last executing test programs: 3.044460433s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x3, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000404c17aa5500010000000109023a00010100800009040000040806620007050102000200032401070581020002000324020705820200020003240307050202000200032404"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000500)}, &(0x7f0000000600)="28000000000000000100", &(0x7f0000000700), 0x4e20, 0x0, 0x1, 0x0}) (async) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="06000001") 2.841597165s ago: executing program 1 (id=2): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000500)={0x40, 0xa1, 0x4, "12345678"}, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.55926092s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000110)='./config/dlm/cluster/protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000120)='1\n\x00', 0x2) 2.323437317s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1) 2.280104981s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='core\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='mem\n', 0x4) close(r1) 2.248754939s ago: executing program 0 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "8b0500000020"}}, @nested_vmlaunch={0x12f, 0x18}], 0x66}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.971448422s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x200000, 0x8}) 1.84824305s ago: executing program 0 (id=8): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffff00404b0c000100010102030109022d0001010080320904000003ffff0000090501020002000000090582020002000000090583034000010000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x81ff, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x83, 0x4, &(0x7f0000000400)="01000700") nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x82, 0xa, &(0x7f0000000500)='AAAAAAAAAA') nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='bxt_wcove_usbc\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bxt_wcove_usbc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/typec/port0/port0.0/supported_roles\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/100, 0x64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 71.910448][ T5605] cgroup: Unknown subsys name 'net' [ 72.020224][ T5605] cgroup: Unknown subsys name 'cpuset' [ 72.029126][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.407699][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.410259][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.420292][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.454920][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.458135][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.460199][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.460744][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.462619][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.463245][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.463904][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.466335][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.480201][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.481952][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.484167][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.484799][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.485355][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.498439][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.507568][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.514407][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.517121][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.517690][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.917413][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.917641][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.917785][ T5619] bridge_slave_0: entered allmulticast mode [ 77.919749][ T5619] bridge_slave_0: entered promiscuous mode [ 77.964334][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.964459][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.964833][ T5619] bridge_slave_1: entered allmulticast mode [ 77.966761][ T5619] bridge_slave_1: entered promiscuous mode [ 78.071358][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.071512][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.071878][ T5620] bridge_slave_0: entered allmulticast mode [ 78.073522][ T5620] bridge_slave_0: entered promiscuous mode [ 78.077364][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.077501][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.077891][ T5618] bridge_slave_0: entered allmulticast mode [ 78.080089][ T5618] bridge_slave_0: entered promiscuous mode [ 78.088970][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.116251][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.116353][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.116481][ T5620] bridge_slave_1: entered allmulticast mode [ 78.121587][ T5620] bridge_slave_1: entered promiscuous mode [ 78.143927][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.144055][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.144483][ T5618] bridge_slave_1: entered allmulticast mode [ 78.147998][ T5618] bridge_slave_1: entered promiscuous mode [ 78.182215][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.198482][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.198612][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.198742][ T5614] bridge_slave_0: entered allmulticast mode [ 78.200403][ T5614] bridge_slave_0: entered promiscuous mode [ 78.239707][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.239817][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.239940][ T5614] bridge_slave_1: entered allmulticast mode [ 78.241676][ T5614] bridge_slave_1: entered promiscuous mode [ 78.248041][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.251124][ T5619] team0: Port device team_slave_0 added [ 78.255569][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.290395][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.295767][ T5619] team0: Port device team_slave_1 added [ 78.315733][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.331692][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.365103][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.388387][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.388473][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.388506][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.393067][ T5618] team0: Port device team_slave_0 added [ 78.411786][ T5620] team0: Port device team_slave_0 added [ 78.412409][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.412421][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.412444][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.418059][ T5618] team0: Port device team_slave_1 added [ 78.420282][ T5614] team0: Port device team_slave_0 added [ 78.425128][ T5620] team0: Port device team_slave_1 added [ 78.471702][ T5614] team0: Port device team_slave_1 added [ 78.498198][ T4934] Bluetooth: hci1: command tx timeout [ 78.508758][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.508774][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.508818][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.569992][ T4934] Bluetooth: hci0: command tx timeout [ 78.577785][ T4934] Bluetooth: hci3: command tx timeout [ 78.578236][ T4934] Bluetooth: hci2: command tx timeout [ 