5283] pyra 0003:1E7D:2CF6.007A: couldn't install mouse [ 748.359214][ T5283] pyra 0003:1E7D:2CF6.007A: probe with driver pyra failed with error -71 [ 748.430935][ T5283] usb 3-1: USB disconnect, device number 123 [ 748.596421][T28373] team0: Port device team_slave_0 added [ 748.646313][T28373] team0: Port device team_slave_1 added [ 748.766989][ T5229] Bluetooth: hci5: command tx timeout [ 748.780336][T28373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.780358][T28373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.780388][T28373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.782393][T28373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.782411][T28373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.782440][T28373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.863966][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.909027][ C0] vkms_vblank_simulate: vblank timer overrun [ 749.048218][T28373] hsr_slave_0: entered promiscuous mode [ 749.073557][T28373] hsr_slave_1: entered promiscuous mode [ 749.090827][T28373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.099687][T28373] Cannot create hsr debugfs directory [ 749.191080][T28525] netlink: 'syz.2.10902': attribute type 1 has an invalid length. [ 749.575123][ T5237] Bluetooth: hci6: command 0x0406 tx timeout [ 750.326570][T28565] IPVS: sed: TCP 172.20.20.170:0 - no destination available [ 751.205330][T23865] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 751.342915][T28373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 751.375237][T23865] usb 4-1: Using ep0 maxpacket: 8 [ 751.382076][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 751.408266][T28373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 751.425402][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.435393][T23865] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 751.444796][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.456116][T23865] usb 4-1: config 0 descriptor?? [ 751.516356][T28373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 751.552513][T28373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 751.963181][T28373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.985949][T28373] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.065687][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.072870][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.108670][T23865] usb 4-1: string descriptor 0 read error: -71 [ 752.119389][T23865] uclogic 0003:256C:006E.007B: failed retrieving string descriptor #200: -71 [ 752.129054][T23865] uclogic 0003:256C:006E.007B: failed retrieving pen parameters: -71 [ 752.140690][T23865] uclogic 0003:256C:006E.007B: failed probing pen v2 parameters: -71 [ 752.149286][T23865] uclogic 0003:256C:006E.007B: failed probing parameters: -71 [ 752.158240][T23865] uclogic 0003:256C:006E.007B: probe with driver uclogic failed with error -71 [ 752.181876][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.181919][T23865] usb 4-1: USB disconnect, device number 37 [ 752.189115][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.298049][T28613] netlink: 'syz.0.10936': attribute type 3 has an invalid length. [ 752.323053][T28613] netlink: 766 bytes leftover after parsing attributes in process `syz.0.10936'. [ 752.514847][T28373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 752.515066][T28373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.536796][T28373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.565468][T28373] veth0_vlan: entered promiscuous mode [ 752.576976][T28373] veth1_vlan: entered promiscuous mode [ 752.614260][T28373] veth0_macvtap: entered promiscuous mode [ 752.627233][T28373] veth1_macvtap: entered promiscuous mode [ 752.644393][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.655013][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.665041][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.676014][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.686429][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.697278][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.707419][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.718296][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.728811][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.739510][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.749733][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.760493][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.770603][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.781502][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.798047][T28373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.856484][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.868432][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.880874][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.893354][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.903610][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.914832][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.928508][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.994076][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.045262][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.081080][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.113242][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.128357][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.138673][T28373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.151989][T28373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.164166][T28373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.240960][T28373] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.261685][T28373] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.326825][T28373] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.355000][T28373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.663588][T28661] hub 