last executing test programs: 2.441853795s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 2.275291243s ago: executing program 0 (id=6): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='none\x00', &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/1024, 0x400) 2.166128398s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) write(r0, &(0x7f0000000100)="05000000010001", 0x7) write(r0, &(0x7f0000000200)="0e00000002000204", 0x8) write(r0, &(0x7f0000000280)="1000000011000000000000000000000000000000000001", 0x17) write(r0, &(0x7f0000000140)="05000100010001", 0x7) write(r0, &(0x7f0000000240)="0e00010002000204", 0x8) write(r0, &(0x7f0000000300)="1000010011000000000000000000000000000000000001", 0x17) nanosleep(&(0x7f0000000380)={0x0, 0xbebc200}, 0x0) 2.049434694s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0104\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0x0200\n', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0x0100\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='0123456789\n', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='syzkaller\n', 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(r8, &(0x7f0000000740)='1\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x0) write(r9, &(0x7f00000007c0)='1\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r10, &(0x7f0000000840)='8\n', 0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r11, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r12 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r12, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) r13 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) write$hidraw(r13, &(0x7f0000000c40)="0001", 0x2) 1.960203287s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) 1.648572852s ago: executing program 0 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a8008000000020000002800048024000180080001000100000008000200", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="0600040000800000"], 0x54}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.464222311s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/heartbeat/mode\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/heartbeat/threshold\x00', 0x0, 0x0) 1.351898066s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 1.2774951s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/atm/cxacru:0\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/1, 0x1) read(r1, &(0x7f0000000600)=""/4096, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/self/net/atm/cxacru:0\x00', 0x0, 0x0) read(r2, &(0x7f0000000800)=""/1, 0x1) read(r2, &(0x7f0000000900)=""/4096, 0x1000) chdir(&(0x7f0000000a00)='./proc/net/atm\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='cxacru:0\x00', 0x0, 0x0) read(r3, &(0x7f0000000c00)=""/1, 0x1) read(r3, &(0x7f0000000d00)=""/4096, 0x1000) 1.182222364s ago: executing program 3 (id=12): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="85020000010000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f0000000300), 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.097239158s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe) write(r0, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe) close(r0) 983.208644ms ago: executing program 0 (id=14): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) 967.154184ms ago: executing program 3 (id=15): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='mount_timeout\x00', &(0x7f0000000600)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 673.579288ms ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./lower\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='ecryptfs_sig=0123456789abcdef,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 673.254038ms ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='1\n', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./pipefs/nfsd/cld\x00', 0x2, 0x0) write(r2, &(0x7f0000001000), 0x40a) write(r2, &(0x7f0000002000), 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000003100)='127.0.0.1:/\x00', &(0x7f0000003000)='./mnt\x00', &(0x7f0000003200), 0x0, &(0x7f0000003300)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,clientaddr=127.0.0.1\x00']) nanosleep(&(0x7f0000000340)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000004000), 0x40a) r3 = openat(0xffffffffffffff9c, &(0x7f0000005000)='./nfsd/clients/1/ctl\x00', 0x2, 0x0) write(r3, &(0x7f0000005100)='expire\n', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000005200)='./nfsd/clients/2/ctl\x00', 0x2, 0x0) write(r4, &(0x7f0000005300)='expire\n', 0x7) nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0) write(r2, &(0x7f0000006000), 0x40a) 114.843404ms ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\n', 0x2) 0s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='bxt_wcove_usbc\x00', 0xf) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/drivers/bxt_wcove_usbc\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000300)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='pcspkr\x00', 0x7) close(r3) close(r2) r4 = openat(r0, &(0x7f0000000400)='driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='mt6360-tcpc\x00', 0xc) close(r4) close(r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/mt6360-tcpc\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000580)='bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='pcspkr\x00', 0x7) close(r6) close(r5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='tcpci 0x2\x00', 0xa) close(r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 83.625162][ T5764] cgroup: Unknown subsys name 'net' [ 83.771346][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.472595][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.914421][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.922830][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.932258][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.940922][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.954863][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.965518][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.973608][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.981224][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.991926][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.999869][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.008418][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.016717][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.045077][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.053513][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.057965][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.061729][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.071259][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.083003][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.084737][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.105910][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.113305][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.121297][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.128922][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.137177][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.580319][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.692144][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.795423][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 