last executing test programs: 3.948445673s ago: executing program 2 (id=694): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) 3.675030792s ago: executing program 2 (id=698): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1ff, 0x2, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)) 3.397692191s ago: executing program 2 (id=704): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x20, 0xf, 0x3, "079604"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "ce1fc5a70e53b253bccd574d1915e2af6ff2014cf4e31fd22623b2c9cea72454cc7c2e7da43f77eeb0155a2c182e71"}}) userfaultfd(0x801) 3.1029936s ago: executing program 1 (id=708): kexec_load(0x3, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000700)={0x10000, 0x0, &(0x7f0000002000/0x2000)=nil}) 2.928254656s ago: executing program 1 (id=710): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2", 0x80}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.837100948s ago: executing program 1 (id=713): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x51) 2.708329493s ago: executing program 1 (id=714): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d800", 0x2}], 0x1}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.641717915s ago: executing program 1 (id=716): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) 2.424316942s ago: executing program 1 (id=719): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x8b, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x13}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x1, 0x1, [0x1], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.18776409s ago: executing program 3 (id=724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) writev(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000a00)=""/236, 0xec, 0x10140, 0x0, 0x0) 2.088506683s ago: executing program 3 (id=725): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3", 0x22}], 0x2}], 0x1, 0x40800) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x40000140, 0x0) 2.079158083s ago: executing program 3 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000900)={0x7, 0x0, [{0x80000000, 0x401, 0x2, 0xffdffff8, 0x8, 0xf222, 0x80004}, {0xd, 0x8000, 0x4, 0x8, 0x6, 0x5, 0x5c2}, {0x40000000, 0xffffffff, 0x0, 0x37, 0xbebc, 0x80000000, 0x3}, {0xc0000001, 0x3, 0x5, 0x4, 0xfffc, 0x9, 0x7df}, {0x80000007, 0xfffffffb, 0x0, 0x0, 0x8, 0x10a, 0x9}, {0x80000019, 0x1, 0x4, 0x200, 0x39, 0x81, 0x4}, {0xb, 0x8, 0x4, 0xff, 0x7fffffff, 0xffffffb6, 0x5}]}) 1.972330337s ago: executing program 3 (id=727): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x1d9, 0x0, 0x3}]}) 1.8562814s ago: executing program 3 (id=728): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c00028005000100"], 0x64}}, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852", 0x4b, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c761", 0xc4}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 949.32382ms ago: executing program 3 (id=730): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2", 0x80}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 736.380596ms ago: executing program 0 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x2}) 577.079932ms ago: executing program 0 (id=733): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) writev(r0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000a00)=""/236, 0xec, 0x10140, 0x0, 0x0) 458.332125ms ago: executing program 0 (id=734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x40800) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x40000140, 0x0) 367.930108ms ago: executing program 0 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000900)={0x7, 0x0, [{0x80000000, 0x401, 0x2, 0xffdffff8, 0x8, 0xf222, 0x80004}, {0xd, 0x8000, 0x4, 0x8, 0x6, 0x5, 0x5c2}, {0x40000000, 0xffffffff, 0x0, 0x37, 0xbebc, 0x80000000, 0x3}, {0xc0000001, 0x3, 0x5, 0x4, 0xfffc, 0x9, 0x7df}, {0x80000007, 0xfffffffb, 0x0, 0x0, 0x8, 0x10a, 0x9}, {0x80000019, 0x1, 0x4, 0x200, 0x39, 0x81, 0x4}, {0xb, 0x8, 0x4, 0xff, 0x7fffffff, 0xffffffb6, 0x5}]}) 224.269083ms ago: executing program 2 (id=736): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x1d9, 0x0, 0x3}]}) 168.391205ms ago: executing program 2 (id=737): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 136.051026ms ago: executing program 0 (id=738): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 60.335939ms ago: executing program 2 (id=739): r0 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 0 (id=740): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b0001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 67.823185][ T5759] cgroup: Unknown subsys name 'net' [ 67.952956][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.307213][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.310244][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.320257][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.328004][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.336500][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.344601][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.353456][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.362071][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.370334][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.380222][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.389774][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.399846][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.403145][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.414694][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.436386][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.447475][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.464663][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.473120][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.473585][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.487901][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.488943][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.502398][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.506461][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.522796][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.532420][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.609948][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.616715][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.872263][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 71.997609][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 72.074259][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.084494][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.092493][ T5771] bridge_slave_0: entered allmulticast mode [ 72.102469][ T5771] bridge_slave_0: entered promiscuous mode [ 72.139440][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.146734][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.153889][ T5771] bridge_slave_1: entered allmulticast mode [ 72.162272][ T5771] bridge_slave_1: entered promiscuous mode [ 72.169513][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 72.180414][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 72.272134][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.279394][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.286854][ T5770] bridge_slave_0: entered allmulticast mode [ 72.293541][ T5770] bridge_slave_0: entered promiscuous mode [ 72.303681][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.330938][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.338474][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.345700][ T5770] bridge_slave_1: entered allmulticast mode [ 72.352660][ T5770] bridge_slave_1: entered promiscuous mode [ 72.361695][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.442077][ T5771] team0: Port device team_slave_0 added [ 72.459201][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.468717][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.475851][ T5774] bridge_slave_0: entered allmulticast mode [ 72.482885][ T5774] bridge_slave_0: entered promiscuous mode [ 72.491857][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.499300][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.506889][ T5774] bridge_slave_1: entered allmulticast mode [ 72.513595][ T5774] bridge_slave_1: entered promiscuous mode [ 72.522237][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.534979][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.546565][ T5771] team0: Port device team_slave_1 added [ 72.590941][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.598211][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.605330][ T5772] bridge_slave_0: entered allmulticast mode [ 72.612364][ T5772] bridge_slave_0: entered promiscuous mode [ 72.649434][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.658354][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.665479][ T5772] bridge_slave_1: entered allmulticast mode [ 72.673146][ T5772] bridge_slave_1: entered promiscuous mode [ 72.690162][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.702752][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.714040][ T5770] team0: Port device team_slave_0 added [ 72.722554][ T5770] team0: Port device team_slave_1 added [ 72.730373][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.737624][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.763732][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.796016][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.818882][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.825851][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.851821][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.874472][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.900641][ T5774] team0: Port device team_slave_0 added [ 72.909467][ T5774] team0: Port device team_slave_1 added [ 72.941791][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.951380][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.978277][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.999706][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.006975][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.033146][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.054080][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.066370][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.092437][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.112178][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.119441][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.148299][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.162123][ T5772] team0: Port device team_slave_0 added [ 73.199372][ T5771] hsr_slave_0: entered promiscuous mode [ 73.206189][ T5771] hsr_slave_1: entered promiscuous mode [ 73.214605][ T5772] team0: Port device team_slave_1 added [ 73.245952][ T5770] hsr_slave_0: entered promiscuous mode [ 73.252285][ T5770] hsr_slave_1: entered promiscuous mode [ 73.258910][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.267216][ T5770] Cannot create hsr debugfs directory [ 73.357774][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.364752][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.391045][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.408625][ T5774] hsr_slave_0: entered promiscuous mode [ 73.415288][ T5774] hsr_slave_1: entered promiscuous mode [ 73.421580][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.429208][ T5774] Cannot create hsr debugfs directory [ 73.458433][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.465428][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.494113][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.527885][ T5777] Bluetooth: hci0: command tx timeout [ 73.533557][ T5777] Bluetooth: hci1: command tx timeout [ 73.584172][ T5772] hsr_slave_0: entered promiscuous mode [ 73.590877][ T5772] hsr_slave_1: entered promiscuous mode [ 73.597417][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.605062][ T5772] Cannot create hsr debugfs directory [ 73.606494][ T5777] Bluetooth: hci2: command tx timeout [ 73.616606][ T5783] Bluetooth: hci3: command tx timeout [ 73.932217][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.944715][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.957083][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.968154][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.032176][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.047650][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.059669][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.096131][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.167708][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.183294][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.193195][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.207513][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.248580][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.311957][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.338673][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.350300][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.360650][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.377096][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.413691][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.420985][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.432456][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.439638][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.517970][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.532586][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.605197][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.651122][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.680876][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.710146][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.717356][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.734244][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.741459][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.765762][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.772966][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.798758][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.805905][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.845231][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.905319][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.969602][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.005773][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.013088][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.024104][ T5770] veth0_vlan: entered promiscuous mode [ 75.062129][ T5770] veth1_vlan: entered promiscuous mode [ 75.075177][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.082407][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.170019][ T5770] veth0_macvtap: entered promiscuous mode [ 75.194125][ T5770] veth1_macvtap: entered promiscuous mode [ 75.235939][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.279195][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.331705][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342282][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.352626][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.362127][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381649][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.531072][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.589602][ T5771] veth0_vlan: entered promiscuous mode [ 75.606881][ T5783] Bluetooth: hci0: command tx timeout [ 75.612409][ T5777] Bluetooth: hci1: command tx timeout [ 75.646935][ T5771] veth1_vlan: entered promiscuous mode [ 75.655785][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.667360][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.687377][ T5777] Bluetooth: hci2: command tx timeout [ 75.692898][ T5777] Bluetooth: hci3: command tx timeout [ 75.713182][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.722968][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.733295][ T5774] veth0_vlan: entered promiscuous mode [ 75.770814][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.808420][ T5774] veth1_vlan: entered promiscuous mode [ 75.851211][ T5771] veth0_macvtap: entered promiscuous mode [ 75.882075][ T5771] veth1_macvtap: entered promiscuous mode [ 75.979690][ T5772] veth0_vlan: entered promiscuous mode [ 76.002932][ T5836] capability: warning: `syz.2.5' uses 32-bit capabilities (legacy support in use) [ 76.015297][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.025850][ T5836] program syz.2.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.027155][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.046948][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.062211][ T5774] veth0_macvtap: entered promiscuous mode [ 76.075480][ T5774] veth1_macvtap: entered promiscuous mode [ 76.088022][ T5772] veth1_vlan: entered promiscuous mode [ 76.095875][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.107203][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.121726][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.133593][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142501][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.151667][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.161283][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.211735][ T5772] veth0_macvtap: entered promiscuous mode [ 76.220122][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.233658][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.245139][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.256551][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.268451][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.280347][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.291238][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.302056][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.313883][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.335231][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.352305][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.362874][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.375116][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.384133][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.429966][ T5772] veth1_macvtap: entered promiscuous mode [ 76.518656][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.550445][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.569612][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.581217][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.595791][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.610905][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.624355][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.663105][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.681580][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.694067][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.705025][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.717518][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.731605][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.747582][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.793586][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.808845][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.822785][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.837133][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.846384][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.856095][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.919214][ T4533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.944298][ T4533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.077310][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.085172][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.165282][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.205679][ T4533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.246662][ T4533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.310102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.340358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.454508][ T4533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.506579][ T4533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.574162][ T5859] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 77.687347][ T5777] Bluetooth: hci1: command tx timeout [ 77.767214][ T5783] Bluetooth: hci2: command tx timeout [ 77.772809][ T5777] Bluetooth: hci3: command tx timeout [ 77.835150][ T5869] ubi16: attaching mtd0 [ 77.864461][ T5869] ubi16: scanning is finished [ 77.897009][ T5869] ubi16: empty MTD device detected [ 78.151813][ T5874] 9pnet: Could not find request transport: fd0x0000000000000005 [ 78.265054][ T5869] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 78.368172][ T5869] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.411287][ T5869] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.427441][ T5869] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 78.477159][ T5869] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.504876][ T5869] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.525159][ T5869] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1573263898 [ 78.586230][ T5869] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 78.648455][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.679182][ T5878] ubi16: background thread "ubi_bgt16d" started, PID 5878 [ 78.867719][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 78.877146][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.885902][ T27] usb 2-1: config 0 has no interface number 0 [ 78.899103][ T27] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 78.911612][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.920075][ T27] usb 2-1: Product: syz [ 78.924381][ T27] usb 2-1: Manufacturer: syz [ 78.929314][ T27] usb 2-1: SerialNumber: syz [ 78.940614][ T27] usb 2-1: config 0 descriptor?? [ 78.952304][ T27] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 79.046403][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.226272][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 79.234721][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 79.246444][ T5814] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.255533][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.266959][ T5814] usb 1-1: config 0 descriptor?? [ 79.273197][ T5892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 79.288673][ T5814] hub 1-1:0.0: bad descriptor, ignoring hub [ 79.294708][ T5814] hub: probe of 1-1:0.0 failed with error -5 [ 79.305103][ T5814] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 79.669654][ T5894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.676874][ T5894] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.688075][ T5894] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.696888][ T5894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.703092][ T5894] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.711376][ T5894] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 79.722378][ T5894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.728646][ T5894] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.736850][ T5894] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.745929][ T5894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.753344][ T5894] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.760898][ T5894] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.091926][ T5905] 9pnet: Could not find request transport: fd0x0000000000000005 [ 80.766370][ T27] gspca_spca1528: reg_r err -71 [ 80.771376][ T27] spca1528: probe of 2-1:0.1 failed with error -71 [ 80.815135][ T27] usb 2-1: USB disconnect, device number 2 [ 80.966848][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.336255][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.386161][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.494595][ T5924] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 81.501932][ T5924] comedi comedi3: 8255: I/O port conflict (0x13600,4) [ 81.508944][ T5924] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 81.519243][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.532110][ T8] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 81.549813][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 81.561207][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 81.572165][ T8] usb 4-1: Product: syz [ 81.576728][ T8] usb 4-1: Manufacturer: syz [ 81.581458][ T8] usb 4-1: SerialNumber: syz [ 81.587407][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 81.614335][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.631229][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.652911][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.662297][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.670650][ T27] usb 3-1: Product: syz [ 81.675061][ T27] usb 3-1: Manufacturer: syz [ 81.675178][ T5926] 9pnet: Could not find request transport: fd0x0000000000000005 [ 81.679710][ T27] usb 3-1: SerialNumber: syz [ 81.766589][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.767015][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.772738][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.824433][ T5916] warning: `syz.3.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.887209][ T1190] usb 4-1: USB disconnect, device number 2 [ 81.893724][ T27] usb 3-1: 0:2 : does not exist [ 81.911004][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 81.929435][ T23] usb 1-1: USB disconnect, device number 2 [ 82.023516][ T27] usb 3-1: USB disconnect, device number 2 [ 82.114543][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.866183][ T5812] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.917551][ T5951] 9pnet_fd: Insufficient options for proto=fd [ 83.020466][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 83.047000][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.077090][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 83.102636][ T5812] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 83.117201][ T5812] usb 4-1: config 0 has no interface number 0 [ 83.123383][ T5812] usb 4-1: config 0 interface 12 has no altsetting 0 [ 83.148719][ T5812] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 83.174303][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.191182][ T5812] usb 4-1: Product: syz [ 83.196316][ T5812] usb 4-1: Manufacturer: syz [ 83.201663][ T5812] usb 4-1: SerialNumber: syz [ 83.225801][ T5812] usb 4-1: config 0 descriptor?? [ 83.255219][ T5960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.693424][ T5972] binder: 5971:5972 unknown command 0 [ 83.712720][ T5972] binder: 5971:5972 ioctl c0306201 200000000080 returned -22 [ 83.759245][ T5812] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 83.786565][ T5812] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 83.813476][ T5812] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 83.824188][ T5812] f81534: probe of 4-1:0.12 failed with error -71 [ 83.846642][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.846662][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.846690][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.871321][ T5812] usb 4-1: USB disconnect, device number 3 [ 84.024185][ T5978] 9pnet_fd: Insufficient options for proto=fd [ 84.756194][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.936171][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 84.942813][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.953018][ T5812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.964190][ T5812] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 84.974170][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.982717][ T5812] usb 2-1: Product: syz [ 84.987076][ T5812] usb 2-1: Manufacturer: syz [ 84.991697][ T5812] usb 2-1: SerialNumber: syz [ 85.005227][ T5812] usb 2-1: config 0 descriptor?? [ 85.126215][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.232985][ T5812] usb 2-1: USB disconnect, device number 3 [ 85.327588][ T6005] 9pnet_fd: Insufficient options for proto=fd [ 85.491291][ T6011] sg_write: data in/out 321342/136 bytes for SCSI command 0x0-- guessing data in; [ 85.491291][ T6011] program syz.3.67 not setting count and/or reply_len properly [ 85.930738][ T5775] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.930937][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.936876][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.973651][ T6027] 9pnet_fd: Insufficient options for proto=fd [ 86.306945][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.507198][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 86.533845][ T5811] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 86.555781][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.581249][ T5811] usb 2-1: Product: syz [ 86.586923][ T5811] usb 2-1: Manufacturer: syz [ 86.601281][ T5811] usb 2-1: SerialNumber: syz [ 86.648327][ T5811] usb 2-1: config 0 descriptor?? [ 86.837902][ T6047] 9pnet_fd: Insufficient options for proto=fd [ 86.978644][ T787] cfg80211: failed to load regulatory.db [ 87.278797][ T5811] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 87.302403][ T5811] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 87.317015][ T5811] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 87.368432][ T5811] peak_usb: probe of 2-1:0.0 failed with error -22 [ 87.505823][ T5811] usb 2-1: USB disconnect, device number 4 [ 87.875849][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 88.257076][ T5811] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.467404][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 88.491280][ T6081] 9pnet_fd: Insufficient options for proto=fd [ 88.494789][ T5811] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 88.514523][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.525999][ T6085] syzkaller1: entered promiscuous mode [ 88.532019][ T5811] usb 1-1: Product: syz [ 88.536908][ T5811] usb 1-1: Manufacturer: syz [ 88.542144][ T6085] syzkaller1: entered allmulticast mode [ 88.548357][ T5811] usb 1-1: SerialNumber: syz [ 88.567007][ T5811] usb 1-1: config 0 descriptor?? [ 88.646210][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.736616][ T6092] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 88.744818][ T6092] netlink: 