6-0:1.0: USB hub found [ 753.679069][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.679572][T28661] hub 6-0:1.0: 1 port detected [ 753.738890][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.790453][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.799504][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.016428][ T29] audit: type=1326 audit(1728049987.599:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.3.10954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22fef7dff9 code=0x0 [ 754.095151][ T29] audit: type=1326 audit(1728049987.599:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28671 comm="syz.3.10954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22fef7dff9 code=0x0 [ 754.463512][T28688] usb usb8: usbfs: process 28688 (syz.1.10958) did not claim interface 0 before use [ 755.545951][T28726] sg_write: data in/out 588840944/30 bytes for SCSI command 0x94-- guessing data in; [ 755.545951][T28726] program syz.1.10970 not setting count and/or reply_len properly [ 755.727948][T28726] program syz.1.10970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 756.166305][T28740] bridge0: port 3(veth0_to_bridge) entered blocking state [ 756.173638][T28740] bridge0: port 3(veth0_to_bridge) entered disabled state [ 756.215246][T28740] veth0_to_bridge: entered allmulticast mode [ 756.235479][T28740] veth0_to_bridge: entered promiscuous mode [ 756.275474][T28740] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.322602][T28740] bridge0: port 3(veth0_to_bridge) entered blocking state [ 756.329913][T28740] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 756.985212][T23865] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 757.159881][T28671] syz.3.10954 (28671) used greatest stack depth: 18448 bytes left [ 757.179540][T23865] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 757.219748][T28768] VFS: Mount too revealing [ 757.242173][T23865] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 757.275768][T23865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.728723][T23865] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 757.736896][T23865] usb 1-1: No valid video chain found. [ 757.973235][T23865] usb 1-1: USB disconnect, device number 38 [ 759.059210][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10994'. [ 759.166212][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 759.181472][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 759.193720][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 759.206221][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 759.214703][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 759.225936][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 759.753227][T28815] chnl_net:caif_netlink_parms(): no params data found [ 759.946899][T25598] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 760.099864][T28815] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.108504][T28815] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.116920][T28815] bridge_slave_0: entered allmulticast mode [ 760.124321][T28815] bridge_slave_0: entered promiscuous mode [ 760.132938][ T5286] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 760.148526][T28815] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.154965][T25598] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 760.156172][T28815] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.171698][T28815] bridge_slave_1: entered allmulticast mode [ 760.179824][T28815] bridge_slave_1: entered promiscuous mode [ 760.187303][T25598] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 760.214936][T25598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.223132][T25598] usb 3-1: Product: syz [ 760.231224][T25598] usb 3-1: Manufacturer: syz [ 760.236991][T25598] usb 3-1: SerialNumber: syz [ 760.246880][T25598] usb 3-1: config 0 descriptor?? [ 760.291181][T28815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.302142][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 760.310566][T28815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.322445][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.334973][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.376708][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 760.391998][T28853] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 760.423590][ T5286] usb 4-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 760.435057][ T5286] usb 4-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 760.443289][ T5286] usb 4-1: Manufacturer: syz [ 760.453859][ T5286] usb 4-1: config 0 descriptor?? [ 760.470079][T28815] team0: Port device team_slave_0 added [ 760.478746][T28815] team0: Port device team_slave_1 added [ 760.612832][T28815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.612856][T28815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.612888][T28815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.615534][T28815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.615554][T28815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.615617][T28815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.780554][T28815] hsr_slave_0: entered promiscuous mode [ 760.876179][T25598] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 760.876327][T25598] asix 3-1:0.0: probe with driver asix failed with error -71 [ 760.888746][T25598] usb 3-1: USB disconnect, device number 124 [ 760.917957][ T5286] wacom 0003:056A:2A22.007C: Unknown device_type for 'syz'. Ignoring. [ 760.942992][T28815] hsr_slave_1: entered promiscuous mode [ 760.949323][T28815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.949432][T28815] Cannot create hsr debugfs directory [ 761.130449][ T4648] usb 4-1: USB disconnect, device number 38 [ 761.330191][ T5237] Bluetooth: hci8: command tx timeout [ 761.374094][T28815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.379490][T28871] openvswitch: netlink: Actions may not be safe on all matching packets [ 761.592790][ T29] audit: type=1326 audit(1728049995.149:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ab77dff9 code=0x7ffc0000 [ 761.641354][T28815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.656333][ T29] audit: type=1326 audit(1728049995.149:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ab77dff9 code=0x7ffc0000 [ 761.680916][ T29] audit: type=1326 audit(1728049995.159:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd1ab77dff9 code=0x7ffc0000 [ 761.724044][ T29] audit: type=1326 audit(1728049995.159:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ab77dff9 code=0x7ffc0000 [ 761.748212][ T29] audit: type=1326 audit(1728049995.159:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fd1ab77dff9 code=0x7ffc0000 [ 761.772289][ T29] audit: type=1326 audit(1728049995.159:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28876 comm="syz.2.11023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ab77dff9 code=0x7ffc0000 [ 762.013783][T28815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.183684][T28815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.203956][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11032'. [ 762.214456][ T5286] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 762.338668][T28905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11037'. [ 762.366212][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 762.373423][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.384678][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.412667][ T5286] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 762.425150][T25598] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 762.465217][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.509641][T28815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 762.518944][ T5286] usb 4-1: config 0 descriptor?? [ 762.527343][T28815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 762.547203][T28815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 762.566003][T28815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 762.586015][T25598] usb 1-1: Using ep0 maxpacket: 32 [ 762.607707][T25598] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.636066][T25598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 762.647593][T25598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 762.658839][T25598] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 762.668156][T25598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.678917][T25598] usb 1-1: config 0 descriptor?? [ 762.696768][T28901] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 762.718248][T25598] hub 1-1:0.0: USB hub found [ 762.741540][T28911] binder: 28910:28911 ioctl c0306201 200003c0 returned -22 [ 762.781710][T28815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.804500][T28815] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.821270][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.828427][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.847742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.860496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.873428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.886549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.899556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.912599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.925700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.937015][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.938751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.944911][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.957727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.992788][T25598] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 763.010801][ T5286] waterforce 0003:1044:7A4D.007D: item fetching failed at offset 0/4 [ 763.217561][T25598] usbhid 1-1:0.0: can't add hid device: -71 [ 763.254659][T25598] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 