last executing test programs: 1.306200434s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='soc-audio\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/soc-audio/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='pcspkr\x00', 0x7) close(r1) 1.182494659s ago: executing program 3 (id=5): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b94900000031c031d20f30", 0xb}], 0x1, 0x5f, 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 740.29198ms ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff0000000705810200020012010002000000402505a0a4000100000001", 0x48) read(r0, &(0x7f0000000280)=""/256, 0x100) read(r0, &(0x7f0000000380)=""/256, 0x100) read(r0, &(0x7f0000000480)=""/256, 0x100) write(r0, &(0x7f0000000580), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)="010000000705810240000007058102000200", 0x12) write(r1, &(0x7f0000000640)='hello', 0x5) 620.570382ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/features\x00', 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb0\x00', 0x0, 0x0) close(r1) 406.729444ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='vivid.0\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/vivid/parameters/supports_requests\x00', 0x0, 0x0) write(r1, &(0x7f0000000200)='0,0\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='vivid\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/platform/drivers/vivid/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='pcspkr\x00', 0x6) 350.381258ms ago: executing program 1 (id=7): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_disconnect(0x3) syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000080304016000060102030109022000010100a0320904000002ffffff00070581020002000705020200010000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl(r0, 0x541e, &(0x7f00000000c0)="000000000000000000000000000000001000"/72) 245.541611ms ago: executing program 2 (id=3): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030410600005010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) 0s ago: executing program 3 (id=8): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @global=@item_012={0x1, 0x1, 0x8, "01"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x2, "ff00"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, '@'}, @main=@item_012={0x1, 0x0, 0x8, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_usb_ep_write(r0, 0x81, 0x41, &(0x7f0000000500)="0100"/65) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/hwmon/hwmon0/temp1_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 64.016844][ T5600] cgroup: Unknown subsys name 'net' [ 64.121381][ T5600] cgroup: Unknown subsys name 'cpuset' [ 64.129359][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.483557][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.599050][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.599975][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.603123][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.603946][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.605102][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.605581][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.606183][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.608028][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.609354][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.609664][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.612733][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.615067][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.623692][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.624697][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.632826][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.633664][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.649592][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.658274][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.664754][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.665588][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.971834][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.973869][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.974006][ T5610] bridge_slave_0: entered allmulticast mode [ 68.975811][ T5610] bridge_slave_0: entered promiscuous mode [ 68.984702][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.984800][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.984917][ T5610] bridge_slave_1: entered allmulticast mode [ 68.990921][ T5610] bridge_slave_1: entered promiscuous mode [ 69.063828][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.066891][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.118732][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.118901][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.119015][ T5612] bridge_slave_0: entered allmulticast mode [ 69.120648][ T5612] bridge_slave_0: entered promiscuous mode [ 69.123662][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.123754][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.123861][ T5612] bridge_slave_1: entered allmulticast mode [ 69.125691][ T5612] bridge_slave_1: entered promiscuous mode [ 69.154742][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.183946][ T5610] team0: Port device team_slave_0 added [ 69.205760][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.225173][ T5610] team0: Port device team_slave_1 added [ 69.244021][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.244873][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.244989][ T5609] bridge_slave_0: entered allmulticast mode [ 69.246593][ T5609] bridge_slave_0: entered promiscuous mode [ 69.250216][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.250305][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.250882][ T5609] bridge_slave_1: entered allmulticast mode [ 69.252567][ T5609] bridge_slave_1: entered promiscuous mode [ 69.276989][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.277004][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.277027][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.296177][ T5612] team0: Port device team_slave_0 added [ 69.305678][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.305691][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.305715][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.322532][ T5612] team0: Port device team_slave_1 added [ 69.347464][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.380323][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.395141][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.395238][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.395348][ T5611] bridge_slave_0: entered allmulticast mode [ 69.397215][ T5611] bridge_slave_0: entered promiscuous mode [ 69.400459][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.400596][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.401050][ T5611] bridge_slave_1: entered allmulticast mode [ 69.402691][ T5611] bridge_slave_1: entered promiscuous mode [ 69.432760][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.432775][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.432798][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.496900][ T5610] hsr_slave_0: entered promiscuous mode [ 69.497946][ T5610] hsr_slave_1: entered promiscuous mode [ 69.529097][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.536706][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.536723][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.567063][ T5609] team0: Port device team_slave_0 added [ 69.571705][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.594137][ T5609] team0: Port device team_slave_1 added [ 69.596314][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.619440][ T5627] Bluetooth: hci0: command tx timeout [ 69.619769][ T4933] Bluetooth: hci3: command tx timeout [ 69.673604][ T5611] team0: Port device team_slave_0 added [ 69.691065][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.691100][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.691122][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.695014][ T5611] team0: Port device team_slave_1 added [ 69.724045][ T4933] Bluetooth: hci1: command tx timeout [ 69.728794][ T4933] Bluetooth: hci2: command tx timeout [ 69.734315][ T5612] hsr_slave_0: entered promiscuous mode [ 69.736992][ T5612] hsr_slave_1: entered promiscuous mode [ 69.738574][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 69.738654][ T5612] Cannot create hsr debugfs directory [ 69.739403][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.739414][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.739437][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.792428][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.792444][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.792467][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.795339][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.795352][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.795374][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.927971][ T5609] hsr_slave_0: entered promiscuous mode [ 69.929172][ T5609] hsr_slave_1: entered promiscuous mode [ 69.929814][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 69.929831][ T5609] Cannot create hsr debugfs directory [ 70.024859][ T5611] hsr_slave_0: entered promiscuous mode [ 70.026175][ T5611] hsr_slave_1: entered promiscuous mode [ 70.027161][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 70.027179][ T5611] Cannot create hsr debugfs directory [ 70.256799][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.269642][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.271902][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.282242][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.303693][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.312616][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.319517][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.323033][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.407479][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.416656][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.424864][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.434211][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.435022][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.445258][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.458044][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.467005][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.551280][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.562116][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.571369][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.581053][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.582174][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.597263][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.601683][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.607616][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.685098][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.710703][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.720212][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.724325][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.732292][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.751156][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.760819][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.769765][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.779175][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.788177][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.804149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.804254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.838571][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.838663][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.887954][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.940062][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.955583][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.955693][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.987550][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.987681][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.994922][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.054393][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.081307][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.081567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.103865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.103958][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.157532][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.248671][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.274144][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.274251][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.301833][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.302138][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.307610][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.307704][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.709890][ T4933] Bluetooth: hci3: command tx timeout [ 71.709936][ T4933] Bluetooth: hci0: command tx timeout [ 