'syz.1.102': attribute type 2 has an invalid length. [ 88.799611][ T5811] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 89.199761][ T5811] usb write operation failed. (-71) [ 89.239275][ T5811] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.267924][ T5811] dvbdev: DVB: registering new adapter (Terratec H7) [ 89.284113][ T5811] usb 1-1: media controller created [ 89.301783][ T5811] usb read operation failed. (-71) [ 89.313660][ T5811] usb write operation failed. (-71) [ 89.334684][ T5811] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 89.355375][ T5811] usb 1-1: USB disconnect, device number 3 [ 90.428240][ T6140] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 90.428240][ T6140] program syz.2.123 not setting count and/or reply_len properly [ 90.796990][ T1190] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 90.989209][ T1190] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 91.010131][ T1190] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 91.023121][ T1190] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.042094][ T1190] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 91.051522][ T1190] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 91.059745][ T1190] usb 3-1: Manufacturer: syz [ 91.065477][ T1190] usb 3-1: SerialNumber: syz [ 91.074755][ T1190] usb 3-1: config 0 descriptor?? [ 91.301657][ T9] usb 3-1: USB disconnect, device number 3 [ 91.444138][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 92.796147][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 92.980951][ T6173] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.137'. [ 92.997137][ T787] usb 1-1: config 0 has no interfaces? [ 93.006483][ T6173] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.137'. [ 93.037711][ T787] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 93.038372][ T6175] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.137'. [ 93.060090][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.076466][ T787] usb 1-1: Product: syz [ 93.080878][ T787] usb 1-1: Manufacturer: syz [ 93.085578][ T787] usb 1-1: SerialNumber: syz [ 93.101938][ T787] usb 1-1: config 0 descriptor?? [ 93.362274][ T9] usb 1-1: USB disconnect, device number 4 [ 94.108987][ T6196] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 94.185149][ T28] audit: type=1326 audit(1782001735.153:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.0.148" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bbd79ce59 code=0x0 [ 94.371498][ T6205] ======================================================= [ 94.371498][ T6205] WARNING: The mand mount option has been deprecated and [ 94.371498][ T6205] and is ignored by this kernel. Remove the mand [ 94.371498][ T6205] option from the mount to silence this warning. [ 94.371498][ T6205] ======================================================= [ 95.127050][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.376431][ T27] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 95.564049][ T27] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 95.575738][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.587221][ T27] usb 1-1: Product: syz [ 95.591711][ T27] usb 1-1: Manufacturer: syz [ 95.597681][ T27] usb 1-1: SerialNumber: syz [ 96.045688][ T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 96.226175][ T1190] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 96.424876][ T1190] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 96.433519][ T1190] usb 4-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 96.444833][ T1190] usb 4-1: config 0 has no interface number 0 [ 96.457449][ T1190] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 42819, setting to 64 [ 96.475247][ T1190] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.494531][ T1190] usb 4-1: config 0 interface 52 has no altsetting 0 [ 96.503506][ T1190] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 96.516176][ T1190] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 96.524749][ T1190] usb 4-1: Manufacturer: syz [ 96.535166][ T1190] usb 4-1: config 0 descriptor?? [ 96.544040][ T1190] hub 4-1:0.52: bad descriptor, ignoring hub [ 96.552264][ T1190] hub: probe of 4-1:0.52 failed with error -5 [ 96.763948][ T1190] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 97.096416][ T5811] usb 4-1: USB disconnect, device number 4 [ 98.985403][ T28] audit: type=1326 audit(1782001739.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.1.181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ab859ce59 code=0x0 [ 99.107872][ T9] usb 1-1: USB disconnect, device number 5 [ 99.118766][ T9] usblp0: removed [ 101.823871][ T6342] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.987330][ T6382] capability: warning: `syz.2.220' uses deprecated v2 capabilities in a way that may be insecure [ 103.086219][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'. [ 103.086328][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 103.304270][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 103.315127][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.324556][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.814051][ T27] usb 2-1: USB disconnect, device number 5 [ 106.623828][ T6468] fuse: Bad value for 'fd' [ 107.295822][ T6463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.303515][ T6463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.309698][ T6463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.315908][ T6463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.565632][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 108.567290][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.367991][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.374169][ T5775] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.381160][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.896294][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.956181][ T1190] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 110.078442][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 110.085166][ T787] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 110.095469][ T787] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.106576][ T787] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.116400][ T787] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.129278][ T787] usb 3-1: config 7 interface 0 has no altsetting 0 [ 110.135916][ T787] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 110.145039][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.170362][ T1190] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 110.185869][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.195820][ T1190] usb 2-1: Product: syz [ 110.204697][ T1190] usb 2-1: Manufacturer: syz [ 110.210903][ T1190] usb 2-1: SerialNumber: syz [ 110.226266][ T1190] usb 2-1: config 0 descriptor?? [ 110.241083][ T1190] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 110.594437][ T787] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0001/input/input7 [ 110.714745][ T787] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 110.803067][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.822139][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.120974][ T787] usb 3-1: USB disconnect, device number 4 [ 111.446148][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.850221][ T1190] gspca_stk1135: reg_w 0x200 err -71 [ 111.866969][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.878532][ T1190] gspca_stk1135: Sensor write failed [ 111.883893][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.891770][ T1190] gspca_stk1135: Sensor write failed [ 111.897386][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.903889][ T1190] gspca_stk1135: Sensor read failed [ 111.910573][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.918625][ T1190] gspca_stk1135: Sensor read failed [ 111.923958][ T1190] gspca_stk1135: Detected sensor type unknown (0x0) [ 111.932561][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.949503][ T1190] gspca_stk1135: Sensor read failed [ 111.962597][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.985185][ T1190] gspca_stk1135: Sensor read failed [ 111.992359][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 111.999431][ T1190] gspca_stk1135: Sensor write failed [ 112.004861][ T1190] gspca_stk1135: serial bus timeout: status=0x00 [ 112.013721][ T1190] gspca_stk1135: Sensor write failed [ 112.019832][ T1190] stk1135: probe of 2-1:0.0 failed with error -71 [ 112.035541][ T1190] usb 2-1: USB disconnect, device number 6 [ 112.776648][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.976178][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 112.993414][ T787] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 113.011415][ T787] usb 3-1: config 0 has no interface number 0 [ 113.025607][ T787] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 113.038529][ T787] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 113.062178][ T787] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.086301][ T787] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.095406][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.129150][ T787] usb 3-1: config 0 descriptor?? [ 113.138710][ T787] ldusb 3-1:0.55: Interrupt in endpoint not found [ 113.937223][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.136245][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 114.153613][ T787] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 114.185934][ T787] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.202900][ T787] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.233506][ T787] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.288338][ T787] usb 4-1: config 7 interface 0 has no altsetting 0 [ 114.304696][ T787] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 114.329769][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.830208][ T787] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0002/input/input8 [ 114.944560][ T787] kye 0003:0458:5010.0002: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 114.997743][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.050618][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.056340][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.253669][ T27] usb 4-1: USB disconnect, device number 5 [ 115.609058][ T5783] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 115.901324][ T5811] usb 3-1: USB disconnect, device number 5 [ 115.998141][ T6674] process 'syz.2.343' launched './file0' with NULL argv: empty string added [ 116.034083][ T6674] Invalid argument reading file caps for ./file0 [ 116.412837][ T5783] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 116.595328][ T6696] Zero length message leads to an empty skb [ 116.611111][ T6696] (null): rxe_set_mtu: Set mtu to 1024 [ 117.007850][ T6696] infiniband syz2: set down [ 117.013077][ T6696] infiniband syz2: added ipvlan0 [ 117.081969][ T6696] RDS/IB: syz2: added [ 117.091915][ T6696] smc: adding ib device syz2 with port count 1 [ 117.101554][ T6696] smc: ib device syz2 port 1 has pnetid [ 117.111382][ T6711] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 117.146737][ T6711] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 117.262550][ T6715] can0: slcan on ptm0. [ 117.332964][ T6714] can0 (unregistered): slcan off ptm0. [ 117.396323][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.606343][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 117.618963][ T8] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 117.632626][ T8] usb 2-1: config 0 has no interface number 0 [ 117.642204][ T8] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 117.656143][ T8] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 117.670758][ T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 117.681175][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.690797][ T8] usb 2-1: Product: syz [ 117.695167][ T8] usb 2-1: Manufacturer: syz [ 117.700407][ T8] usb 2-1: SerialNumber: syz [ 117.710599][ T8] usb 2-1: config 0 descriptor?? [ 117.722116][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.730314][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.944363][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.953217][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.172555][ T8] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 119.590492][ T8] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 119.647699][ T8] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 119.707204][ T8] asix: probe of 2-1:0.34 failed with error -71 [ 119.766133][ T8] usb 2-1: USB disconnect, device number 7 [ 120.350684][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.552413][ T5811] usb 3-1: config 0 has no interfaces? [ 120.560277][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.583946][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.602979][ T5811] usb 3-1: config 0 descriptor?? [ 120.820885][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.838537][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.864816][ T5811] usb 3-1: USB disconnect, device number 6 [ 121.646658][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.876194][ T5811] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.095140][ T5811] usb 2-1: config 0 has no interfaces? [ 122.111785][ T5811] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 122.121530][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 122.136099][ T5811] usb 2-1: Product: syz [ 122.142206][ T5811] usb 2-1: Manufacturer: syz [ 122.148168][ T5811] usb 2-1: SerialNumber: syz [ 122.163752][ T5811] usb 2-1: config 0 descriptor?? [ 122.416753][ T5783] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 122.416853][ T5783] Bluetooth: hci1: Malformed LE Event: 0x02 [ 122.446438][ T27] usb 2-1: USB disconnect, device number 8 [ 123.386370][ T5811] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.592331][ T5811] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 123.601583][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.609994][ T5811] usb 2-1: Product: syz [ 123.614406][ T5811] usb 2-1: Manufacturer: syz [ 123.619196][ T5811] usb 2-1: SerialNumber: syz [ 123.642745][ T5811] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 123.739868][ T787] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 124.389576][ T5811] usb 2-1: USB disconnect, device number 9 [ 124.967503][ T787] usb 2-1: Service connection timeout for: 256 [ 124.989695][ T787] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 125.011165][ T787] ath9k_htc: Failed to initialize the device [ 125.029761][ T5811] usb 2-1: ath9k_htc: USB layer deinitialized [ 126.121674][ T6905] netlink: 72 bytes leftover after parsing attributes in process `syz.1.440'. [ 126.818874][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.028122][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.046235][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.070839][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.083805][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.096853][ T9] usb 2-1: SerialNumber: syz [ 127.273612][ T6934] program syz.2.