last executing test programs: 3.538900862s ago: executing program 1 (id=8): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 3.211108082s ago: executing program 1 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3f, 0x3, "acd1e93ad0ea106ddb39225708bb69c808216067eee7c4a0", "561e1642983432c4630021d6bede7e392b9d9a148783918358d915b3071872e0"}}}}}}}, 0x6e) 2.960459695s ago: executing program 1 (id=13): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000440)={0x1e, {{0xa, 0x4e24, 0x9, @mcast1, 0x6}}, {{0xa, 0x4e24, 0xb8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}}}, 0x108) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 2.880045565s ago: executing program 1 (id=14): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) 2.813327506s ago: executing program 1 (id=15): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 2.259231848s ago: executing program 2 (id=18): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.060005936s ago: executing program 2 (id=21): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x48094) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x0, 0x0) 1.82483679s ago: executing program 1 (id=22): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) 1.080506259s ago: executing program 2 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 991.393819ms ago: executing program 2 (id=28): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee00, &(0x7f00000000c0)={0x0, 0x0, 0x2000200000a95c, 0xffffffffffffffff, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xfe}) 896.665628ms ago: executing program 0 (id=29): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) 801.16816ms ago: executing program 2 (id=30): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) r2 = socket$igmp6(0xa, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000300)={0x10000000}) 798.922918ms ago: executing program 0 (id=31): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) 759.076661ms ago: executing program 3 (id=32): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 641.09271ms ago: executing program 2 (id=33): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000ec0)={0xd84, "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"}) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffdf6, &(0x7f0000000200)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c7807e8773eed7b94fa099ab84feadec2ea95f67aba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e9b8e4fb4634f8d4c0000000d75f34bb50d8f7084000000000000000000") 593.110323ms ago: executing program 0 (id=34): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec01000016000100fdffffff000000006401010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033"], 0x1ec}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) 592.63224ms ago: executing program 3 (id=35): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) 487.109011ms ago: executing program 0 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x800e, 0x5}, @void, @eth={@broadcast, @multicast, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, '{', "d74c7ac3a853ecd57c0000000000a4"}}}}}}, 0x24) 483.902493ms ago: executing program 3 (id=37): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x7, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c7f00", [0x4, 0x5]}}) close(0x3) 303.67583ms ago: executing program 3 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x1400, 0xe000, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x14, 0x4, 0x2, 0x3, 0x2, 0x68, 0xff, 0x5, 0x88, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x3, 0xa1}, @timestamp={0x44, 0x2c, 0xc9, 0x0, 0x7, [0x40, 0x6, 0x5, 0x12b5, 0x3, 0x7, 0xfffffffb, 0x37be, 0x7, 0x0]}, @generic={0x7, 0xa, "1025c07c16c61c92"}]}}}}}, 0x7a) 226.931782ms ago: executing program 0 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="3305000000fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 146.631307ms ago: executing program 3 (id=40): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x40008, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 588.464µs ago: executing program 0 (id=41): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) 0s ago: executing program 3 (id=42): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 82.574251][ T5818] cgroup: Unknown subsys name 'net' [ 82.686984][ T5818] cgroup: Unknown subsys name 'cpuset' [ 82.697852][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.440370][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.298437][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.307520][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.315838][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.333944][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.341936][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.398156][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.420504][ T5153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.432063][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.450915][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.461348][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.469560][ T5153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.477343][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.486350][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.494544][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.505809][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.535853][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.551113][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.559488][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.572923][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.580953][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.007774][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.216073][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.246480][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.271229][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.279613][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.287615][ T5829] bridge_slave_0: entered allmulticast mode [ 89.296433][ T5829] bridge_slave_0: entered promiscuous mode [ 89.342884][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.350722][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.358372][ T5829] bridge_slave_1: entered allmulticast mode [ 89.366264][ T5829] bridge_slave_1: entered promiscuous mode [ 89.421903][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.482426][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.523659][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.598949][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.606846][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.614296][ T5833] bridge_slave_0: entered allmulticast mode [ 89.621849][ T5833] bridge_slave_0: entered promiscuous mode [ 89.641214][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.648871][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.656174][ T5834] bridge_slave_0: entered allmulticast mode [ 89.663888][ T5834] bridge_slave_0: entered promiscuous mode [ 89.685105][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.692310][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.699650][ T5833] bridge_slave_1: entered allmulticast mode [ 89.707327][ T5833] bridge_slave_1: entered promiscuous mode [ 89.717382][ T5829] team0: Port device team_slave_0 added [ 89.725965][ T5829] team0: Port device team_slave_1 added [ 89.742934][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.750122][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.757447][ T5834] bridge_slave_1: entered allmulticast mode [ 89.765046][ T5834] bridge_slave_1: entered promiscuous mode [ 89.857619][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.864890][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.891647][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.907348][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.919761][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.929233][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.936753][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.944208][ T5836] bridge_slave_0: entered allmulticast mode [ 89.951636][ T5836] bridge_slave_0: entered promiscuous mode [ 89.965503][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.972490][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.998688][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.012568][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.037669][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.047595][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.055391][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.063155][ T5836] bridge_slave_1: entered allmulticast mode [ 90.070551][ T5836] bridge_slave_1: entered promiscuous mode [ 90.148610][ T5833] team0: Port device team_slave_0 added [ 90.156709][ T5834] team0: Port device team_slave_0 added [ 90.166209][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.178906][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.190638][ T5833] team0: Port device team_slave_1 added [ 90.204487][ T5834] team0: Port device team_slave_1 added [ 90.317472][ T5829] hsr_slave_0: entered promiscuous mode [ 90.324315][ T5829] hsr_slave_1: entered promiscuous mode [ 90.331865][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.339176][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.365430][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.379377][ T5836] team0: Port device team_slave_0 added [ 90.386187][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.393220][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.419720][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.432563][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.439942][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.440207][ T5842] Bluetooth: hci0: command tx timeout [ 90.466539][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.484287][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.491433][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.517902][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.531164][ T5836] team0: Port device team_slave_1 added [ 90.593222][ T5842] Bluetooth: hci1: command tx timeout [ 90.598880][ T5842] Bluetooth: hci3: command tx timeout [ 90.604932][ T5839] Bluetooth: hci2: command tx timeout [ 90.627184][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.634329][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.660726][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.704791][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.711786][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.738003][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.809933][ T5834] hsr_slave_0: entered promiscuous mode [ 90.816883][ T5834] hsr_slave_1: entered promiscuous mode [ 90.823788][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 90.829736][ T5834] Cannot create hsr debugfs directory [ 90.841983][ T5833] hsr_slave_0: entered promiscuous mode [ 90.848822][ T5833] hsr_slave_1: entered promiscuous mode [ 90.855933][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.861881][ T5833] Cannot create hsr debugfs directory [ 90.994350][ T5836] hsr_slave_0: entered promiscuous mode [ 91.001061][ T5836] hsr_slave_1: entered promiscuous mode [ 91.007700][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 