763.328417][T25598] usb 1-1: USB disconnect, device number 39 [ 763.342973][T28815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.405958][ T5237] Bluetooth: hci8: command tx timeout [ 763.484111][T28815] veth0_vlan: entered promiscuous mode [ 763.531867][T28815] veth1_vlan: entered promiscuous mode [ 763.600421][T28815] veth0_macvtap: entered promiscuous mode [ 763.672972][T28815] veth1_macvtap: entered promiscuous mode [ 763.678708][ T5286] waterforce 0003:1044:7A4D.007D: hid parse failed with -22 [ 763.809601][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.875635][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.935588][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.990540][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.044764][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.105088][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.160434][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.212843][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.260133][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.312604][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.346604][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.389665][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.425389][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.467850][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.494280][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.518519][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.552479][T28815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.582087][T28923] bridge0: port 4(bond0) entered blocking state [ 764.590477][T28923] bridge0: port 4(bond0) entered disabled state [ 764.605276][T28923] bond0: entered allmulticast mode [ 764.619033][T28923] bond_slave_0: entered allmulticast mode [ 764.632361][T28923] bond_slave_1: entered allmulticast mode [ 764.663458][T28923] syz_tun: entered allmulticast mode [ 764.679033][T28923] geneve0: entered allmulticast mode [ 764.706029][T28923] bond0: entered promiscuous mode [ 764.718241][T28923] bond_slave_0: entered promiscuous mode [ 764.730991][T28923] bond_slave_1: entered promiscuous mode [ 764.745224][T28923] syz_tun: entered promiscuous mode [ 764.753212][T28923] geneve0: entered promiscuous mode [ 764.773936][T28923] bridge0: port 4(bond0) entered blocking state [ 764.780407][T28923] bridge0: port 4(bond0) entered forwarding state [ 764.836438][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.883753][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.917258][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 764.953103][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.989905][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.025963][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.060443][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.097781][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.130970][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.177440][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.214036][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.225914][ T5286] waterforce 0003:1044:7A4D.007D: probe with driver waterforce failed with error -22 [ 765.275840][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.345110][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.396837][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.445638][T28815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.485232][ T5237] Bluetooth: hci8: command tx timeout [ 765.491731][T28815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.540748][T28815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.668332][T28815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.747698][T28815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.799177][T28815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.849489][T28815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.143995][ T5286] usb 4-1: USB disconnect, device number 39 [ 766.260706][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11062'. [ 766.375818][ C0] net_ratelimit: 3263 callbacks suppressed [ 766.375843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.394770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.407830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.420910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.433991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.447038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.460067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.473702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.486726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.499779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.565308][ T5237] Bluetooth: hci8: command tx timeout [ 770.065120][ T5237] Bluetooth: hci7: command 0x0406 tx timeout [ 770.727000][T25060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.778512][T25060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.385852][ C0] net_ratelimit: 5065 callbacks suppressed [ 