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.329682][ T9] usb 2-1: 0:2 : does not exist [ 127.334684][ T9] usb 2-1: unit 5: unexpected type 0x09 [ 127.392027][ T9] usb 2-1: USB disconnect, device number 10 [ 127.442397][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.140947][ T6956] program syz.1.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.892658][ T6981] program syz.3.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.780082][ T7004] program syz.2.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.206149][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.419758][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 130.428834][ T5812] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 130.446695][ T5812] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.472154][ T5812] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.485883][ T5812] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 130.504926][ T5812] usb 3-1: config 7 interface 0 has no altsetting 0 [ 130.512087][ T5812] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 130.556119][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.001031][ T5812] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0003/input/input9 [ 131.045403][ T5812] kye 0003:0458:5010.0003: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 131.209915][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.259162][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.386911][ T5811] usb 3-1: USB disconnect, device number 7 [ 132.846222][ T5811] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.036245][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 133.043018][ T5811] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 133.059517][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060194][ T5811] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.066248][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.077114][ T5811] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.093351][ T5811] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.108292][ T5811] usb 4-1: config 7 interface 0 has no altsetting 0 [ 133.114956][ T5811] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 133.128797][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.615305][ T5811] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0004/input/input10 [ 133.672859][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 133.737716][ T5811] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 133.778036][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.814149][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.951818][ T9] usb 4-1: USB disconnect, device number 6 [ 135.046589][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.266145][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 135.266154][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.288377][ T27] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 135.299048][ T27] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.311542][ T27] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.321969][ T27] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.344508][ T27] usb 3-1: config 7 interface 0 has no altsetting 0 [ 135.352064][ T27] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 135.367193][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.446392][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 135.453932][ T8] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 135.476155][ T8] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.493333][ T8] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.503350][ T8] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 135.520648][ T8] usb 4-1: config 7 interface 0 has no altsetting 0 [ 135.528732][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 135.544525][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.794175][ T27] usbhid 3-1:7.0: can't add hid device: -71 [ 135.806282][ T27] usbhid: probe of 3-1:7.0 failed with error -71 [ 135.828651][ T27] usb 3-1: USB disconnect, device number 8 [ 136.024623][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0005/input/input11 [ 136.177447][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.207288][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.243935][ T8] kye 0003:0458:5010.0005: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 136.322160][ T8] usb 4-1: USB disconnect, device number 7 [ 136.390333][ T7164] fido_id[7164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 138.046225][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.266296][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 138.273243][ T8] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 138.303989][ T8] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.327238][ T8] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.345828][ T8] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 138.358831][ T8] usb 1-1: config 7 interface 0 has no altsetting 0 [ 138.365670][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 138.375440][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.864983][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0006/input/input12 [ 138.980045][ T8] kye 0003:0458:5010.0006: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 139.027522][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.067090][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.170837][ T27] usb 1-1: USB disconnect, device number 7 [ 140.450416][ T7271] fuse: Bad value for 'group_id' [ 140.906173][ T27] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 141.111832][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.139229][ T27] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 141.153325][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.177960][ T27] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 141.198799][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 141.207988][ T27] usb 2-1: Product: syz [ 141.212206][ T27] usb 2-1: Manufacturer: syz [ 141.217255][ T27] usb 2-1: SerialNumber: syz [ 141.240076][ T27] usb 2-1: config 0 descriptor?? [ 141.255790][ T7277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.297288][ T27] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 141.304870][ T27] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 141.319447][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 141.409281][ T7286] kvm_intel: kvm [7285]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 143.018048][ T7317] ubi: mtd0 is already attached to ubi16 [ 143.102454][ T7322] program syz.3.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.705658][ T8] usb 2-1: USB disconnect, device number 11 [ 144.416223][ T7348] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.089810][ T7374] program syz.1.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.186201][ T1206] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.225936][ T7378] program syz.2.635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.396308][ T1206] usb 1-1: Using ep0 maxpacket: 32 [ 145.410356][ T1206] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 145.433546][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.446243][ T1206] usb 1-1: Product: syz [ 145.450477][ T1206] usb 1-1: Manufacturer: syz [ 145.465298][ T1206] usb 1-1: SerialNumber: syz [ 145.473303][ T1206] usb 1-1: config 0 descriptor?? [ 145.500614][ T1206] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 146.937578][ T1206] gspca_topro: Sensor cx0342 [ 147.143112][ T787] usb 1-1: USB disconnect, device number 8 [ 147.372488][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.883811][ T7466] program syz.3.