78.599454][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.599544][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.599569][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.600940][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.600952][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.600983][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.699601][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.699631][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.700058][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.717807][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.717825][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.717849][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.738014][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.738030][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.738054][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.756895][ T5619] hsr_slave_0: entered promiscuous mode [ 78.758215][ T5619] hsr_slave_1: entered promiscuous mode [ 78.877862][ T5614] hsr_slave_0: entered promiscuous mode [ 78.878772][ T5614] hsr_slave_1: entered promiscuous mode [ 78.879846][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 78.879951][ T5614] Cannot create hsr debugfs directory [ 78.902463][ T5620] hsr_slave_0: entered promiscuous mode [ 78.903512][ T5620] hsr_slave_1: entered promiscuous mode [ 78.904569][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 78.904587][ T5620] Cannot create hsr debugfs directory [ 78.912404][ T5618] hsr_slave_0: entered promiscuous mode [ 78.913333][ T5618] hsr_slave_1: entered promiscuous mode [ 78.913959][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 78.913976][ T5618] Cannot create hsr debugfs directory [ 79.324453][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.337393][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.339696][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.351490][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.353972][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.364163][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.380010][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.391055][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.457140][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.468897][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.479147][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.488230][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.509168][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.522527][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.523426][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.533613][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.615959][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.625420][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.630032][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.636621][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.640652][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.651051][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.670646][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.680017][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.775730][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.784687][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.799311][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.809538][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.810349][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.820946][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.833177][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.841805][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.854491][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.911737][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.951199][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.951340][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.960626][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.983825][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.983920][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.025181][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.040436][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.060110][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.060204][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.080298][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.080510][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.090865][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.109447][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.109566][ T3320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.148299][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.148411][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.303024][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.374047][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.415276][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.415420][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.452944][ T1192] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.453061][ T1192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.568539][ T5622] Bluetooth: hci1: command tx timeout [ 80.660570][ T5622] Bluetooth: hci2: command tx timeout [ 80.660633][ T5622] Bluetooth: hci3: command tx timeout [ 80.660654][ T5622] Bluetooth: hci0: command tx timeout [ 81.031164][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.142023][ T5619] veth0_vlan: entered promiscuous mode [ 81.188656][ T5619] veth1_vlan: entered promiscuous mode [ 81.203624][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.295990][ T5619] veth0_macvtap: entered promiscuous mode [ 81.315634][ T5619] veth1_macvtap: entered promiscuous mode [ 81.389538][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.393560][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.395032][ T5618] veth0_vlan: entered promiscuous mode [ 81.405016][ T5618] veth1_vlan: entered promiscuous mode [ 81.442993][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.452115][ T5618] veth0_macvtap: entered promiscuous mode [ 81.482907][ T5618] veth1_macvtap: entered promiscuous mode [ 81.491569][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.499448][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.499800][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.499837][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.499869][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.555592][ T5620] veth0_vlan: entered promiscuous mode [ 81.580733][ T5620] veth1_vlan: entered promiscuous mode [ 81.634641][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.671912][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.762416][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.762472][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.809408][ T3384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.810273][ T3384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.810311][ T3384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.810344][ T3384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.878088][ T5614] veth0_vlan: entered promiscuous mode [ 81.885317][ T5620] veth0_macvtap: entered promiscuous mode [ 81.919595][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.919634][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.927964][ T5620] veth1_macvtap: entered promiscuous mode [ 81.989217][ T5614] veth1_vlan: entered promiscuous mode [ 82.054255][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.065005][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.085088][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.085125][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.100870][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.158371][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.158445][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.158497][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.158535][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.213198][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.213243][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.215468][ T5614] veth0_macvtap: entered promiscuous mode [ 82.259546][ T5614] veth1_macvtap: entered promiscuous mode [ 82.341437][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.382403][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.382447][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.396684][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.457143][ T3320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.476866][ T3320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.476904][ T3320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.558835][ T5696] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.590268][ T3384] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.608658][ T1192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.608729][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.608759][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.649399][ T4934] Bluetooth: hci1: command tx timeout [ 82.687523][ T5713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.715185][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.715230][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.721188][ T3384] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.731328][ T4934] Bluetooth: hci0: command tx timeout [ 82.731361][ T4934] Bluetooth: hci3: command tx timeout [ 82.731382][ T4934] Bluetooth: hci2: command tx timeout [ 82.766865][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.767251][ T5696] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 82.789675][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.889542][ T5713] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.908804][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.917001][ T5713] usb 2-1: Product: syz [ 82.923302][ T5713] usb 2-1: Manufacturer: syz [ 82.928561][ T5713] usb 2-1: SerialNumber: syz [ 83.030245][ T5781] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.062890][ T5780] PM: suspend entry (deep) [ 83.531399][ T50] Filesystems sync: 0.466 seconds [ 83.627074][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.778981][ T25] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 83.791223][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.791264][ T25] usb 1-1: Product: syz [ 83.791293][ T25] usb 1-1: Manufacturer: syz [ 83.791309][ T25] usb 1-1: SerialNumber: syz [ 83.811034][ T25] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 83.823964][ T25] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 83.854545][ T5780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.854992][ T5780] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.888543][ T5780] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 83.904793][ T5780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.905181][ T5780] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.919959][ T5780] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.922300][ T5780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.922361][ T5780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.937661][ T5780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.951918][ T5780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.952011][ T5780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.970239][ T5780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.682498][ T190] usb 1-1: USB disconnect, device number 2 [ 84.699916][ T190] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 84.712463][ T190] cyberjack 1-1:1.0: device disconnected [ 84.773944][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 84.773974][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 84.775495][ T5713] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 84.791076][ T5713] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -110 [ 85.242980][ T5796] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 85.254883][ T5796] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 85.263416][ T5796] CPU: 0 UID: 0 PID: 5796 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 85.272434][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.282489][ T5796] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 85.288136][ T5796] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 23 48 fa 49 8b 6d 00 4d 8d ae [ 85.307739][ T5796] RSP: 0018:ffffc9000454faa8 EFLAGS: 00010202 [ 85.313822][ T5796] RAX: 0000000000000001 RBX: ffff88801d7c9000 RCX: 0000000000000001 [ 85.321799][ T5796] RDX: ffffffff9af9c840 RSI: ffffffff8cd82280 RDI: ffff88802aadb498 [ 85.329861][ T5796] RBP: ffff88801d7c9010 R08: 0000000000000004 R09: 0000000000000000 [ 85.337835][ T5796] R10: dffffc0000000000 R11: ffffed100555b691 R12: dffffc0000000000 [ 85.345808][ T5796] R13: 0000000000000008 R14: ffff88802aadb438 R15: 1ffff1100555b698 [ 85.353874][ T5796] FS: 00007fbeecbe56c0(0000) GS:ffff8881248ab000(0000) knlGS:0000000000000000 [ 85.362811][ T5796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.369511][ T5796] CR2: 00007fbeecbe4ff8 CR3: 0000000078620000 CR4: 00000000003526f0 [ 85.377580][ T5796] Call Trace: [ 85.380870][ T5796] [ 85.383891][ T5796] ? __pfx_wcove_typec_probe+0x10/0x10 [ 85.389341][ T5796] platform_probe+0xf9/0x190 [ 85.393955][ T5796] ? __pfx_platform_probe+0x10/0x10 [ 85.399267][ T5796] really_probe+0x254/0xae0 [ 85.403775][ T5796] __driver_probe_device+0x1e8/0x360 [ 85.409075][ T5796] device_driver_attach+0xe0/0x1d0 [ 85.414188][ T5796] bind_store+0x1d0/0x220 [ 85.418511][ T5796] ? __pfx_sysfs_kf_write+0x10/0x10 [ 85.423701][ T5796] kernfs_fop_write_iter+0x3a4/0x540 [ 85.428981][ T5796] vfs_write+0x612/0xba0 [ 85.433228][ T5796] ? __pfx_vfs_write+0x10/0x10 [ 85.437996][ T5796] ? __fget_files+0x2a/0x420 [ 85.442583][ T5796] ksys_write+0x150/0x270 [ 85.446907][ T5796] ? __pfx_ksys_write+0x10/0x10 [ 85.451756][ T5796] do_syscall_64+0x166/0x520 [ 85.456436][ T5796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.462505][ T5796] ? clear_bhb_loop+0x70/0xc0 [ 85.467180][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.473069][ T5796] RIP: 0033:0x7fbeebd9e0d9 [ 85.477498][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.497102][ T5796] RSP: 002b:00007fbeecbe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.505508][ T5796] RAX: ffffffffffffffda RBX: 00007fbeec025fa0 RCX: 00007fbeebd9e0d9 [ 85.513475][ T5796] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000003 [ 85.521439][ T5796] RBP: 00007fbeebe35024 R08: 0000000000000000 R09: 0000000000000000 [ 85.529419][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.537391][ T5796] R13: 00007fbeec026038 R14: 00007fbeec025fa0 R15: 00007ffc31e13e08 [ 85.545361][ T5796] [ 85.548371][ T5796] Modules linked in: [ 85.554057][ T5796] ---[ end trace 0000000000000000 ]--- [ 85.560507][ T5796] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 85.566362][ T5796] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 23 48 fa 49 8b 6d 00 4d 8d ae [ 85.566388][ T5796] RSP: 0018:ffffc9000454faa8 EFLAGS: 00010202 [ 85.566412][ T5796] RAX: 0000000000000001 RBX: ffff88801d7c9000 RCX: 0000000000000001 [ 85.566428][ T5796] RDX: ffffffff9af9c840 RSI: ffffffff8cd82280 RDI: ffff88802aadb498 [ 85.566444][ T5796] RBP: ffff88801d7c9010 R08: 0000000000000004 R09: 0000000000000000 [ 85.566461][ T5796] R10: dffffc0000000000 R11: ffffed100555b691 R12: dffffc0000000000 [ 85.566479][ T5796] R13: 0000000000000008 R14: ffff88802aadb438 R15: 1ffff1100555b698 [ 85.566495][ T5796] FS: 00007fbeecbe56c0(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 85.566511][ T5796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.566527][ T5796] CR2: 00007fa3a1ea3ff8 CR3: 0000000078620000 CR4: 00000000003526f0 [ 85.566549][ T5796] Kernel panic - not syncing: Fatal exception [ 85.662558][ T5796] Kernel Offset: disabled [ 85.666987][ T5796] Rebooting in 86400 seconds..