71.763936][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.781200][ T4933] Bluetooth: hci1: command tx timeout [ 71.787583][ T5627] Bluetooth: hci2: command tx timeout [ 71.887570][ T5610] veth0_vlan: entered promiscuous mode [ 71.905657][ T5610] veth1_vlan: entered promiscuous mode [ 71.984202][ T5610] veth0_macvtap: entered promiscuous mode [ 71.998219][ T5610] veth1_macvtap: entered promiscuous mode [ 72.054854][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.070329][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.076437][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.149578][ T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.161680][ T1019] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.162411][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.162556][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.286791][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.340111][ T5612] veth0_vlan: entered promiscuous mode [ 72.349974][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.372508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.372551][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.393214][ T5612] veth1_vlan: entered promiscuous mode [ 72.443547][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.443581][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.493583][ T5611] veth0_vlan: entered promiscuous mode [ 72.502254][ T5609] veth0_vlan: entered promiscuous mode [ 72.519442][ T5612] veth0_macvtap: entered promiscuous mode [ 72.532011][ T5611] veth1_vlan: entered promiscuous mode [ 72.543833][ T5609] veth1_vlan: entered promiscuous mode [ 72.548988][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.568021][ T5612] veth1_macvtap: entered promiscuous mode [ 72.617635][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.662620][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.694977][ T5611] veth0_macvtap: entered promiscuous mode [ 72.702163][ T5759] soc-audio pcspkr: probe with driver soc-audio failed with error -22 [ 72.721096][ T5609] veth0_macvtap: entered promiscuous mode [ 72.729775][ T5611] veth1_macvtap: entered promiscuous mode [ 72.761000][ T5609] veth1_macvtap: entered promiscuous mode [ 72.824519][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.837821][ T5761] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.859986][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.907155][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.924558][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.924595][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.949345][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.969037][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969219][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969378][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969512][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.969643][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.973039][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.973078][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.973111][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.059311][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.059346][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.158650][ T1019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.211319][ T5765] gadgetfs: bound to dummy_udc driver [ 73.219810][ T1019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.234030][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.234068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.242155][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.242225][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.344899][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.344950][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.405800][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.405842][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.446849][ T31] audit: type=1800 audit(1787021704.132:2): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="features" dev="configfs" ino=8114 res=0 errno=0 [ 73.485758][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.485808][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.530237][ T5716] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.530766][ C1] gadgetfs: connected [ 73.531292][ T5716] gadgetfs: disconnected [ 73.679300][ C1] gadgetfs: connected [ 73.684430][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 73.687742][ T5773] vivid-000: unregistering video7 [ 73.700887][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.713501][ T5773] vivid-000: unregistering video8 [ 73.723520][ C1] gadgetfs: configuration #1 [ 73.739196][ T5764] gadgetfs: suspended from state 4 [ 73.745158][ T5716] usb 1-1: can't set config #1, error -71 [ 73.752789][ T5764] gadgetfs: disconnected [ 73.774656][ T5773] vivid-000: unregistering vbi0 [ 73.779830][ T5627] Bluetooth: hci0: command tx timeout [ 73.779859][ T5627] Bluetooth: hci3: command tx timeout [ 73.803187][ T5716] usb 1-1: USB disconnect, device number 2 [ 73.813565][ T5773] vivid-000: unregistering vbi1 [ 73.814935][ T5776] vivid-000: using single planar format API [ 73.858932][ T4933] Bluetooth: hci1: command tx timeout [ 73.859110][ T4933] Bluetooth: hci2: command tx timeout [ 73.868192][ T5773] vivid-000: unregistering swradio0 [ 73.877231][ T5773] vivid-000: unregistering radio0 [ 73.895184][ T5773] vivid-000: unregistering radio1 [ 73.898818][ T5703] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.952789][ T5773] vivid-000: unregistering video9 [ 74.009143][ T5773] vivid-000: unregistering video10 [ 74.016517][ T5773] vivid-000: unregistering v4l-touch0 [ 74.023394][ T5776] vivid-000: CEC adapter cec48 registered for HDMI input [ 74.049222][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 74.050349][ T5703] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 74.051411][ T5703] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 74.051432][ T5703] usb 2-1: config 0 has no interface number 0 [ 74.051539][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.060595][ T1854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.101828][ T5703] usb 2-1: config 0 descriptor?? [ 74.136296][ T5776] vivid-000: V4L2 capture device registered as video7 [ 74.150457][ T5776] vivid-000: CEC adapter cec49 registered for HDMI output 0 [ 74.159740][ T5776] vivid-000: V4L2 output device registered as video8 [ 74.185159][ T5776] vivid-000: V4L2 capture device registered as vbi0, supports raw and sliced VBI [ 74.202626][ T5776] vivid-000: V4L2 output device