88.832693][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.858459][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.865856][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.874352][ T5776] bridge_slave_0: entered allmulticast mode [ 88.881896][ T5776] bridge_slave_0: entered promiscuous mode [ 88.909374][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.916572][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.923827][ T5780] bridge_slave_0: entered allmulticast mode [ 88.931345][ T5780] bridge_slave_0: entered promiscuous mode [ 88.949242][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.956768][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.964150][ T5776] bridge_slave_1: entered allmulticast mode [ 88.971231][ T5776] bridge_slave_1: entered promiscuous mode [ 88.990224][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.998750][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.005997][ T5780] bridge_slave_1: entered allmulticast mode [ 89.013720][ T5780] bridge_slave_1: entered promiscuous mode [ 89.115354][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.140860][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.156048][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.173503][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.215626][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.225871][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.233150][ T5788] bridge_slave_0: entered allmulticast mode [ 89.240326][ T5788] bridge_slave_0: entered promiscuous mode [ 89.281486][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.288752][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.296017][ T5781] bridge_slave_0: entered allmulticast mode [ 89.303752][ T5781] bridge_slave_0: entered promiscuous mode [ 89.320138][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.327358][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.334702][ T5788] bridge_slave_1: entered allmulticast mode [ 89.342138][ T5788] bridge_slave_1: entered promiscuous mode [ 89.352075][ T5776] team0: Port device team_slave_0 added [ 89.359549][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.368258][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.375734][ T5781] bridge_slave_1: entered allmulticast mode [ 89.383016][ T5781] bridge_slave_1: entered promiscuous mode [ 89.403314][ T5780] team0: Port device team_slave_0 added [ 89.414274][ T5780] team0: Port device team_slave_1 added [ 89.456941][ T5776] team0: Port device team_slave_1 added [ 89.500981][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.524257][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.548768][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.569491][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.577076][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.604304][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.618973][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.630300][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.637531][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.663721][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.677271][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.684651][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.710896][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.733986][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.740981][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.770184][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.835116][ T5788] team0: Port device team_slave_0 added [ 89.845082][ T5788] team0: Port device team_slave_1 added [ 89.854434][ T5781] team0: Port device team_slave_0 added [ 89.863918][ T5781] team0: Port device team_slave_1 added [ 89.890896][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.898043][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.924352][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.969347][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.979365][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.005740][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.028123][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.035260][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.061868][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.091131][ T5776] hsr_slave_0: entered promiscuous mode [ 90.097575][ T5776] hsr_slave_1: entered promiscuous mode [ 90.136697][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.143745][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.170624][ T5778] Bluetooth: hci0: command tx timeout [ 90.170647][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.216531][ T5780] hsr_slave_0: entered promiscuous mode [ 90.223359][ T5780] hsr_slave_1: entered promiscuous mode [ 90.229707][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.238193][ T5778] Bluetooth: hci3: command tx timeout [ 90.243777][ T5785] Bluetooth: hci2: command tx timeout [ 90.243940][ T5785] Bluetooth: hci1: command tx timeout [ 90.247300][ T5780] Cannot create hsr debugfs directory [ 90.324587][ T5781] hsr_slave_0: entered promiscuous mode [ 90.331263][ T5781] hsr_slave_1: entered promiscuous mode [ 90.337850][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.345525][ T5781] Cannot create hsr debugfs directory [ 90.405747][ T5788] hsr_slave_0: entered promiscuous mode [ 90.412142][ T5788] hsr_slave_1: entered promiscuous mode [ 90.418836][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.426472][ T5788] Cannot create hsr debugfs directory [ 90.829505][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.849252][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.861990][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.874533][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.934950][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.959904][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.977477][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.989372][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.086207][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.098602][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.109783][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.123797][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.228152][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.239307][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.260323][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.271938][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.306707][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.394589][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.430265][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.451655][ T984] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.459250][ T984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.488521][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.495748][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.550821][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.574924][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.582071][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.648969][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.656185][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.679302][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.697193][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.720548][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.750033][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.780540][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.787789][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.799642][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.806873][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.826427][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.833614][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.870939][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.878225][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.010838][ T56] cfg80211: failed to load regulatory.db [ 92.233614][ T5778] Bluetooth: hci0: command tx timeout [ 92.261959][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.317881][ T5778] Bluetooth: hci3: command tx timeout [ 92.323432][ T51] Bluetooth: hci1: command tx timeout [ 92.323447][ T5785] Bluetooth: hci2: command tx timeout [ 92.444625][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.465795][ T5780] veth0_vlan: entered promiscuous mode [ 92.512205][ T5780] veth1_vlan: entered promiscuous mode [ 92.602456][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.635767][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.648560][ T5788] veth0_vlan: entered promiscuous mode [ 92.666245][ T5788] veth1_vlan: entered promiscuous mode [ 92.715612][ T5780] veth0_macvtap: entered promiscuous mode [ 92.770608][ T5781] veth0_vlan: entered promiscuous mode [ 92.781231][ T5780] veth1_macvtap: entered promiscuous mode [ 92.808915][ T5781] veth1_vlan: entered promiscuous mode [ 92.829450][ T5788] veth0_macvtap: entered promiscuous mode [ 92.860515][ T5788] veth1_macvtap: entered promiscuous mode [ 92.882118][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.896405][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.908009][ T5776] veth0_vlan: entered promiscuous mode [ 92.926214][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938499][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.947455][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.957916][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994108][ T5781] veth0_macvtap: entered promiscuous mode [ 93.007931][ T5781] veth1_macvtap: entered promiscuous mode [ 93.027140][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.039270][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.051698][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.061209][ T5776] veth1_vlan: entered promiscuous mode [ 93.104710][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.120646][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.137700][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.151108][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.160278][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169565][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.178431][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.206451][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.217515][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.228712][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.239356][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.251213][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.291744][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.304408][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.315023][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.325530][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.338150][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.386257][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396342][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.406222][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.415074][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.439383][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.452647][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.494041][ T5776] veth0_macvtap: entered promiscuous mode [ 93.541747][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.550415][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.591496][ T5776] veth1_macvtap: entered promiscuous mode [ 93.651822][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.671484][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.689360][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.712661][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.733042][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.770928][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.787688][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.799423][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.816700][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.874103][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.885031][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.897221][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.908436][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.929222][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.942143][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.955164][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.973470][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.981347][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.031413][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.041761][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.050422][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.059858][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.067666][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078349][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.213663][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.222260][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.314752][ T51] Bluetooth: hci0: command tx timeout [ 94.329645][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.362170][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.393172][ T51] Bluetooth: hci1: command tx timeout [ 94.398637][ T51] Bluetooth: hci3: command tx timeout [ 94.404697][ T5778] Bluetooth: hci2: command tx timeout [ 94.447627][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.470862][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.541791][ T5853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.665305][ T5856] Bluetooth: MGMT ver 1.22 [ 94.708891][ T5856] Bluetooth: MGMT ver 1.22 [ 94.888269][ T5860] svc: failed to register nfsdv3 RPC service (errno 111). [ 94.899220][ T5860] svc: failed to register nfsaclv3 RPC service (errno 111). [ 95.133130][ T5824] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.260384][ T27] audit: type=1800 