last executing test programs: 1.971338124s ago: executing program 2 (id=179): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x5) 1.940784363s ago: executing program 1 (id=180): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000100)=0x1, 0x5, 0x2) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f00000001c0)=0x7, 0x6, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 1.931021002s ago: executing program 2 (id=181): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0xe, {0x6, 0x9, 0x5, 0xc}, {0x400, 0xb, 0x4, 0x9}, {0x79, 0x2}}) 1.811257539s ago: executing program 2 (id=183): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x3}}, 0x10, 0x0}, 0x0) close(0x4) 1.811133766s ago: executing program 1 (id=184): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x500, 0x2, 0x35315241, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x2, 0x7}}) 1.748797803s ago: executing program 3 (id=185): syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x8001}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) 1.719283307s ago: executing program 1 (id=186): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) 1.663673737s ago: executing program 2 (id=187): syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000010b804020240000102030109021b000101b28000090400030207"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) 654.807203ms ago: executing program 0 (id=192): r0 = socket(0x2, 0x80805, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x22, 0x0, &(0x7f0000001100)) 567.590465ms ago: executing program 0 (id=193): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) 567.294842ms ago: executing program 0 (id=194): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 516.889425ms ago: executing program 0 (id=195): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000b00), 0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@local, 0x23}) 478.960338ms ago: executing program 3 (id=196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000940), &(0x7f0000000600)=0x8) 411.522816ms ago: executing program 0 (id=197): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) 411.203252ms ago: executing program 3 (id=198): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_procfs(0x0, &(0x7f0000000900)='environ\x00') close_range(r5, 0xffffffffffffffff, 0x0) 390.480992ms ago: executing program 1 (id=199): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000100)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000180)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc5, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 316.748356ms ago: executing program 0 (id=200): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x66e4, 0x205, 0x7021, 0x2, r2}, &(0x7f0000000040)=0x10) 316.521925ms ago: executing program 2 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 247.616242ms ago: executing program 3 (id=202): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 186.323306ms ago: executing program 1 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000a000700726f7574650000000900010073797a310400000038000000050a01020000000000000000000020000c00024000000000000000010900010073797a31"], 0xac}}, 0x0) 172.60355ms ago: executing program 3 (id=204): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) map_shadow_stack(&(0x7f000003a000/0x2000)=nil, 0x2000, 0x0) 59.363754ms ago: executing program 3 (id=205): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) unshare(0x20040600) unshare(0x2a060600) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) getpid() shmctl$IPC_RMID(r2, 0x0) 11.264739ms ago: executing program 2 (id=206): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) 0s ago: executing program 1 (id=207): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 64.904925][ T5809] cgroup: Unknown subsys name 'net' [ 65.039165][ T5809] cgroup: Unknown subsys name 'cpuset' [ 65.048304][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.412781][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.439802][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.446401][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.246968][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.256410][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.264247][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.291558][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.299820][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.307290][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.316519][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.316741][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.330780][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.332040][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.338490][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.346448][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.354183][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.360379][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.367506][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.375147][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.387766][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.390226][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.399368][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.410223][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.883601][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 75.059767][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 75.088913][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 75.185848][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.193561][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.201442][ T5823] bridge_slave_0: entered allmulticast mode [ 75.208784][ T5823] bridge_slave_0: entered promiscuous mode [ 75.217387][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 75.244471][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.251776][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.259206][ T5823] bridge_slave_1: entered allmulticast mode [ 75.266607][ T5823] bridge_slave_1: entered promiscuous mode [ 75.364293][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.384925][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.392491][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.400586][ T5824] bridge_slave_0: entered allmulticast mode [ 75.407809][ T5824] bridge_slave_0: entered promiscuous mode [ 75.421963][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.443471][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.450742][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.458105][ T5824] bridge_slave_1: entered allmulticast mode [ 75.465172][ T5824] bridge_slave_1: entered promiscuous mode [ 75.488341][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.495510][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.502829][ T5826] bridge_slave_0: entered allmulticast mode [ 75.509982][ T5826] bridge_slave_0: entered promiscuous mode [ 75.545274][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.552660][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.560060][ T5826] bridge_slave_1: entered allmulticast mode [ 75.567241][ T5826] bridge_slave_1: entered promiscuous mode [ 75.597131][ T5823] team0: Port device team_slave_0 added [ 75.630904][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.643009][ T5823] team0: Port device team_slave_1 added [ 75.649464][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.656724][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.663917][ T5820] bridge_slave_0: entered allmulticast mode [ 75.671492][ T5820] bridge_slave_0: entered promiscuous mode [ 75.692864][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.744178][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.751557][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.759262][ T5820] bridge_slave_1: entered allmulticast mode [ 75.766510][ T5820] bridge_slave_1: entered promiscuous mode [ 75.776970][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.798848][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.805917][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.831920][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.858875][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.869955][ T5824] team0: Port device team_slave_0 added [ 75.877120][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.884125][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.910329][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.948058][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.984041][ T5824] team0: Port device team_slave_1 added [ 76.010213][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.021598][ T5826] team0: Port device team_slave_0 added [ 76.030610][ T5826] team0: Port device team_slave_1 added [ 76.103037][ T5823] hsr_slave_0: entered promiscuous mode [ 76.109490][ T5823] hsr_slave_1: entered promiscuous mode [ 76.140155][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.147465][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.173817][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.186353][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.193313][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.219219][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.232771][ T5820] team0: Port device team_slave_0 added [ 76.239288][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.246382][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.272368][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.285129][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.292134][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.318074][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.337320][ T5820] team0: Port device team_slave_1 added [ 76.414345][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.421370][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.447681][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.476476][ T51] Bluetooth: hci0: command tx timeout [ 76.476490][ T5831] Bluetooth: hci1: command tx timeout [ 76.476777][ T5829] Bluetooth: hci3: command tx timeout [ 76.490652][ T5836] Bluetooth: hci2: command tx timeout [ 76.502117][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.509196][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.535168][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.605072][ T5824] hsr_slave_0: entered promiscuous mode [ 76.611944][ T5824] hsr_slave_1: entered promiscuous mode [ 76.618610][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 76.624416][ T5824] Cannot create hsr debugfs directory [ 76.635818][ T5826] hsr_slave_0: entered promiscuous mode [ 76.642175][ T5826] hsr_slave_1: entered promiscuous mode [ 76.648495][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 76.654230][ T5826] Cannot create hsr debugfs directory [ 76.756592][ T5820] hsr_slave_0: entered promiscuous mode [ 76.762965][ T5820] hsr_slave_1: entered promiscuous mode [ 76.769277][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 76.775014][ T5820] Cannot create hsr debugfs directory [ 