registered as vbi1, supports raw and sliced VBI [ 74.212160][ T1854] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 74.225594][ T5776] vivid-000: V4L2 capture device registered as swradio0 [ 74.236152][ T5776] vivid-000: V4L2 receiver device registered as radio0 [ 74.245214][ T1854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.245253][ T1854] usb 3-1: Product: syz [ 74.245282][ T1854] usb 3-1: Manufacturer: syz [ 74.245296][ T1854] usb 3-1: SerialNumber: syz [ 74.268727][ T5614] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.268911][ T5776] vivid-000: V4L2 transmitter device registered as radio1 [ 74.273054][ T5703] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 74.327406][ T5776] vivid-000: V4L2 metadata capture device registered as video9 [ 74.346002][ T5776] vivid-000: V4L2 metadata output device registered as video10 [ 74.362181][ T5776] vivid-000: V4L2 touch capture device registered as v4l-touch0 [ 74.385722][ T1854] ftdi_sio 3-1:1.0: FTDI USB Serial Device converter detected [ 74.402083][ T5776] vivid-001: using multiplanar format API [ 74.402117][ T1854] usb 3-1: Detected FT2232C/D [ 74.422025][ T5614] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 74.435158][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.435219][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.486322][ T5614] usb 4-1: config 0 descriptor?? [ 74.514921][ T5776] vivid-001: CEC adapter cec0 registered for HDMI input [ 74.530592][ T5776] vivid-001: V4L2 capture device registered as video103 [ 74.535266][ T5703] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 74.535292][ T5703] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 74.569332][ T5776] vivid-001: CEC adapter cec1 registered for HDMI output 0 [ 74.578860][ T5776] videodev: could not get a free minor [ 74.795993][ T5703] usb 2-1: USB disconnect, device number 2 [ 74.873000][ T5773] vivid-001: unregistering video11 [ 74.971309][ T5773] vivid-001: unregistering video12 [ 75.063790][ T5776] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000be7: 0000 [#1] SMP KASAN PTI [ 75.075726][ T5776] KASAN: probably user-memory-access in range [0x0000000000005f38-0x0000000000005f3f] [ 75.084166][ T5614] aquacomputer_d5next 0003:0C70:F00E.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.3-1/input0 [ 75.097515][ T5776] CPU: 1 UID: 0 PID: 5776 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 75.106543][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.116603][ T5776] RIP: 0010:vivid_probe+0x6421/0x70c0 [ 75.122017][ T5776] Code: 30 42 80 3c 28 00 74 08 4c 89 ff e8 a9 44 c0 f9 4c 89 7c 24 08 49 8b 07 48 89 04 24 4c 8d b8 39 5f 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 88 05 00 00 41 80 3f 00 0f 84 98 02 00 [ 75.141630][ T5776] RSP: 0018:ffffc90004ddf8c0 EFLAGS: 00010206 [ 75.147718][ T5776] RAX: 0000000000000be7 RBX: 0000000000000002 RCX: 0000000000080000 [ 75.155699][ T5776] RDX: ffffc9000e693000 RSI: 000000000005342c RDI: 000000000005342d [ 75.163704][ T5776] RBP: ffffc90004ddfaf0 R08: ffffffff909ac37f R09: 1ffffffff213586f [ 75.171693][ T5776] R10: dffffc0000000000 R11: fffffbfff2135870 R12: ffff888056369958 [ 75.179674][ T5776] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000005f39 [ 75.187646][ T5776] FS: 00007f6040dda6c0(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 75.196573][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.203156][ T5776] CR2: 00007f6fd394b2fe CR3: 000000007944a000 CR4: 00000000003526f0 [ 75.211171][ T5776] Call Trace: [ 75.214456][ T5776] [ 75.217395][ T5776] ? __pfx_vivid_probe+0x10/0x10 [ 75.222348][ T5776] ? kernfs_put+0x7b9/0x820 [ 75.226855][ T5776] ? is_acpi_device_node+0x26/0x70 [ 75.231973][ T5776] ? dev_pm_domain_attach+0xbd/0xf0 [ 75.237176][ T5776] ? __pfx_vivid_probe+0x10/0x10 [ 75.242115][ T5776] platform_probe+0xf9/0x190 [ 75.246713][ T5776] ? __pfx_platform_probe+0x10/0x10 [ 75.251943][ T5776] really_probe+0x254/0xae0 [ 75.256455][ T5776] __driver_probe_device+0x1e8/0x360 [ 75.261752][ T5776] device_driver_attach+0xe0/0x1d0 [ 75.266872][ T5776] bind_store+0x1d0/0x220 [ 75.271201][ T5776] ? __pfx_sysfs_kf_write+0x10/0x10 [ 75.276405][ T5776] kernfs_fop_write_iter+0x3a4/0x540 [ 75.281696][ T5776] vfs_write+0x612/0xba0 [ 75.285951][ T5776] ? __pfx_vfs_write+0x10/0x10 [ 75.290729][ T5776] ? __fget_files+0x2a/0x420 [ 75.295333][ T5776] ksys_write+0x150/0x270 [ 75.299658][ T5776] ? __pfx_ksys_write+0x10/0x10 [ 75.304515][ T5776] do_syscall_64+0x166/0x520 [ 75.309115][ T5776] ? trace_irq_disable+0x3b/0x140 [ 75.314138][ T5776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.320197][ T5776] ? clear_bhb_loop+0x70/0xc0 [ 75.324868][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.330752][ T5776] RIP: 0033:0x7f603ff9e0d9 [ 75.335178][ T5776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.354777][ T5776] RSP: 002b:00007f6040dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.363187][ T5776] RAX: ffffffffffffffda RBX: 00007f6040226090 RCX: 00007f603ff9e0d9 [ 75.371156][ T5776] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000006 [ 75.379120][ T5776] RBP: 00007f6040035024 R08: 0000000000000000 R09: 0000000000000000 [ 75.387086][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.395045][ T5776] R13: 00007f6040226128 R14: 00007f6040226090 R15: 00007fff6abbbfe8 [ 75.403019][ T5776] [ 75.406029][ T5776] Modules linked in: [ 75.411030][ T5776] ---[ end trace 0000000000000000 ]--- [ 75.418209][ T5776] RIP: 0010:vivid_probe+0x6421/0x70c0 [ 75.418249][ T5776] Code: 30 42 80 3c 28 00 74 08 4c 89 ff e8 a9 44 c0 f9 4c 89 7c 24 08 49 8b 07 48 89 04 24 4c 8d b8 39 5f 00 00 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 88 05 00 00 41 80 3f 00 0f 84 98 02 00 [ 75.418269][ T5776] RSP: 0018:ffffc90004ddf8c0 EFLAGS: 00010206 [ 75.418292][ T5776] RAX: 0000000000000be7 RBX: 0000000000000002 RCX: 0000000000080000 [ 75.418399][ T5776] RDX: ffffc9000e693000 RSI: 000000000005342c RDI: 000000000005342d [ 75.418417][ T5776] RBP: ffffc90004ddfaf0 R08: ffffffff909ac37f R09: 1ffffffff213586f [ 75.418435][ T5776] R10: dffffc0000000000 R11: fffffbfff2135870 R12: ffff888056369958 [ 75.418452][ T5776] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000005f39 [ 75.418467][ T5776] FS: 00007f6040dda6c0(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 75.418486][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.418502][ T5776] CR2: 00007ffdc5914ea0 CR3: 000000007944a000 CR4: 00000000003526f0 [ 75.418524][ T5776] Kernel panic - not syncing: Fatal exception [ 75.519078][ T5776] Kernel Offset: disabled [ 75.523390][ T5776] Rebooting in 86400 seconds..