91.013557][ T5836] Cannot create hsr debugfs directory [ 91.369839][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.408733][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.453859][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.471490][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.619544][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.661813][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.676022][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.687163][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.784461][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.802346][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.825584][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.838228][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.050274][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.065856][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.098982][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.129776][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.205336][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.232446][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.261677][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.310337][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.317661][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.331755][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.362173][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.370161][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.430041][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.437506][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.485161][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.513098][ T5842] Bluetooth: hci0: command tx timeout [ 92.525273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.532464][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.588860][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.621687][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.628950][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.659663][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.666952][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.683921][ T5837] Bluetooth: hci2: command tx timeout [ 92.689462][ T5837] Bluetooth: hci1: command tx timeout [ 92.696369][ T5842] Bluetooth: hci3: command tx timeout [ 92.718062][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.780422][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.821146][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.935554][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.942916][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.991126][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.998404][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.228922][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.328187][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.394850][ T5834] veth0_vlan: entered promiscuous mode [ 93.410061][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.430023][ T5834] veth1_vlan: entered promiscuous mode [ 93.548578][ T5833] veth0_vlan: entered promiscuous mode [ 93.568292][ T5833] veth1_vlan: entered promiscuous mode [ 93.610173][ T5829] veth0_vlan: entered promiscuous mode [ 93.631881][ T5834] veth0_macvtap: entered promiscuous mode [ 93.641089][ T5829] veth1_vlan: entered promiscuous mode [ 93.675558][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.699278][ T5834] veth1_macvtap: entered promiscuous mode [ 93.715298][ T5833] veth0_macvtap: entered promiscuous mode [ 93.754870][ T5833] veth1_macvtap: entered promiscuous mode [ 93.765088][ T5829] veth0_macvtap: entered promiscuous mode [ 93.785527][ T5829] veth1_macvtap: entered promiscuous mode [ 93.799352][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.837685][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.850778][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.859795][ T5836] veth0_vlan: entered promiscuous mode [ 93.877242][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.902169][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.919145][ T5836] veth1_vlan: entered promiscuous mode [ 93.928035][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.939083][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.956068][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.975227][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.988402][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004099][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.014865][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.037847][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.048419][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075869][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.108400][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.119401][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.147998][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188768][ T5836] veth0_macvtap: entered promiscuous mode [ 94.224834][ T5836] veth1_macvtap: entered promiscuous mode [ 94.277131][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.308733][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.314299][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.332894][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.372122][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.381085][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.413333][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.422284][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.434840][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.444533][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.487919][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.505171][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.548653][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.556958][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.594864][ T5837] Bluetooth: hci0: command tx timeout [ 94.659586][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.683230][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.691208][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.743230][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.751116][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.763416][ T5837] Bluetooth: hci1: command tx timeout [ 94.768918][ T5837] Bluetooth: hci3: command tx timeout [ 94.775968][ T5842] Bluetooth: hci2: command tx timeout [ 94.891447][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.925713][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.018837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.042910][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.180048][ T5927] sctp: [Deprecated]: syz.0.5 (pid 5927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.180048][ T5927] Use struct sctp_sack_info instead [ 95.183987][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.478994][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.654374][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 95.669364][ T29] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 95.677992][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.689305][ T29] usb 4-1: config 0 has no interface number 0 [ 95.700742][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 95.733125][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.755080][ T29] usb 4-1: Product: syz [ 95.759321][ T29] usb 4-1: Manufacturer: syz [ 95.780881][ T29] usb 4-1: SerialNumber: syz [ 95.799746][ T29] usb 4-1: config 0 descriptor?? [ 95.821918][ T29] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 95.899202][ T5949] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 96.024318][ T29] usb 4-1: USB disconnect, device number 2 [ 96.064103][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.080365][ T5951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13'. [ 96.243130][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 96.250729][ T5875] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.258817][ T5875] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.272599][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.289740][ T5875] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.314068][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.327604][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.339838][ T5875] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.355004][ T5875] usb 1-1: config 168 interface 0 has no altsetting 0 [ 96.403628][ T5875] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.413465][ T5875] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.439657][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.463122][ T5875] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.475459][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.489583][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.502600][ T5875] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.520556][ T5875] usb 1-1: config 168 interface 0 has no altsetting 0 [ 96.529510][ T5875] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 96.539956][ T5875] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 96.555915][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 96.568127][ T5875] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.580300][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.598034][ T5875] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.610652][ T5875] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 96.641126][ T5875] usb 1-1: config 168 interface 0 has no altsetting 0 [ 96.654323][ T5875] usb 1-1: string descriptor 0 read error: -22 [ 96.660924][ T5875] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 96.670242][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.683563][ T5837] Bluetooth: hci0: command tx timeout [ 96.757795][ T5875] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 96.834744][ T5837] Bluetooth: hci3: command tx timeout [ 96.840476][ T5839] Bluetooth: hci2: command tx timeout [ 96.846480][ T5842] Bluetooth: hci1: command tx timeout [ 96.867677][ T5963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.994938][ T5967] process 'syz.3.20' launched './file1' with NULL argv: empty string added [ 97.006658][ T5967] ======================================================= [ 97.006658][ T5967] WARNING: The mand mount option has been deprecated and [ 97.006658][ T5967] and is ignored by this kernel. Remove the mand [ 97.006658][ T5967] option from the mount to silence this warning. [ 97.006658][ T5967] ======================================================= [ 97.057866][ T5897] usb 1-1: USB disconnect, device number 2 [ 97.090243][ T799] cfg80211: failed to load regulatory.db [ 97.453344][ T5875] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.622764][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 97.629758][ T5875] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 97.639702][ T5875] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 97.648393][ T5875] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 97.659338][ T5875] usb 2-1: config 250 has no interface number 0 [ 97.665787][ T5875] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 97.677470][ T5875] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 