77.104489][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.140855][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.157551][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.177829][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.218614][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.235233][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.253431][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.280802][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.350511][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.383619][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.397192][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.410193][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.484092][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.502776][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.530756][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.540846][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.637770][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.693412][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.708824][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.737740][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.745304][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.768479][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.792070][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.799265][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.820891][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.844164][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.851325][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.874263][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.881487][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.933771][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.960347][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.990653][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.997907][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.037765][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.044997][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.113783][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.165309][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.172563][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.199433][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.206694][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.344581][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.471172][ T5823] veth0_vlan: entered promiscuous mode [ 78.520146][ T5823] veth1_vlan: entered promiscuous mode [ 78.533858][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.570664][ T5836] Bluetooth: hci2: command tx timeout [ 78.570686][ T5829] Bluetooth: hci0: command tx timeout [ 78.576758][ T5836] Bluetooth: hci3: command tx timeout [ 78.582958][ T51] Bluetooth: hci1: command tx timeout [ 78.644138][ T5823] veth0_macvtap: entered promiscuous mode [ 78.689591][ T5823] veth1_macvtap: entered promiscuous mode [ 78.725402][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.753439][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.784003][ T5826] veth0_vlan: entered promiscuous mode [ 78.793494][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.804436][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.842620][ T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.856827][ T5826] veth1_vlan: entered promiscuous mode [ 78.863698][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.874237][ T33] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.893870][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.927854][ T5824] veth0_vlan: entered promiscuous mode [ 78.970659][ T5824] veth1_vlan: entered promiscuous mode [ 79.058558][ T5826] veth0_macvtap: entered promiscuous mode [ 79.070482][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.084173][ T5826] veth1_macvtap: entered promiscuous mode [ 79.086859][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.103302][ T5820] veth0_vlan: entered promiscuous mode [ 79.129472][ T5824] veth0_macvtap: entered promiscuous mode [ 79.142378][ T5824] veth1_macvtap: entered promiscuous mode [ 79.172881][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.182638][ T5820] veth1_vlan: entered promiscuous mode [ 79.192854][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.206680][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.210994][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.246989][ T2906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.258950][ T2906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.273432][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.293724][ T2906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.302687][ T2906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.333806][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.337300][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.412039][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.427647][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.461219][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.480245][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.506708][ T5820] veth0_macvtap: entered promiscuous mode [ 79.546507][ T5820] veth1_macvtap: entered promiscuous mode [ 79.561616][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.578877][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.641446][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.710029][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.734421][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.744114][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.759550][ T30] audit: type=1326 audit(1763273603.665:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.782873][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.783631][ T30] audit: type=1326 audit(1763273603.665:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.795790][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.823179][ T30] audit: type=1326 audit(1763273603.665:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.853272][ T30] audit: type=1326 audit(1763273603.665:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.886980][ T30] audit: type=1326 audit(1763273603.665:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.891897][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910654][ T30] audit: type=1326 audit(1763273603.665:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.920021][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.954257][ T30] audit: type=1326 audit(1763273603.665:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 79.955586][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.987456][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.010612][ T30] audit: type=1326 audit(1763273603.665:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 80.114496][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.126274][ T30] audit: type=1326 audit(1763273603.665:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5920 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa89a98f6c9 code=0x7ffc0000 [ 80.146757][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.208682][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.226634][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.350144][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.376012][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.639220][ T51] Bluetooth: hci3: command tx timeout [ 80.644686][ T51] Bluetooth: hci1: command tx timeout [ 80.650372][ T5829] Bluetooth: hci2: command tx timeout [ 80.655813][ T5831] Bluetooth: hci0: command tx timeout [ 82.229724][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.366957][ T5995] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.626089][ T6003] binder: 6002:6003 ioctl 4018620d 0 returned -22 [ 82.718316][ T5829] Bluetooth: hci1: command tx timeout [ 82.723817][ T5831] Bluetooth: hci3: command tx timeout [ 82.723838][ T51] Bluetooth: hci2: command tx timeout [ 82.730369][ T5831] Bluetooth: hci0: command tx timeout [ 83.314959][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.481176][ T5828] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 83.507185][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.527779][ T5828] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 83.545257][ T5828] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 83.564342][ T5828] usb 4-1: Manufacturer: syz [ 83.597892][ T5828] usb 4-1: config 0 descriptor?? [ 83.694258][ T5828] rc_core: IR keymap rc-hauppauge not found [ 83.700336][ T5828] Registered IR keymap rc-empty [ 83.728239][ T5828] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 83.753960][ T5828] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 83.816819][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 83.832079][ T5828] usb 4-1: USB disconnect, device number 2 [ 84.196357][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 84.643734][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.783655][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.823641][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 84.830574][ T5913] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 84.849145][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.879816][ T5913] usb 3-1: config 0 has no interface number 0 [ 84.896146][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 84.915490][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.940944][ T5913] usb 3-1: Product: syz [ 84.946093][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 84.951295][ T5913] usb 3-1: Manufacturer: syz [ 84.963740][ T5913] usb 3-1: SerialNumber: syz [ 84.970553][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.986587][ T55] usb 4-1: config 150 has an invalid interface number: 57 but max is 0 [ 84.998496][ T5913] usb 3-1: config 0 descriptor?? [ 85.006327][ T55] usb 4-1: config 150 has no interface number 0 [ 85.012630][ T55] usb 4-1: config 150 interface 57 has no altsetting 0 [ 85.042239][ T55] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=9d.d8 [ 85.053384][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.061624][ T55] usb 4-1: Product: syz [ 85.066060][ T55] usb 4-1: Manufacturer: syz [ 85.070680][ T55] usb 4-1: SerialNumber: syz [ 85.228122][ T5858] usb 3-1: USB disconnect, device number 2 [ 85.272268][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.303710][ T55] snd-usb-audio 4-1:150.57: probe with driver snd-usb-audio failed with error -71 [ 85.321765][ T55] usb 4-1: USB disconnect, device number 3 [ 85.441347][ T5828] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 85.450444][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.462069][ T5828] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 85.472060][ T5828] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 85.480378][ T5828] usb 2-1: Manufacturer: syz [ 85.489226][ T5828] usb 2-1: config 0 descriptor?? [ 85.583265][ T5828] rc_core: IR keymap rc-hauppauge not found [ 85.589415][ T5828] Registered IR keymap rc-empty [ 85.597133][ T5828] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 85.612338][ T5828] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 85.732310][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 85.765382][ T5828] usb 2-1: USB disconnect, device number 2 [ 86.628608][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 86.670659][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 86.798377][ T9] cfg80211: failed to load regulatory.db [ 87.255329][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.444227][ T55] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 87.465419][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.479338][ T55] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 87.492016][ T55] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 87.524563][ T55] usb 3-1: Manufacturer: syz [ 87.552457][ T55] usb 3-1: config 0 descriptor?? [ 87.707277][ T55] rc_core: IR keymap rc-hauppauge not found [ 87.722144][ T55] Registered IR keymap rc-empty [ 87.731074][ T55] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 87.757069][ T55] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 87.792612][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 87.876953][ T24] usb 3-1: USB disconnect, device number 3 [ 88.067634][ T6152] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 88.083944][ T6152] Error validating options; rc = [-22] [ 89.069532][ T6166] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 89.331586][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.461321][ T6179] binder: 6178:6179 unknown command 0 [ 89.466762][ T6179] binder: 6178:6179 ioctl c0306201 200000000080 returned -22 [ 89.511952][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 89.551629][ T5913] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.567173][ T5913] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 89.610932][ T5913] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 89.640937][ T5913] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 89.662717][ T5913] usb 4-1: config 1 interface 0 has no altsetting 0 [ 89.670942][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.712983][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.731151][ T5913] usb 4-1: SerialNumber: syz [ 89.743293][ T6169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.758323][ T6169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.831508][ T6194] tmpfs: Bad value for 'mpol' [ 89.986778][ T6169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.011194][ T6169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.257926][ T6216] capability: warning: `syz.1.142' uses 32-bit capabilities (legacy support in use) [ 90.468673][ T5913] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 90.623007][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.655193][ T5913] usb 4-1: USB disconnect, device number 4 [ 90.673870][ T5913] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 90.791255][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 90.802326][ T5870] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 90.822908][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.833460][ T5870] usb 2-1: Product: syz [ 90.837705][ T5870] usb 2-1: Manufacturer: syz [ 90.842415][ T5870] usb 2-1: SerialNumber: syz [ 90.853185][ T5870] usb 2-1: config 0 descriptor?? [ 90.858883][ T55] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.865786][ T5870] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 91.042790][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 91.052667][ T55] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 91.061186][ T55] usb 1-1: config 0 has no interface number 0 [ 91.067313][ T55] usb 1-1: config 0 interface 31 has no altsetting 0 [ 91.070552][ T5828] usb 2-1: USB disconnect, device number 3 [ 91.080331][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.082950][ T55] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a3a, bcdDevice=82.49 [ 91.098787][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.118716][ T55] usb 1-1: Product: syz [ 91.122959][ T55] usb 1-1: Manufacturer: syz [ 91.127556][ T55] usb 1-1: SerialNumber: syz [ 91.137209][ T55] usb 1-1: config 0 descriptor?? [ 91.148107][ T55] ipaq 1-1:0.31: PocketPC PDA converter detected [ 91.158827][ T55] usb 1-1: active config #0 != 1 ?? [ 91.251591][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 91.263005][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.292373][ T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 91.310410][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.333908][ T9] usb 3-1: config 0 descriptor?? [ 91.361259][ T5828] usb 1-1: USB disconnect, device number 2 [ 91.670673][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.834387][ T55] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 91.845230][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.860285][ T55] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 91.869495][ T55] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 91.885653][ T55] usb 4-1: Manufacturer: syz [ 91.915795][ T55] usb 4-1: config 0 descriptor?? [ 92.000448][ T9] hid-led 0003:1D34:000A.0001: probe with driver hid-led failed with error -71 [ 92.022754][ T9] usb 3-1: USB disconnect, device number 4 [ 92.025400][ T55] rc_core: IR keymap rc-hauppauge not found [ 92.063911][ T55] Registered IR keymap rc-empty [ 92.082305][ T55] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 92.118294][ T55] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 92.153421][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 92.165949][ T55] usb 4-1: USB disconnect, device number 5 [ 92.397195][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 92.879774][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.046774][ T794] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=ab.a0 [ 93.064005][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.085642][ T794] usb 1-1: config 0 descriptor?? [ 93.095471][ T794] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 93.106403][ T794] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 93.279419][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.297558][ T24] usb 1-1: USB disconnect, device number 3 [ 93.309628][ T5828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.309762][ T794] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.430881][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.444130][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.453310][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.461375][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 