771.385884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.404850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.418062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.430955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.444017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.456973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.469990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.482927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.496537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.509682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.481148][T28985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.517818][T28985] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 772.936015][T28985] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 772.956347][T28985] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 773.319301][ T2898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.779227][ T2898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.538010][ T2898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.574292][T28985] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 774.595013][T28985] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 775.651717][ T30] INFO: task syz.0.9521:25436 blocked for more than 143 seconds. [ 775.665098][ T30] Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 775.672786][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.705606][ T30] task:syz.0.9521 state:D stack:27360 pid:25436 tgid:25435 ppid:23979 flags:0x00000004 [ 775.733286][ T30] Call Trace: [ 775.737241][ T30] [ 775.740229][ T30] __schedule+0x1895/0x4b30 [ 775.744813][ T30] ? __pfx___schedule+0x10/0x10 [ 775.762792][ T30] ? __pfx_lock_release+0x10/0x10 [ 775.768349][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 775.774401][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.794541][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 775.803922][ T30] ? schedule+0x90/0x320 [ 775.815080][ T30] schedule+0x14b/0x320 [ 775.819317][ T30] schedule_preempt_disabled+0x13/0x30 [ 775.824829][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 775.840883][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 775.859642][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 775.873313][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 775.883756][ T30] ? __might_fault+0xaa/0x120 [ 775.895153][ T30] ? __pfx_lock_release+0x10/0x10 [ 775.900274][ T30] down_write+0x1d7/0x220 [ 775.904657][ T30] ? __pfx_down_write+0x10/0x10 [ 775.924583][ T30] ? __might_fault+0xc6/0x120 [ 775.932641][ T30] blkdev_common_ioctl+0x150b/0x2480 [ 775.945098][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 775.950820][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 775.967273][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.973373][ T30] ? file_to_blk_mode+0xcc/0x140 [ 775.990523][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 776.001358][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 776.012311][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 776.025185][ T30] __se_sys_ioctl+0xf9/0x170 [ 776.029898][ T30] do_syscall_64+0xf3/0x230 [ 776.034454][ T30] ? clear_bhb_loop+0x35/0x90 [ 776.052806][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.064072][ T30] RIP: 0033:0x7f225ff7dff9 [ 776.075551][ T30] RSP: 002b:00007f2260d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.084140][ T30] RAX: ffffffffffffffda RBX: 00007f2260135f80 RCX: 00007f225ff7dff9 [ 776.103771][ T30] RDX: 0000000020000240 RSI: 000000000000127f RDI: 0000000000000003 [ 776.127105][ T30] RBP: 00007f225fff0296 R08: 0000000000000000 R09: 0000000000000000 [ 776.142314][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.161570][ T30] R13: 0000000000000000 R14: 00007f2260135f80 R15: 00007f226025fa28 [ 776.174819][ T30] [ 776.185672][ T30] [ 776.185672][ T30] Showing all locks held in the system: [ 776.193462][ T30] 3 locks held by kworker/u8:0/11: [ 776.212385][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 776.230363][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 776.255094][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 776.264213][ T30] 1 lock held by khungtaskd/30: [ 776.280885][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 776.298581][ T30] 3 locks held by kworker/u8:3/52: [ 776.303756][ T30] #0: ffff88802d16e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 776.321224][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 776.348937][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 776.365190][ T30] 7 locks held by kworker/u8:7/2898: [ 776.370547][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 776.395185][ C0] net_ratelimit: 8698 callbacks suppressed [ 776.395205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.398856][ T30] #1: [ 776.401428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.421853][ T30] ffffc90009b77d00 [ 776.428892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.434551][ T30] ( [ 776.445057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.450543][ T30] net_cleanup_work [ 776.459987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.460984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.474927][ T30] ){+.+.