97.688303][ T5875] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.698747][ T5875] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.717899][ T5875] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 97.731531][ T5875] usb 2-1: config 250 interface 228 has no altsetting 0 [ 97.740370][ T5875] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 97.750851][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 97.759331][ T5875] usb 2-1: Product: syz [ 97.765262][ T5875] usb 2-1: SerialNumber: syz [ 97.784756][ T5875] hub 2-1:250.228: bad descriptor, ignoring hub [ 97.791298][ T5875] hub 2-1:250.228: probe with driver hub failed with error -5 [ 97.993511][ T5875] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 98.462383][ T6000] netlink: 244 bytes leftover after parsing attributes in process `syz.0.34'. [ 98.604416][ T5973] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 98.695539][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.725455][ T6008] syzkaller1: entered promiscuous mode [ 98.733156][ T6008] syzkaller1: entered allmulticast mode [ 98.784522][ T5973] usb 2-1: device firmware changed [ 98.795434][ T5875] usb 2-1: USB disconnect, device number 2 [ 98.828446][ T5875] usblp0: removed [ 98.855764][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.873925][ T5876] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.902733][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.927567][ T5876] usb 3-1: config 0 descriptor?? [ 98.973726][ T5875] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.142895][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 99.150792][ T5875] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 99.162786][ T5875] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 99.171378][ T5875] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 99.181700][ T5875] usb 2-1: config 250 has no interface number 0 [ 99.188260][ T5875] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 99.200164][ T5875] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 99.211423][ T5875] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.222049][ T5875] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 99.232574][ T5875] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 99.248735][ T5875] usb 2-1: config 250 interface 228 has no altsetting 0 [ 99.258405][ T5875] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 99.267605][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 99.276323][ T5875] usb 2-1: Product: syz [ 99.280570][ T5875] usb 2-1: SerialNumber: syz [ 99.297065][ T5875] hub 2-1:250.228: bad descriptor, ignoring hub [ 99.303589][ T5875] hub 2-1:250.228: probe with driver hub failed with error -5 [ 99.324410][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.354236][ T799] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.378085][ T5876] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 99.395054][ T5876] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 99.493204][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 99.505910][ T5897] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 99.514695][ T799] usb 1-1: Using ep0 maxpacket: 8 [ 99.522613][ T5897] usb 4-1: config 0 has no interface number 0 [ 99.531040][ T799] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.547716][ T5875] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 99.570220][ T799] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.581841][ T5897] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.599304][ T5876] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 99.612287][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.621194][ T799] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.644335][ T5875] usb 2-1: USB disconnect, device number 3 [ 99.651269][ T5897] usb 4-1: Product: syz [ 99.667537][ T5897] usb 4-1: Manufacturer: syz [ 99.672216][ T5897] usb 4-1: SerialNumber: syz [ 99.677285][ T799] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.699204][ T799] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.717068][ T799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.729641][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 99.741569][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 99.750046][ C1] CPU: 1 UID: 0 PID: 5187 Comm: acpid Not tainted syzkaller #0 PREEMPT(full) [ 99.759003][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 99.769255][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 99.774580][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 99.794243][ C1] RSP: 0018:ffffc90000a07f78 EFLAGS: 00010002 [ 99.800332][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 99.808406][ C1] RDX: ffffc90002352000 RSI: 00000000000005a0 RDI: 00000000000005a1 [ 99.816404][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 99.824421][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 99.832503][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 99.840485][ C1] FS: 00007fbfc51bc740(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 99.849435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.856058][ C1] CR2: 00007fa01bf45f5c CR3: 000000007f190000 CR4: 00000000003526f0 [ 99.864250][ C1] Call Trace: [ 99.867557][ C1] [ 99.870426][ C1] ? __asan_memcpy+0x40/0x70 [ 99.875049][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 99.881398][ C1] queue_work_on+0x106/0x1d0 [ 99.886024][ C1] k_pad+0x4c4/0xa90 [ 99.889937][ C1] ? lock_acquire+0x106/0x330 [ 99.894881][ C1] ? __pfx_k_pad+0x10/0x10 [ 99.899442][ C1] ? notifier_chain_unregister+0x25f/0x280 [ 99.905289][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 99.911166][ C1] kbd_event+0x2ec1/0x40d0 [ 99.915805][ C1] ? kernel_fpu_end+0x4f/0x80 [ 99.920525][ C1] ? blake2s_compress+0x1e17/0x1eb0 [ 99.925782][ C1] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 99.931813][ C1] ? __pfx_kbd_event+0x10/0x10 [ 99.936609][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 99.941574][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 99.946997][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 99.952237][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 99.957211][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.962290][ C1] ? input_pass_values+0x8d/0x890 [ 99.967637][ C1] ? lock_acquire+0x106/0x330 [ 99.972358][ C1] ? input_pass_values+0x8d/0x890 [ 99.977431][ C1] input_handle_events_default+0xd4/0x1a0 [ 99.983202][ C1] ? input_pass_values+0x8d/0x890 [ 99.988295][ C1] input_pass_values+0x288/0x890 [ 99.993471][ C1] ? input_handle_event+0xc35/0xf30 [ 99.998709][ C1] input_event_dispose+0x3e5/0x6b0 [ 100.003852][ C1] input_event+0x89/0xe0 [ 100.008123][ C1] hidinput_hid_event+0x1487/0x1e60 [ 100.013365][ C1] ? __pfx_hidinput_hid_event+0x10/0x10 [ 100.018983][ C1] ? hidinput_hid_event+0x14b6/0x1e60 [ 100.024417][ C1] hid_process_event+0x4be/0x620 [ 100.029383][ C1] hid_input_array_field+0x41c/0x5f0 [ 100.034701][ C1] hid_report_raw_event+0xdd7/0x1720 [ 100.040663][ C1] hid_input_report+0x44b/0x580 [ 100.045561][ C1] hid_irq_in+0x47e/0x6d0 [ 100.049932][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 100.055350][ C1] dummy_timer+0xbbd/0x45d0 [ 100.059900][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.064866][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.070735][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.075721][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 100.080745][ C1] __hrtimer_run_queues+0x529/0xc30 [ 100.086023][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 100.091783][ C1] ? read_tsc+0x9/0x20 [ 100.095886][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 100.101036][ C1] handle_softirqs+0x22a/0x7c0 [ 100.105833][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 100.110709][ C1] __irq_exit_rcu+0x5f/0x150 [ 100.115343][ C1] irq_exit_rcu+0x9/0x30 [ 100.119905][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 100.125675][ C1] [ 100.128643][ C1] [ 100.131612][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.137802][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x30/0x90 [ 100.144902][ C1] Code: 04 24 65 48 8b 15 78 b2 76 11 65 8b 0d 99 b2 76 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 54 16 00 00 00 74 52 <8b> 8a 30 16 00 00 83 f9 03 75 47 48 8b 8a 38 16 00 00 44 8b 8a 34 [ 100.164965][ C1] RSP: 0018:ffffc90003b7f638 EFLAGS: 00000246 [ 100.171096][ C1] RAX: ffffffff8247129f RBX: 0000000000000000 RCX: 0000000000000000 [ 100.179279][ C1] RDX: ffff8880246bbc80 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.187294][ C1] RBP: ffffc90003b7fb50 R08: ffff888032cf8013 R09: 1ffff1100659f002 [ 100.195319][ C1] R10: dffffc0000000000 R11: ffffed100659f003 R12: 0000000000000000 [ 100.203508][ C1] R13: 0000000000000010 R14: 0000000000000000 R15: 0000000000000000 [ 100.211649][ C1] ? do_select+0x110f/0x1800 [ 100.216288][ C1] do_select+0x110f/0x1800 [ 100.220738][ C1] ? do_select+0x871/0x1800 [ 100.225295][ C1] ? __pfx_do_select+0x10/0x10 [ 100.230181][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 100.235216][ C1] ? __pfx___pollwait+0x10/0x10 [ 100.240099][ C1] ? __pfx_pollwake+0x10/0x10 [ 100.244858][ C1] core_sys_select+0x896/0xc30 [ 100.249663][ C1] ? __pfx_core_sys_select+0x10/0x10 [ 100.254992][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 100.260390][ C1] __se_sys_pselect6+0x267/0x320 [ 100.265354][ C1] ? __pfx___se_sys_pselect6+0x10/0x10 [ 100.270866][ C1] ? __pfx_ksys_read+0x10/0x10 [ 100.275672][ C1] ? __x64_sys_pselect6+0x21/0xf0 [ 100.280723][ C1] do_syscall_64+0xe2/0xf80 [ 100.285256][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.291351][ C1] ? trace_irq_disable+0x37/0x100 [ 100.296414][ C1] ? clear_bhb_loop+0x40/0x90 [ 100.301339][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.307532][ C1] RIP: 0033:0x7fbfc5246407 [ 100.311989][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.332932][ C1] RSP: 002b:00007ffd8827f0c0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 100.341483][ C1] RAX: ffffffffffffffda RBX: 00007fbfc51bc740 RCX: 00007fbfc5246407 [ 100.349856][ C1] RDX: 0000000000000000 RSI: 00007ffd8827f1d0 RDI: 000000000000000b [ 100.357961][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 100.365983][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f036d181e4 [ 100.373995][ C1] R13: 0000000000000000 R14: 0000000000000007 R15: 000000000000000a [ 100.382007][ C1] [ 100.385249][ C1] Modules linked in: [ 100.389372][ C1] ---[ end trace 0000000000000000 ]--- [ 100.394863][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 100.400448][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 100.420165][ C1] RSP: 0018:ffffc90000a07f78 EFLAGS: 00010002 [ 100.426284][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 100.434277][ C1] RDX: ffffc90002352000 RSI: 00000000000005a0 RDI: 00000000000005a1 [ 100.442295][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 100.450307][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 100.458301][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 100.466740][ C1] FS: 00007fbfc51bc740(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 100.475789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.482412][ C1] CR2: 00007fa01bf45f5c CR3: 000000007f190000 CR4: 00000000003526f0 [ 100.490415][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 100.498250][ C1] Kernel Offset: disabled [ 100.502704][ C1] Rebooting in 86400 seconds..