93.466559][ T9] usb 4-1: Product: syz [ 93.470864][ T9] usb 4-1: Manufacturer: syz [ 93.475677][ T9] usb 4-1: SerialNumber: syz [ 93.482327][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.496624][ T794] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 93.496968][ T5828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.506768][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.519265][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 93.527780][ T794] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 93.532112][ T5828] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.542009][ T794] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 93.554313][ T9] cdc_ncm 4-1:1.0: bind() failure [ 93.562702][ T794] usb 2-1: Manufacturer: syz [ 93.573253][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 93.575377][ T794] usb 2-1: config 0 descriptor?? [ 93.585135][ T5828] usb 3-1: config 1 interface 0 has no altsetting 0 [ 93.592562][ T9] cdc_ncm 4-1:1.1: bind() failure [ 93.606008][ T5828] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 93.617546][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.631880][ T5828] usb 3-1: Product: syz [ 93.636124][ T5828] usb 3-1: Manufacturer: syz [ 93.640824][ T5828] usb 3-1: SerialNumber: syz [ 93.661077][ T794] rc_core: IR keymap rc-hauppauge not found [ 93.667196][ T794] Registered IR keymap rc-empty [ 93.674538][ T794] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 93.686629][ T794] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 93.712834][ T9] usb 4-1: USB disconnect, device number 6 [ 93.802455][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 93.809972][ T794] usb 2-1: USB disconnect, device number 4 [ 93.871059][ T5828] usb 3-1: USB disconnect, device number 5 [ 94.053176][ T6350] overlayfs: workdir and upperdir must be separate subtrees [ 94.682034][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 94.730859][ T6379] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] SMP KASAN PTI [ 94.742794][ T6379] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 94.751235][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) [ 94.760422][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.770463][ T6379] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 94.775484][ T6379] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 94.795084][ T6379] RSP: 0018:ffffc900180d7cd0 EFLAGS: 00010206 [ 94.801146][ T6379] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 94.809107][ T6379] RDX: ffffc9000c16a000 RSI: 000000000000284e RDI: 000000000000284f [ 94.817079][ T6379] RBP: 0000000000000003 R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 94.825137][ T6379] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: dffffc0000000000 [ 94.833109][ T6379] R13: 0000000000000017 R14: 00000000000000ba R15: ffff8880619501b4 [ 94.841067][ T6379] FS: 00007fa89b7b66c0(0000) GS:ffff888125a78000(0000) knlGS:0000000000000000 [ 94.849982][ T6379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.856574][ T6379] CR2: 000000110c48ff78 CR3: 0000000052162000 CR4: 00000000003526f0 [ 94.864538][ T6379] Call Trace: [ 94.867817][ T6379] [ 94.870771][ T6379] nsproxy_free+0x20f/0x7c0 [ 94.875275][ T6379] create_new_namespaces+0x47a/0x540 [ 94.880547][ T6379] unshare_nsproxy_namespaces+0x11c/0x170 [ 94.886253][ T6379] ksys_unshare+0x4c8/0x8c0 [ 94.890748][ T6379] ? __pfx_ksys_unshare+0x10/0x10 [ 94.895768][ T6379] __x64_sys_unshare+0x38/0x50 [ 94.900527][ T6379] do_syscall_64+0xfa/0xfa0 [ 94.905020][ T6379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.911079][ T6379] ? clear_bhb_loop+0x60/0xb0 [ 94.915762][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.921641][ T6379] RIP: 0033:0x7fa89a98f6c9 [ 94.926063][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.945664][ T6379] RSP: 002b:00007fa89b7b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.954073][ T6379] RAX: ffffffffffffffda RBX: 00007fa89abe5fa0 RCX: 00007fa89a98f6c9 [ 94.962034][ T6379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a060600 [ 94.969996][ T6379] RBP: 00007fa89aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.978042][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.986009][ T6379] R13: 00007fa89abe6038 R14: 00007fa89abe5fa0 R15: 00007ffd84fe5588 [ 94.993984][ T6379] [ 94.996986][ T6379] Modules linked in: [ 95.001548][ T6379] ---[ end trace 0000000000000000 ]--- [ 95.024186][ T6379] RIP: 0010:put_pid_ns+0x37/0x2a0 [ 95.038112][ T6379] Code: 53 48 89 fb e8 0a ba 03 00 48 85 db 0f 84 e8 00 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8d b3 d0 00 00 00 4d 89 f5 49 c1 ed 03 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 f9 12 6a 00 4d 8b 3e 31 ff 4c [ 95.058500][ T6379] RSP: 0018:ffffc900180d7cd0 EFLAGS: 00010206 [ 95.064950][ T6379] RAX: ffffffff81be2646 RBX: ffffffffffffffea RCX: 0000000000080000 [ 95.073222][ T6379] RDX: ffffc9000c16a000 RSI: 000000000000284e RDI: 000000000000284f [ 95.081268][ T6379] RBP: 0000000000000003 R08: ffffffff8fbf6d77 R09: 1ffffffff1f7edae [ 95.089637][ T6379] R10: dffffc0000000000 R11: fffffbfff1f7edaf R12: dffffc0000000000 [ 95.097610][ T6379] R13: 0000000000000017 R14: 00000000000000ba R15: ffff8880619501b4 [ 95.105635][ T6379] FS: 00007fa89b7b66c0(0000) GS:ffff888125b78000(0000) knlGS:0000000000000000 [ 95.116516][ T6379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.123591][ T6379] CR2: 00007f4ae65729e0 CR3: 0000000052162000 CR4: 00000000003526f0 [ 95.132702][ T6379] Kernel panic - not syncing: Fatal exception [ 95.139074][ T6379] Kernel Offset: disabled [ 95.143390][ T6379] Rebooting in 86400 seconds..