}-{0:0} [ 776.476207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.499877][ T30] , at: process_scheduled_works+0x976/0x1850 [ 776.504008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.515378][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 776.522548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.543412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.557954][ T30] #3: ffff8880615c10e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 776.585115][ T30] #4: ffff8880615c0250 (&devlink->lock_key#9){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 776.609720][ T30] #5: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 776.634997][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 776.654970][ T30] 4 locks held by kworker/u8:8/2952: [ 776.660317][ T30] #0: ffff8881436e5148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 776.705240][ T30] #1: ffffc90009d27d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 776.741008][ T30] #2: ffff8880329ea0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 776.757281][ T30] #3: ffff8880329ecb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 776.775276][ T30] 1 lock held by klogd/4674: [ 776.779926][ T30] 2 locks held by getty/4984: [ 776.784630][ T30] #0: ffff88802e2120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 776.819054][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 776.843901][ T30] 3 locks held by kworker/1:6/5282: [ 776.849830][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 776.875203][ T30] #1: ffffc900043d7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 776.901335][ T30] #2: ffffffff8ffa8ae8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 776.919262][ T30] 2 locks held by kworker/0:3/5283: [ 776.924520][ T30] 4 locks held by kworker/0:5/5285: [ 776.945115][ T30] 3 locks held by kworker/0:6/5286: [ 776.950470][ T30] 4 locks held by kworker/u8:4/25060: [ 776.971150][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 776.987544][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 777.005271][ T30] #2: ffff8880278e80d8 (&wb->list_lock){+.+.}-{2:2}, at: __wb_update_bandwidth+0x89/0x900 [ 777.026257][ T30] #3: ffffffff9a5e4c38 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0x164/0x440 [ 777.051422][ T30] 1 lock held by syz.1.9470/25333: [ 777.063309][ T30] #0: ffff8880236b14c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 777.085169][ T30] 1 lock held by syz.0.9521/25436: [ 777.090440][ T30] #0: ffff8880236b14c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 777.114140][ T30] 1 lock held by syz-executor/25742: [ 777.122464][ T30] #0: ffffffff8ffa8ae8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 777.138601][ T30] 1 lock held by syz.4.10425/27450: [ 777.143849][ T30] #0: ffff8880236b14c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 777.170399][ T30] 1 lock held by syz.4.10896/28507: [ 777.184410][ T30] #0: ffff8880236b14c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 777.205023][ T30] 3 locks held by syz-executor/28815: [ 777.210449][ T30] #0: ffffffff8fd374b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 777.231258][ T30] #1: ffffffff8fd37368 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 777.255155][ T30] #2: ffffffff8ffa8ae8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 777.275133][ T30] 2 locks held by syz.2.11075/28985: [ 777.280489][ T30] #0: ffffffff8ffa8ae8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a6/0x790 [ 777.302511][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 777.325368][ T30] [ 777.327760][ T30] ============================================= [ 777.327760][ T30] [ 777.343435][ T30] NMI backtrace for cpu 1 [ 777.347817][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 777.358360][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.368462][ T30] Call Trace: [ 777.371774][ T30] [ 777.374738][ T30] dump_stack_lvl+0x241/0x360 [ 777.379457][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.384694][ T30] ? __pfx__printk+0x10/0x10 [ 777.389343][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 777.394335][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.399837][ T30] ? _printk+0xd5/0x120 [ 777.404047][ T30] ? __pfx__printk+0x10/0x10 [ 777.408677][ T30] ? __wake_up_klogd+0xcc/0x110 [ 777.413571][ T30] ? __pfx__printk+0x10/0x10 [ 777.418219][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 777.423289][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 777.429317][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 777.435347][ T30] watchdog+0xff4/0x1040 [ 777.439644][ T30] ? watchdog+0x1ea/0x1040 [ 777.444107][ T30] ? __pfx_watchdog+0x10/0x10 [ 777.448822][ T30] kthread+0x2f0/0x390 [ 777.452925][ T30] ? __pfx_watchdog+0x10/0x10 [ 777.457643][ T30] ? __pfx_kthread+0x10/0x10 [ 777.462270][ T30] ret_from_fork+0x4b/0x80 [ 777.466823][ T30] ? __pfx_kthread+0x10/0x10 [ 777.471449][ T30] ret_from_fork_asm+0x1a/0x30 [ 777.476275][ T30] [ 777.480391][ T30] Sending NMI from CPU 1 to CPUs 0: [ 777.486287][ C0] NMI backtrace for cpu 0 [ 777.486301][ C0] CPU: 0 UID: 0 PID: 5285 Comm: kworker/0:5 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 777.486324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 777.486337][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 777.486366][ C0] RIP: 0010:preempt_count_add+0x3d/0x190 [ 777.486394][ C0] Code: c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d dc 96 d9 18 00 75 07 65 8b 05 5b a5 a0 7e <65> 01 1d 