audit(1790091227.452:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9" name="dead_threshold" dev="configfs" ino=6732 res=0 errno=0 [ 95.291866][ T27] audit: type=1800 audit(1790091227.452:3): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9" name="mode" dev="configfs" ino=6733 res=0 errno=0 [ 95.371789][ T5824] usb 1-1: Dual-Role OTG device on HNP port [ 95.388908][ T5824] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 1.00 [ 95.404957][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.413193][ T5824] usb 1-1: Product: HID Gadget [ 95.418049][ T5824] usb 1-1: Manufacturer: syzkaller [ 95.425874][ T5824] usb 1-1: SerialNumber: 0123456789 [ 95.562416][ T5824] input: syzkaller HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0001/input/input5 [ 95.694575][ T5874] bond0: (slave bond_slave_0): Releasing backup interface [ 95.781772][ T5876] bond0: (slave bond_slave_1): Releasing backup interface [ 95.794083][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.820704][ T5824] hid-generic 0003:1D6B:0104.0001: input,hidraw0: USB HID v1.01 Keyboard [syzkaller HID Gadget] on usb-dummy_hcd.0-1/input0 [ 95.919184][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 95.931997][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 96.034450][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.051179][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 96.086920][ T5823] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.124273][ T5823] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 96.182468][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.203908][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 96.224707][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 96.393578][ T5785] Bluetooth: hci0: command tx timeout [ 96.472722][ T5785] Bluetooth: hci1: command tx timeout [ 96.473198][ T5087] Bluetooth: hci3: command tx timeout [ 96.545831][ T5889] Could not find key with description: [0123456789abcdef] [ 96.573119][ T5889] process_request_key_err: No key [ 96.579903][ T5889] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 96.606212][ T5889] One or more global auth toks could not properly register; rc = [-2] [ 96.620026][ T5889] Error parsing options; rc = [-2] [ 96.695432][ T5879] ceph: No mds server is up or the cluster is laggy [ 96.715541][ T51] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 96.775897][ T28] libceph: connect (1)[c::]:6789 error -101 [ 96.798327][ T5778] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 96.806000][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 96.867941][ T5900] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 96.879736][ T5900] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 96.888201][ T5900] CPU: 1 PID: 5900 Comm: syz.2.19 Not tainted syzkaller #0 [ 96.895449][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.905031][ T5898] svc: failed to register nfsdv3 RPC service (errno 111). [ 96.905537][ T5900] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 96.918367][ T5900] Code: 27 00 74 13 49 8d be 90 00 00 00 e8 75 19 ff fa 49 8d 86 90 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ac 18 ff fa 49 8b 6d 00 4d 8d ae [ 96.938035][ T5900] RSP: 0018:ffffc90004b1faf8 EFLAGS: 00010202 [ 96.944150][ T5900] RAX: 0000000000000001 RBX: ffff8881422ad000 RCX: dffffc0000000000 [ 96.949181][ T5898] svc: failed to register nfsaclv3 RPC service (errno 111). [ 96.952144][ T5900] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888018b58088 [ 96.952163][ T5900] RBP: ffff8881422ad010 R08: ffff888018b580a7 R09: 0000000000000000 [ 96.975465][ T5900] R10: ffff888018b58098 R11: ffffed100316b015 R12: dffffc0000000000 [ 96.983468][ T5900] R13: 0000000000000008 R14: ffff888018b58028 R15: 1ffff1100316b017 [ 96.991472][ T5900] FS: 00007fa3d375c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 97.000439][ T5900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.007045][ T5900] CR2: 000000110c3b55cf CR3: 000000002dd0f000 CR4: 00000000003506e0 [ 97.015045][ T5900] Call Trace: [ 97.018347][ T5900] [ 97.021302][ T5900] platform_probe+0x13b/0x1c0 [ 97.026025][ T5900] ? platform_uevent+0xb0/0xb0 [ 97.030818][ T5900] really_probe+0x247/0xae0 [ 97.035353][ T5900] ? pm_runtime_barrier+0x14b/0x1c0 [ 97.040594][ T5900] __driver_probe_device+0x1f5/0x390 [ 97.045908][ T5900] device_driver_attach+0xe0/0x1d0 [ 97.051057][ T5900] bind_store+0x1cc/0x210 [ 97.055416][ T5900] ? sysfs_kf_read+0x360/0x360 [ 97.060207][ T5900] kernfs_fop_write_iter+0x3a4/0x520 [ 97.065527][ T5900] vfs_write+0x474/0x9a0 [ 97.069827][ T5900] ? file_end_write+0x250/0x250 [ 97.074721][ T5900] ? __fget_files+0x3fc/0x460 [ 97.079450][ T5900] ? __fdget_pos+0x2a3/0x330 [ 97.084160][ T5900] ? ksys_write+0x74/0x260 [ 97.088603][ T5900] ksys_write+0x151/0x260 [ 97.092964][ T5900] ? __ia32_sys_read+0x90/0x90 [ 97.097767][ T5900] ? lockdep_hardirqs_on+0x98/0x150 [ 97.103018][ T5900] do_syscall_64+0x55/0xb0 [ 97.107515][ T5900] ? clear_bhb_loop+0x40/0x90 [ 97.112231][ T5900] ? clear_bhb_loop+0x40/0x90 [ 97.116942][ T5900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.122883][ T5900] RIP: 0033:0x7fa3d279e159 [ 97.127353][ T5900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.147003][ T5900] RSP: 002b:00007fa3d375c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.155448][ T5900] RAX: ffffffffffffffda RBX: 00007fa3d2a25fa0 RCX: 00007fa3d279e159 [ 97.163455][ T5900] RDX: 0000000000000007 RSI: 0000200000000380 RDI: 0000000000000005 [ 97.171456][ T5900] RBP: 00007fa3d283506b R08: 0000000000000000 R09: 0000000000000000 [ 97.179482][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.187486][ T5900] R13: 00007fa3d2a26038 R14: 00007fa3d2a25fa0 R15: 00007ffcdbec3728 [ 97.195498][ T5900] [ 97.198545][ T5900] Modules linked in: [ 97.217811][ T5900] ---[ end trace 0000000000000000 ]--- [ 97.226722][ T5900] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 97.232569][ T5900] Code: 27 00 74 13 49 8d be 90 00 00 00 e8 75 19 ff fa 49 8d 86 90 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 ac 18 ff fa 49 8b 6d 00 4d 8d ae [ 97.252983][ T5900] RSP: 0018:ffffc90004b1faf8 EFLAGS: 00010202 [ 97.264231][ T5900] RAX: 0000000000000001 RBX: ffff8881422ad000 RCX: dffffc0000000000 [ 97.275662][ T5900] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff888018b58088 [ 97.285196][ T5900] RBP: ffff8881422ad010 R08: ffff888018b580a7 R09: 0000000000000000 [ 97.298547][ T5900] R10: ffff888018b58098 R11: ffffed100316b015 R12: dffffc0000000000 [ 97.307267][ T5900] R13: 0000000000000008 R14: ffff888018b58028 R15: 1ffff1100316b017 [ 97.344928][ T5900] FS: 00007fa3d375c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 97.380537][ T5903] tcpci: probe of 0-0002 failed with error -5 [ 97.386983][ T5900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.397470][ T5903] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 97.407819][ T5906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20'. [ 97.421938][ T5900] CR2: 000000110c3febf5 CR3: 000000002dd0f000 CR4: 00000000003506f0 [ 97.443807][ T5900] Kernel panic - not syncing: Fatal exception [ 97.450488][ T5900] Kernel Offset: disabled [ 97.454863][ T5900] Rebooting in 86400 seconds..