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.625516][ T7494] program syz.1.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.584278][ T7521] fuse: Unknown parameter 'group_i00000000000000000000' [ 150.132212][ T7547] fuse: Bad value for 'fd' [ 150.240573][ T7552] fuse: Unknown parameter 'group_i00000000000000000000' [ 150.426377][ T787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.616561][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 150.637696][ T787] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 150.674405][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.686543][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.694660][ T787] usb 3-1: Product: syz [ 150.700583][ T787] usb 3-1: Manufacturer: syz [ 150.710950][ T787] usb 3-1: SerialNumber: syz [ 150.720229][ T787] usb 3-1: config 0 descriptor?? [ 151.336200][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.529104][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.541882][ T787] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.552395][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.565292][ T787] usb 2-1: config 0 descriptor?? [ 151.805084][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 151.819534][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 151.830588][ T787] usb 2-1: USB disconnect, device number 12 [ 152.396231][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 152.588610][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.601659][ T787] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 152.610881][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.631912][ T787] usb 2-1: config 0 descriptor?? [ 153.203147][ T27] usb 3-1: USB disconnect, device number 9 [ 153.462525][ T787] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 153.469726][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.488213][ T787] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 153.505109][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.561430][ C1] ================================================================================ [ 153.570835][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 153.579427][ C1] index 261 is out of range for type 'const int[34]' [ 153.586117][ C1] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 153.593501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.603562][ C1] Workqueue: bat_events batadv_nc_worker [ 153.609244][ C1] Call Trace: [ 153.612525][ C1] [ 153.615368][ C1] dump_stack_lvl+0x18c/0x250 [ 153.620096][ C1] ? show_regs_print_info+0x20/0x20 [ 153.625300][ C1] ? load_image+0x420/0x420 [ 153.629813][ C1] ubsan_epilogue+0xa/0x30 [ 153.634232][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 153.639965][ C1] aiptek_irq+0x1eb8/0x2920 [ 153.644479][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 153.649511][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 153.655238][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 153.660625][ C1] dummy_timer+0xa40/0x3420 [ 153.665173][ C1] ? dummy_free_streams+0x520/0x520 [ 153.670378][ C1] ? dummy_free_streams+0x520/0x520 [ 153.675581][ C1] __hrtimer_run_queues+0x525/0xc10 [ 153.680803][ C1] ? hrtimer_interrupt+0x980/0x980 [ 153.685917][ C1] ? read_tsc+0x9/0x20 [ 153.689999][ C1] hrtimer_run_softirq+0x177/0x290 [ 153.695118][ C1] handle_softirqs+0x27d/0x820 [ 153.699888][ C1] ? do_softirq+0xfa/0x1a0 [ 153.704303][ C1] ? do_softirq+0x1a0/0x1a0 [ 153.708808][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 153.714274][ C1] do_softirq+0xfa/0x1a0 [ 153.718541][ C1] [ 153.721484][ C1] [ 153.724419][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 153.729808][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 153.735803][ C1] ? rcu_is_watching+0x15/0xb0 [ 153.740576][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 153.745779][ C1] ? _local_bh_enable+0xa0/0xa0 [ 153.750632][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 153.755843][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 153.761313][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 153.767825][ C1] batadv_nc_purge_paths+0x300/0x3a0 [ 153.773124][ C1] batadv_nc_worker+0x363/0x600 [ 153.777982][ C1] ? process_scheduled_works+0x975/0x1600 [ 153.783708][ C1] process_scheduled_works+0xa60/0x1600 [ 153.789282][ C1] ? worker_attach_to_pool+0x370/0x370 [ 153.794754][ C1] ? assign_work+0x3cc/0x5d0 [ 153.799357][ C1] worker_thread+0xa5e/0xfe0 [ 153.803972][ C1] kthread+0x2fa/0x390 [ 153.808044][ C1] ? pr_cont_work+0x550/0x550 [ 153.812727][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.817318][ C1] ret_from_fork+0x48/0x80 [ 153.821740][ C1] ? kthread_blkcg+0xd0/0xd0 [ 153.826333][ C1] ret_from_fork_asm+0x11/0x20 [ 153.831122][ C1] [ 153.834140][ C1] ================================================================================ [ 153.843424][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 153.850611][ C1] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 153.857980][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.868034][ C1] Workqueue: bat_events batadv_nc_worker [ 153.873685][ C1] Call Trace: [ 153.876965][ C1] [ 153.879807][ C1] dump_stack_lvl+0x18c/0x250 [ 153.884497][ C1] ? show_regs_print_info+0x20/0x20 [ 153.889701][ C1] ? load_image+0x420/0x420 [ 153.894215][ C1] panic+0x2ca/0x720 [ 153.898128][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 153.902647][ C1] check_panic_on_warn+0x84/0xa0 [ 153.907592][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 153.913328][ C1] aiptek_irq+0x1eb8/0x2920 [ 153.917845][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 153.922878][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 153.928628][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 153.934017][ C1] dummy_timer+0xa40/0x3420 [ 153.938560][ C1] ? dummy_free_streams+0x520/0x520 [ 153.943763][ C1] ? dummy_free_streams+0x520/0x520 [ 153.948965][ C1] __hrtimer_run_queues+0x525/0xc10 [ 153.954178][ C1] ? hrtimer_interrupt+0x980/0x980 [ 153.959292][ C1] ? read_tsc+0x9/0x20 [ 153.963367][ C1] hrtimer_run_softirq+0x177/0x290 [ 153.968482][ C1] handle_softirqs+0x27d/0x820 [ 153.973254][ C1] ? do_softirq+0xfa/0x1a0 [ 153.977670][ C1] ? do_softirq+0x1a0/0x1a0 [ 153.982173][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 153.987637][ C1] do_softirq+0xfa/0x1a0 [ 153.991878][ C1] [ 153.994803][ C1] [ 153.997729][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 154.003103][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 154.009089][ C1] ? rcu_is_watching+0x15/0xb0 [ 154.013856][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 154.019054][ C1] ? _local_bh_enable+0xa0/0xa0 [ 154.023904][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 154.029110][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 154.034573][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 154.041079][ C1] batadv_nc_purge_paths+0x300/0x3a0 [ 154.046379][ C1] batadv_nc_worker+0x363/0x600 [ 154.051238][ C1] ? process_scheduled_works+0x975/0x1600 [ 154.056962][ C1] process_scheduled_works+0xa60/0x1600 [ 154.062528][ C1] ? worker_attach_to_pool+0x370/0x370 [ 154.068008][ C1] ? assign_work+0x3cc/0x5d0 [ 154.072606][ C1] worker_thread+0xa5e/0xfe0 [ 154.077217][ C1] kthread+0x2fa/0x390 [ 154.081284][ C1] ? pr_cont_work+0x550/0x550 [ 154.085961][ C1] ? kthread_blkcg+0xd0/0xd0 [ 154.090548][ C1] ret_from_fork+0x48/0x80 [ 154.094965][ C1] ? kthread_blkcg+0xd0/0xd0 [ 154.099554][ C1] ret_from_fork_asm+0x11/0x20 [ 154.104335][ C1] [ 154.107585][ C1] Kernel Offset: disabled [ 154.111899][ C1] Rebooting in 86400 seconds..