54 a5 a0 7e 48 c7 c0 40 c9 3c 9a 48 c1 e8 03 42 0f b6 04 [ 777.486412][ C0] RSP: 0018:ffffc900000067b0 EFLAGS: 00000246 [ 777.486428][ C0] RAX: 0000000080000101 RBX: 0000000000000001 RCX: ffffffff9a3cc903 [ 777.486442][ C0] RDX: dffffc0000000000 RSI: ffffffff815f2490 RDI: 0000000000000001 [ 777.486456][ C0] RBP: ffffc900000068d8 R08: 0000000000000019 R09: ffffc90000006990 [ 777.486470][ C0] R10: ffffc900000068f0 R11: ffffffff81809710 R12: dffffc0000000000 [ 777.486485][ C0] R13: ffffc900000068a0 R14: ffffffff815f2490 R15: dffffc0000000000 [ 777.486500][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 777.486516][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.486530][ C0] CR2: 000055556fdf3808 CR3: 000000001215c000 CR4: 00000000003526f0 [ 777.486547][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.486558][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.486571][ C0] Call Trace: [ 777.486578][ C0] [ 777.486586][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 777.486615][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 777.486645][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 777.486667][ C0] ? nmi_handle+0x2a/0x5a0 [ 777.486694][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 777.486719][ C0] ? nmi_handle+0x14f/0x5a0 [ 777.486738][ C0] ? nmi_handle+0x2a/0x5a0 [ 777.486758][ C0] ? preempt_count_add+0x3d/0x190 [ 777.486781][ C0] ? default_do_nmi+0x63/0x160 [ 777.486804][ C0] ? exc_nmi+0x123/0x1f0 [ 777.486825][ C0] ? end_repeat_nmi+0xf/0x53 [ 777.486843][ C0] ? worker_thread+0x870/0xd30 [ 777.486870][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 777.486895][ C0] ? worker_thread+0x870/0xd30 [ 777.486921][ C0] ? preempt_count_add+0x3d/0x190 [ 777.486944][ C0] ? preempt_count_add+0x3d/0x190 [ 777.486969][ C0] ? preempt_count_add+0x3d/0x190 [ 777.486992][ C0] [ 777.486999][ C0] [ 777.487006][ C0] ? worker_thread+0x870/0xd30 [ 777.487046][ C0] unwind_next_frame+0xb0/0x22d0 [ 777.487069][ C0] ? process_scheduled_works+0xa63/0x1850 [ 777.487096][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 777.487120][ C0] arch_stack_walk+0x11c/0x150 [ 777.487143][ C0] ? worker_thread+0x870/0xd30 [ 777.487171][ C0] stack_trace_save+0x118/0x1d0 [ 777.487192][ C0] ? mark_lock+0x9a/0x360 [ 777.487211][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 777.487239][ C0] kasan_save_track+0x3f/0x80 [ 777.487258][ C0] ? kasan_save_track+0x3f/0x80 [ 777.487275][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 777.487295][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 777.487319][ C0] ? skb_ext_add+0x1d6/0x910 [ 777.487338][ C0] ? br_nf_forward_ip+0xd8/0x7b0 [ 777.487357][ C0] ? nf_hook_slow+0xc3/0x220 [ 777.487380][ C0] ? NF_HOOK+0x2a7/0x460 [ 777.487396][ C0] ? __br_forward+0x489/0x660 [ 777.487412][ C0] ? maybe_deliver+0xb3/0x150 [ 777.487429][ C0] ? br_flood+0x2e4/0x660 [ 777.487444][ C0] ? br_handle_frame_finish+0x18ba/0x1fe0 [ 777.487464][ C0] ? br_nf_hook_thresh+0x472/0x590 [ 777.487482][ C0] ? br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 777.487503][ C0] ? br_nf_pre_routing_ipv6+0x379/0x770 [ 777.487524][ C0] ? br_handle_frame+0x9fd/0x1530 [ 777.487544][ C0] ? __netif_receive_skb_core+0x13e8/0x4570 [ 777.487566][ C0] ? __netif_receive_skb+0x12f/0x650 [ 777.487588][ C0] ? process_backlog+0x662/0x15b0 [ 777.487615][ C0] ? __napi_poll+0xcb/0x490 [ 777.487636][ C0] ? net_rx_action+0x89b/0x1240 [ 777.487659][ C0] ? handle_softirqs+0x2c5/0x980 [ 777.487683][ C0] ? do_softirq+0x11b/0x1e0 [ 777.487705][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 777.487729][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 777.487750][ C0] ? process_scheduled_works+0xa63/0x1850 [ 777.487775][ C0] ? worker_thread+0x870/0xd30 [ 777.487816][ C0] __kasan_slab_alloc+0x66/0x80 [ 777.487836][ C0] ? skb_ext_add+0x1d6/0x910 [ 777.487855][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 777.487882][ C0] skb_ext_add+0x1d6/0x910 [ 777.487905][ C0] br_nf_forward_ip+0xd8/0x7b0 [ 777.487925][ C0] ? __netif_receive_skb_core+0x13e8/0x4570 [ 777.487947][ C0] ? __netif_receive_skb+0x12f/0x650 [ 777.487969][ C0] ? process_backlog+0x662/0x15b0 [ 777.487993][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 777.488012][ C0] nf_hook_slow+0xc3/0x220 [ 777.488036][ C0] NF_HOOK+0x2a7/0x460 [ 777.488055][ C0] ? NF_HOOK+0x9f/0x460 [ 777.488071][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 777.488089][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 777.488111][ C0] __br_forward+0x489/0x660 [ 777.488127][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 777.488148][ C0] ? __pfx___br_forward+0x10/0x10 [ 777.488167][ C0] ? skb_clone+0x240/0x390 [ 777.488190][ C0] maybe_deliver+0xb3/0x150 [ 777.488209][ C0] br_flood+0x2e4/0x660 [ 777.488230][ C0] br_handle_frame_finish+0x18ba/0x1fe0 [ 777.488259][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.488279][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 777.488303][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 777.488327][ C0] ? ip6t_do_table+0x205/0x18a0 [ 777.488351][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 777.488379][ C0] ? ip6t_do_table+0x205/0x18a0 [ 777.488405][ C0] ? nf_hook_slow+0x175/0x220 [ 777.488428][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.488449][ C0] br_nf_hook_thresh+0x472/0x590 [ 777.488472][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 777.488493][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.488517][ C0] ? skb_push+0x97/0x100 [ 777.488539][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 777.488561][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.488586][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 777.488613][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 777.488634][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 777.488657][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 777.488678][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 777.488696][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 777.488717][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 777.488737][ C0] br_handle_frame+0x9fd/0x1530 [ 777.488761][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 777.488783][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 777.488803][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.488835][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 777.488855][ C0] __netif_receive_skb_core+0x13e8/0x4570 [ 777.488883][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 777.488904][ C0] ? ip6_mc_input+0xa1f/0xc30 [ 777.488925][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 777.488950][ C0] ? mark_lock+0x9a/0x360 [ 777.488970][ C0] ? __lock_acquire+0x1384/0x2050 [ 777.489009][ C0] __netif_receive_skb+0x12f/0x650 [ 777.489032][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 777.489060][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 777.489081][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.489109][ C0] ? __pfx_lock_release+0x10/0x10 [ 777.489136][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 777.489168][ C0] process_backlog+0x662/0x15b0 [ 777.489194][ C0] ? process_backlog+0x33b/0x15b0 [ 777.489233][ C0] ? __pfx_process_backlog+0x10/0x10 [ 777.489256][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 777.489284][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 777.489312][ C0] __napi_poll+0xcb/0x490 [ 777.489335][ C0] net_rx_action+0x89b/0x1240 [ 777.489368][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 777.489392][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 777.489433][ C0] handle_softirqs+0x2c5/0x980 [ 777.489459][ C0] ? do_softirq+0x11b/0x1e0 [ 777.489483][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 777.489511][ C0] do_softirq+0x11b/0x1e0 [ 777.489533][ C0] [ 777.489540][ C0] [ 777.489546][ C0] ? __pfx_do_softirq+0x10/0x10 [ 777.489570][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 777.489598][ C0] ? rcu_is_watching+0x15/0xb0 [ 777.489625][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 777.489648][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 777.489670][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 777.489695][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 777.489725][ C0] neigh_periodic_work+0xb35/0xd50 [ 777.489751][ C0] ? process_scheduled_works+0x976/0x1850 [ 777.489776][ C0] process_scheduled_works+0xa63/0x1850 [ 777.489813][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 777.489842][ C0] ? assign_work+0x364/0x3d0 [ 777.489868][ C0] worker_thread+0x870/0xd30 [ 777.489899][ C0] ? __kthread_parkme+0x169/0x1d0 [ 777.489927][ C0] ? __pfx_worker_thread+0x10/0x10 [ 777.489951][ C0] kthread+0x2f0/0x390 [ 777.489969][ C0] ? __pfx_worker_thread+0x10/0x10 [ 777.489993][ C0] ? __pfx_kthread+0x10/0x10 [ 777.490011][ C0] ret_from_fork+0x4b/0x80 [ 777.490037][ C0] ? __pfx_kthread+0x10/0x10 [ 777.490054][ C0] ret_from_fork_asm+0x1a/0x30 [ 777.490087][ C0] [ 778.435812][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 778.442722][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 778.453259][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 778.463347][ T30] Call Trace: [ 778.466659][ T30] [ 778.469623][ T30] dump_stack_lvl+0x241/0x360 [ 778.474344][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.479608][ T30] ? __pfx__printk+0x10/0x10 [ 778.484243][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 778.490282][ T30] ? vscnprintf+0x5d/0x90 [ 778.494652][ T30] panic+0x349/0x880 [ 778.498600][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 778.504801][ T30] ? __pfx_panic+0x10/0x10 [ 778.509258][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 778.514667][ T30] ? __irq_work_queue_local+0x137/0x410 [ 778.520253][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 778.525659][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 778.531852][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 778.538050][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 778.544244][ T30] watchdog+0x1033/0x1040 [ 778.548624][ T30] ? watchdog+0x1ea/0x1040 [ 778.553089][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.557803][ T30] kthread+0x2f0/0x390 [ 778.561905][ T30] ? __pfx_watchdog+0x10/0x10 [ 778.566619][ T30] ? __pfx_kthread+0x10/0x10 [ 778.571246][ T30] ret_from_fork+0x4b/0x80 [ 778.575708][ T30] ? __pfx_kthread+0x10/0x10 [ 778.580331][ T30] ret_from_fork_asm+0x1a/0x30 [ 778.585149][ T30] [ 778.588502][ T30] Kernel Offset: disabled [ 778.592929][ T30] Rebooting in 86400 seconds..