last executing test programs: 4.1919292s ago: executing program 3 (id=60): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') utimensat(r0, 0x0, 0x0, 0x0) 4.191718184s ago: executing program 3 (id=61): add_key(0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) 4.180647593s ago: executing program 3 (id=62): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0) setpriority(0x1, 0x1, 0x3ff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xd, "7c968be4"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xc41}}}}, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.035404663s ago: executing program 3 (id=82): r0 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x27, 0x19, 0x3, 0x1b, 0x6, 0x0, 0x4, 0xdd, 0x1}) 1.888288504s ago: executing program 3 (id=84): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) 1.863970958s ago: executing program 3 (id=86): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) 1.668822787s ago: executing program 1 (id=89): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 1.589167987s ago: executing program 1 (id=90): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000002940)=""/4083, 0xfffffffffffffd20}) 1.46788377s ago: executing program 1 (id=91): syz_open_dev$evdev(&(0x7f0000000000), 0x20000001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001640)=""/4096) 1.463624694s ago: executing program 1 (id=92): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000280)={0x0, 0x204, 0x20000000, 0x81, 0xffffffff}) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) 1.420669691s ago: executing program 1 (id=93): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x2, &(0x7f0000000340)="d0be") 643.902251ms ago: executing program 0 (id=105): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f0000000080)) 643.6389ms ago: executing program 0 (id=106): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) shutdown(r0, 0x1) 536.504463ms ago: executing program 0 (id=109): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000001040)={0xc, {0x3, 0x80000001, 0x79e, 0x8, 0x2, 0x80000001}}) 423.947595ms ago: executing program 0 (id=110): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xe980, 0x0) 403.429566ms ago: executing program 0 (id=111): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) writev(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)="09dc", 0x2}], 0x1) 207.919227ms ago: executing program 0 (id=113): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000280)) 207.675693ms ago: executing program 2 (id=114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c072a983ae5ce3cafd64c9a73683045912d60679cfb75c9981c4b30cffffff0800"}, 0xd8) 198.353061ms ago: executing program 2 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000440)={[{0x8, 0xce, 0xf9, 0xc, 0x3, 0x4, 0x80, 0x6, 0xb, 0x3, 0x8, 0x6, 0x2}, {0xd, 0x4, 0x5, 0x5, 0x2, 0x7, 0x3, 0x8, 0x81, 0x3, 0x9, 0x8, 0x7}, {0x9, 0x8, 0x5, 0x1, 0x7, 0x5, 0x4, 0x0, 0x4, 0x0, 0x9, 0xb, 0x1}], 0x9}) 142.336217ms ago: executing program 2 (id=116): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) 59.937642ms ago: executing program 2 (id=117): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}, 0x10) 59.64288ms ago: executing program 2 (id=118): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') r1 = fanotify_init(0x20, 0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000400)=""/169, 0xa9}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x28011, r2, 0x610c7000) close_range(r0, 0xffffffffffffffff, 0x0) 565.37µs ago: executing program 2 (id=119): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480), 0x6000) 0s ago: executing program 1 (id=120): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 49.991522][ T5848] cgroup: Unknown subsys name 'net' [ 50.114395][ T5848] cgroup: Unknown subsys name 'cpuset' [ 50.121371][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.162104][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.129098][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.147136][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.154284][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.161691][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.169374][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.176686][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.191959][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.195381][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.206043][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.212975][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.213297][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.227591][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.229991][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.235655][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.242020][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.249484][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.262621][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.264036][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.284658][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.292167][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.539897][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 54.588005][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 54.634999][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 54.670278][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.677473][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.685611][ T5868] bridge_slave_0: entered allmulticast mode [ 54.692429][ T5868] bridge_slave_0: entered promiscuous mode [ 54.703437][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 54.717262][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.724403][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.731458][ T5868] bridge_slave_1: entered allmulticast mode [ 54.738070][ T5868] bridge_slave_1: entered promiscuous mode [ 54.793016][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.800139][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.807537][ T5857] bridge_slave_0: entered allmulticast mode [ 54.814340][ T5857] bridge_slave_0: entered promiscuous mode [ 54.822659][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.844879][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.852006][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.859084][ T5857] bridge_slave_1: entered allmulticast mode [ 54.865749][ T5857] bridge_slave_1: entered promiscuous mode [ 54.880683][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.892423][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.899494][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.907104][ T5864] bridge_slave_0: entered allmulticast mode [ 54.913703][ T5864] bridge_slave_0: entered promiscuous mode [ 54.933980][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.941052][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.948369][ T5864] bridge_slave_1: entered allmulticast mode [ 54.955349][ T5864] bridge_slave_1: entered promiscuous mode [ 54.963230][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.990860][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.001263][ T5868] team0: Port device team_slave_0 added [ 55.025259][ T5868] team0: Port device team_slave_1 added [ 55.038837][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.046001][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.053442][ T5861] bridge_slave_0: entered allmulticast mode [ 55.059802][ T5861] bridge_slave_0: entered promiscuous mode [ 55.068155][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.084193][ T5857] team0: Port device team_slave_0 added [ 55.095340][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.102568][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.109706][ T5861] bridge_slave_1: entered allmulticast mode [ 55.116276][ T5861] bridge_slave_1: entered promiscuous mode [ 55.123853][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.134304][ T5857] team0: Port device team_slave_1 added [ 55.140417][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.147785][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.173716][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.201674][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.208664][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.234558][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.266444][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.277169][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.287148][ T5864] team0: Port device team_slave_0 added [ 55.293244][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.300180][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.326444][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.338111][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.345240][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.371336][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.388528][ T5864] team0: Port device team_slave_1 added [ 55.423168][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.430107][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.456350][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.468686][ T5861] team0: Port device team_slave_0 added [ 55.484144][ T5868] hsr_slave_0: entered promiscuous mode [ 55.490320][ T5868] hsr_slave_1: entered promiscuous mode [ 55.496948][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.504030][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.529910][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.546105][ T5861] team0: Port device team_slave_1 added [ 55.575900][ T5857] hsr_slave_0: entered promiscuous mode [ 55.582058][ T5857] hsr_slave_1: entered promiscuous mode [ 55.587925][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 55.593761][ T5857] Cannot create hsr debugfs directory [ 55.623836][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.630773][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.657039][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.684728][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.691681][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.717913][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.737183][ T5864] hsr_slave_0: entered promiscuous mode [ 55.743219][ T5864] hsr_slave_1: entered promiscuous mode [ 55.748974][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 55.754706][ T5864] Cannot create hsr debugfs directory [ 55.843190][ T5861] hsr_slave_0: entered promiscuous mode [ 55.849188][ T5861] hsr_slave_1: entered promiscuous mode [ 55.855499][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 55.861206][ T5861] Cannot create hsr debugfs directory [ 55.979909][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.991696][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.006545][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.018434][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.056224][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.067723][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.083702][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.093387][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.125989][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.145780][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.154319][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.172416][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.205943][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.218456][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.232966][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.241381][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.289353][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.318975][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.332733][ T5863] Bluetooth: hci3: command tx timeout [ 56.333914][ T5870] Bluetooth: hci0: command tx timeout [ 56.338121][ T5863] Bluetooth: hci2: command tx timeout [ 56.349236][ T5860] Bluetooth: hci1: command tx timeout [ 56.355967][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.364560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.371633][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.395723][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.402776][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.429315][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.438465][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.459992][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.470531][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.489885][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.496989][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.508136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.515242][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.526071][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.533174][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.547121][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.554211][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.570501][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.610061][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.641563][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.648626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.666571][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.673626][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.696683][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.803662][ T5868] veth0_vlan: entered promiscuous mode [ 56.819077][ T5868] veth1_vlan: entered promiscuous mode [ 56.842359][ T5868] veth0_macvtap: entered promiscuous mode [ 56.866311][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.875634][ T5868] veth1_macvtap: entered promiscuous mode [ 56.901506][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.932906][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.962608][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.978269][ T1153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.995828][ T5857] veth0_vlan: entered promiscuous mode [ 57.009610][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.018648][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.035247][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.047924][ T5857] veth1_vlan: entered promiscuous mode [ 57.077101][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.097515][ T5864] veth0_vlan: entered promiscuous mode [ 57.116161][ T5857] veth0_macvtap: entered promiscuous mode [ 57.135668][ T5864] veth1_vlan: entered promiscuous mode [ 57.143460][ T5857] veth1_macvtap: entered promiscuous mode [ 57.156711][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.173037][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.184774][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.207095][ T5861] veth0_vlan: entered promiscuous mode [ 57.216350][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.228935][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.238460][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.241262][ T5861] veth1_vlan: entered promiscuous mode [ 57.252389][ T4547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.268250][ T4547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277727][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.287456][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.308924][ T5864] veth0_macvtap: entered promiscuous mode [ 57.317361][ T5864] veth1_macvtap: entered promiscuous mode [ 57.339546][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.346959][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.365053][ T5861] veth0_macvtap: entered promiscuous mode [ 57.386078][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.421598][ T5861] veth1_macvtap: entered promiscuous mode [ 57.432340][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.432924][ T3400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.440357][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.459423][ T3400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.476134][ T3400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.485018][ T3400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.507075][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.521272][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.521924][ T3400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.538197][ T3400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.567835][ T4547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.577480][ T4547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.589681][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.600202][ T4547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.605544][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.611685][ T4547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.642479][ T5927] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 57.668089][ T5949] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.708585][ T4547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.719874][ T4547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.758580][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.779792][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.791235][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.800304][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.823368][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 57.837528][ T5927] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 57.861044][ T5927] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 57.874673][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.884741][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.887912][ T5957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 57.895447][ T5927] usb 4-1: Product: syz [ 57.906540][ T5927] usb 4-1: Manufacturer: syz [ 57.911149][ T5927] usb 4-1: SerialNumber: syz [ 57.925118][ T5945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 57.982688][ T5926] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 58.133347][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 58.139724][ T5926] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 58.147238][ T5945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.148325][ T5926] usb 2-1: config 0 has no interface number 0 [ 58.158438][ T5945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.161988][ T5926] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.179799][ T5926] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 58.192487][ T5926] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 58.201521][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 58.209719][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.217398][ T5926] usb 2-1: Product: syz [ 58.221636][ T5926] usb 2-1: SerialNumber: syz [ 58.229046][ T5926] usb 2-1: config 0 descriptor?? [ 58.237139][ T5926] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 58.245085][ T5926] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 58.391953][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 58.398138][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.410254][ T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.419639][ T5860] Bluetooth: hci0: command tx timeout [ 58.424379][ T5865] Bluetooth: hci2: command tx timeout [ 58.425187][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.430493][ T5870] Bluetooth: hci1: command tx timeout [ 58.443943][ T5863] Bluetooth: hci3: command tx timeout [ 58.452769][ T24] usb 1-1: config 0 descriptor?? [ 58.665152][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.677167][ C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 58.689421][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.696570][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.703779][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.710883][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.718555][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.726157][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.733339][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.740459][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.747567][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.754753][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 58.772912][ T5962] usb 2-1: USB disconnect, device number 2 [ 58.778299][ T5945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.779460][ T24] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 58.785892][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 58.792143][ T5945] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.815773][ T5962] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 59.020798][ T5927] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.028884][ T5927] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 59.036794][ T5927] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 59.222928][ T5927] cdc_ncm 4-1:1.0: setting tx_max = 104 [ 59.231621][ T5927] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 59.248508][ T5927] usb 4-1: USB disconnect, device number 2 [ 59.259303][ T5927] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 59.297295][ T5962] usb 1-1: USB disconnect, device number 2 [ 59.432707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.442134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.450642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.459186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.584384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 59.584667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.611871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 59.667242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 59.789505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.789540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.492078][ T5870] Bluetooth: hci1: command tx timeout [ 60.492118][ T5863] Bluetooth: hci0: command tx timeout [ 60.497481][ T5870] Bluetooth: hci3: command tx timeout [ 60.503257][ T5865] Bluetooth: hci2: command tx timeout [ 61.435467][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13'. [ 62.573799][ T5865] Bluetooth: hci2: command tx timeout [ 62.579293][ T5863] Bluetooth: hci0: command tx timeout [ 62.585052][ T5863] Bluetooth: hci3: command tx timeout [ 62.593972][ T5865] Bluetooth: hci1: command tx timeout [ 63.110333][ T5927] kernel read not supported for file /28/net/ip_mr_vif (pid: 5927 comm: kworker/0:4) [ 63.441859][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.279371][ T5995] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 64.331911][ T5891] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 64.356160][ T5927] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 64.365539][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.374815][ T5927] usb 3-1: Product: syz [ 64.379046][ T5927] usb 3-1: Manufacturer: syz [ 64.384614][ T5927] usb 3-1: SerialNumber: syz [ 64.390794][ T5927] usb 3-1: config 0 descriptor?? [ 64.403515][ T5927] ch341 3-1:0.0: ch341-uart converter detected [ 64.484799][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.500321][ T5891] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 64.511188][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.520888][ T5891] usb 2-1: config 0 descriptor?? [ 64.651957][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.841889][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.931996][ T5891] nintendo 0003:057E:200E.0001: unbalanced collection at end of report description [ 64.941658][ T5891] nintendo 0003:057E:200E.0001: HID parse failed [ 64.948226][ T5891] nintendo 0003:057E:200E.0001: probe - fail = -22 [ 64.956377][ T5891] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -22 [ 65.012354][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 65.018886][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 65.029947][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.039604][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.049366][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 65.060506][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 65.070587][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 65.079681][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.089021][ T43] usb 1-1: config 0 descriptor?? [ 65.094910][ T6038] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 65.132794][ T5891] usb 2-1: USB disconnect, device number 3 [ 65.309034][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.316010][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.323504][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.330332][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.337200][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.344023][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.350812][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.357643][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.364453][ T5870] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 65.510923][ T5863] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 65.511007][ T5891] usb 1-1: USB disconnect, device number 3 [ 65.617588][ T5927] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 65.818276][ T5891] usb 3-1: USB disconnect, device number 2 [ 65.825153][ T5891] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 65.835096][ T5891] ch341 3-1:0.0: device disconnected [ 66.047639][ T6055] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 66.440863][ T1210] kernel write not supported for file [eventfd] (pid: 1210 comm: kworker/1:2) [ 66.513166][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.671835][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 66.678119][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.689013][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.698810][ T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 66.707882][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.717008][ T43] usb 1-1: config 0 descriptor?? [ 67.132538][ T43] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 67.144289][ T5927] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 67.293108][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.304193][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 67.315153][ T5927] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 67.324238][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.342408][ T5927] usb 4-1: config 0 descriptor?? [ 67.349834][ T6103] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 67.394717][ T1210] usb 1-1: USB disconnect, device number 4 [ 67.766045][ T5927] hid-rmi 0003:0461:4E72.0003: item fetching failed at offset 1/5 [ 67.775189][ T5927] hid-rmi 0003:0461:4E72.0003: parse failed [ 68.486528][ T5927] hid-rmi 0003:0461:4E72.0003: probe with driver hid-rmi failed with error -22 [ 68.520591][ T43] usb 4-1: USB disconnect, device number 3 [ 68.541839][ T1210] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.696113][ T1210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 2007, setting to 1024 [ 68.708327][ T1210] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 68.750283][ T1210] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.774123][ T1210] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.801889][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.820019][ T1210] usb 3-1: SerialNumber: syz [ 68.827194][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.050843][ T6125] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.232525][ T5927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 69.268694][ T1210] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 69.290031][ T1210] usb 3-1: USB disconnect, device number 3 [ 69.393142][ T5927] usb 1-1: config 0 has an invalid interface number: 182 but max is 1 [ 69.416030][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.435497][ T5927] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 69.458811][ T5927] usb 1-1: config 0 has no interface number 0 [ 69.465950][ T5927] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 69.475031][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.493192][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 69.505445][ T5927] usb 1-1: config 0 descriptor?? [ 69.674126][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.685801][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.695933][ T5906] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 69.706172][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.715624][ T5906] usb 4-1: config 0 descriptor?? [ 69.731477][ T9] usb 1-1: USB disconnect, device number 5 [ 69.902185][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 70.061956][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 70.068374][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.078617][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 70.091324][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.116243][ T5927] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 70.125609][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.145683][ T5927] usb 2-1: config 0 descriptor?? [ 70.171124][ T6184] "syz.2.97" (6184) uses obsolete ecb(arc4) skcipher [ 70.320465][ T6200] support for cryptoloop has been removed. Use dm-crypt instead. [ 70.451075][ T6208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 70.536984][ T5906] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 70.559677][ T5927] usb 2-1: USB disconnect, device number 4 [ 70.580059][ T5906] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 70.739002][ T1210] usb 4-1: USB disconnect, device number 4 [ 70.945050][ T6232] batadv_slave_1: entered promiscuous mode [ 70.952455][ T6231] batadv_slave_1: left promiscuous mode [ 71.090141][ T6239] ------------[ cut here ]------------ [ 71.096165][ T6239] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 71.104245][ T6239] shift exponent 32 is too large for 32-bit type 'int' [ 71.111246][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 71.111267][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.111277][ T6239] Call Trace: [ 71.111284][ T6239] [ 71.111290][ T6239] dump_stack_lvl+0x189/0x250 [ 71.111320][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.111343][ T6239] ? __pfx__printk+0x10/0x10 [ 71.111367][ T6239] ubsan_epilogue+0xa/0x40 [ 71.111386][ T6239] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 71.111411][ T6239] ? __pfx_v9fs_set_super+0x10/0x10 [ 71.111432][ T6239] v9fs_get_tree+0x957/0xa90 [ 71.111452][ T6239] ? __pfx_v9fs_get_tree+0x10/0x10 [ 71.111473][ T6239] vfs_get_tree+0x8f/0x2b0 [ 71.111489][ T6239] do_new_mount+0x2a2/0xa30 [ 71.111508][ T6239] ? ns_capable+0x8a/0xf0 [ 71.111525][ T6239] ? __pfx_do_new_mount+0x10/0x10 [ 71.111543][ T6239] ? path_mount+0x61c/0xfe0 [ 71.111559][ T6239] ? user_path_at+0x44/0x60 [ 71.111583][ T6239] __se_sys_mount+0x317/0x410 [ 71.111602][ T6239] ? __pfx___se_sys_mount+0x10/0x10 [ 71.111623][ T6239] ? rcu_is_watching+0x15/0xb0 [ 71.111641][ T6239] ? __x64_sys_mount+0x20/0xc0 [ 71.111660][ T6239] do_syscall_64+0xfa/0xfa0 [ 71.111681][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.111698][ T6239] ? clear_bhb_loop+0x60/0xb0 [ 71.111715][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.111730][ T6239] RIP: 0033:0x7f852938ebe9 [ 71.111752][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.111771][ T6239] RSP: 002b:00007f852a270038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.111788][ T6239] RAX: ffffffffffffffda RBX: 00007f85295b5fa0 RCX: 00007f852938ebe9 [ 71.111801][ T6239] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 71.111812][ T6239] RBP: 00007f8529411e19 R08: 0000200000000600 R09: 0000000000000000 [ 71.111823][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.111833][ T6239] R13: 00007f85295b6038 R14: 00007f85295b5fa0 R15: 00007ffcfcdf87f8 [ 71.111852][ T6239] [ 71.329443][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335994][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.340654][ T6239] ---[ end trace ]--- [ 71.346409][ T6239] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 71.353604][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 71.362791][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.372825][ T6239] Call Trace: [ 71.376083][ T6239] [ 71.378989][ T6239] dump_stack_lvl+0x99/0x250 [ 71.383561][ T6239] ? __asan_memcpy+0x40/0x70 [ 71.388132][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.393307][ T6239] ? __pfx__printk+0x10/0x10 [ 71.397876][ T6239] vpanic+0x281/0x750 [ 71.401840][ T6239] ? __pfx_vpanic+0x10/0x10 [ 71.406346][ T6239] panic+0xb9/0xc0 [ 71.410071][ T6239] ? __pfx_panic+0x10/0x10 [ 71.414481][ T6239] ? __pfx__printk+0x10/0x10 [ 71.419050][ T6239] check_panic_on_warn+0x89/0xb0 [ 71.423984][ T6239] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 71.430375][ T6239] ? __pfx_v9fs_set_super+0x10/0x10 [ 71.435548][ T6239] v9fs_get_tree+0x957/0xa90 [ 71.440118][ T6239] ? __pfx_v9fs_get_tree+0x10/0x10 [ 71.445208][ T6239] vfs_get_tree+0x8f/0x2b0 [ 71.449600][ T6239] do_new_mount+0x2a2/0xa30 [ 71.454083][ T6239] ? ns_capable+0x8a/0xf0 [ 71.458389][ T6239] ? __pfx_do_new_mount+0x10/0x10 [ 71.463394][ T6239] ? path_mount+0x61c/0xfe0 [ 71.467893][ T6239] ? user_path_at+0x44/0x60 [ 71.472381][ T6239] __se_sys_mount+0x317/0x410 [ 71.477037][ T6239] ? __pfx___se_sys_mount+0x10/0x10 [ 71.482210][ T6239] ? rcu_is_watching+0x15/0xb0 [ 71.486952][ T6239] ? __x64_sys_mount+0x20/0xc0 [ 71.491690][ T6239] do_syscall_64+0xfa/0xfa0 [ 71.496169][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.502217][ T6239] ? clear_bhb_loop+0x60/0xb0 [ 71.506885][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.512754][ T6239] RIP: 0033:0x7f852938ebe9 [ 71.517159][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.536756][ T6239] RSP: 002b:00007f852a270038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.545146][ T6239] RAX: ffffffffffffffda RBX: 00007f85295b5fa0 RCX: 00007f852938ebe9 [ 71.553099][ T6239] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 71.561067][ T6239] RBP: 00007f8529411e19 R08: 0000200000000600 R09: 0000000000000000 [ 71.569016][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.576967][ T6239] R13: 00007f85295b6038 R14: 00007f85295b5fa0 R15: 00007ffcfcdf87f8 [ 71.584918][ T6239] [ 71.588053][ T6239] Kernel Offset: disabled [ 71.592358][ T6239] Rebooting in 86400 seconds..