last executing test programs: 15.207081793s ago: executing program 4 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000a0000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) 14.997439675s ago: executing program 4 (id=169): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x81, &(0x7f0000001c00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x5f, 0x0, @wg=@data={0x4, 0x2007407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67ab2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/86, 0x56}, {0x0}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x3}, 0x7fff}], 0x1, 0x20, 0x0) 14.871720616s ago: executing program 4 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x400454c9, 0x0) 14.681163589s ago: executing program 4 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 14.471718364s ago: executing program 4 (id=181): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r1, 0x1, &(0x7f0000001500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 14.035383068s ago: executing program 4 (id=187): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 13.51140785s ago: executing program 32 (id=187): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 2.918455818s ago: executing program 0 (id=283): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getpid() r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xffffffff, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x40) 2.474183623s ago: executing program 3 (id=290): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1, &(0x7f0000000380)=""/201, 0xc9}, 0x3}], 0x1, 0x20, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="d91e42c42c19bc979aec39eda5f227c569ee8c5d0726d35839be5df50165c41e5f564757b66ea79fabce98b19055210f71b645b4ce5d53097350ec250158ee8baebea38cfd92354874a23c5cad022af3a3eec75a83e7efb4a07a424b1f30f2e3aefa86bef221ff3586b72a87d0a8e61176d00a369c62702e716ba94c6a0dce9f85dd979c33a441a4e5340c267d8fa780e1", 0x91}], 0x1}}], 0x2, 0x40480dc) 2.351275353s ago: executing program 2 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0xfffffff7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @multicast2, @broadcast}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b0f, &(0x7f0000000040)) 2.236745765s ago: executing program 2 (id=292): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0xab2f, @private2, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001180)="a7", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x1, 0x2}, &(0x7f0000000340)=0x90) 2.140008278s ago: executing program 5 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000380), &(0x7f0000000400)=@tcp6, 0x1}, 0x20) 2.110956455s ago: executing program 3 (id=295): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x4000, 0x0}, 0x10) 2.028267772s ago: executing program 2 (id=296): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 1.935825277s ago: executing program 3 (id=298): creat(&(0x7f0000000300)='./file0\x00', 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rfdno'}}]}}) 1.92148857s ago: executing program 0 (id=299): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x40000000, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2}) close(0x3) 1.887647444s ago: executing program 5 (id=300): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, r1, 0x0, 0x4}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x1, 0x0, &(0x7f0000000080)=[{0x0, 0x2}]}) 1.723241705s ago: executing program 0 (id=302): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1.693345331s ago: executing program 3 (id=303): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 1.643820621s ago: executing program 5 (id=304): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x1, 0x0, 0x1, 0x3, 0xc, 0x800}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.599197923s ago: executing program 2 (id=305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[], 0x80}}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0) 1.585721302s ago: executing program 0 (id=306): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) 1.470265065s ago: executing program 5 (id=308): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x3, 0x0, @multicast2, {0x6, 0x4, 0x1, 0x7, 0x3, 0x67, 0x0, 0x8, 0x1, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x44, 0x2}]}}}}}}}, 0x0) 1.429878898s ago: executing program 3 (id=309): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) 1.428970601s ago: executing program 2 (id=310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f00000002c0)=""/223) 1.388021735s ago: executing program 0 (id=311): r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x465e, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 1.248428205s ago: executing program 5 (id=313): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.232120818s ago: executing program 3 (id=314): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xfe, &(0x7f00000059c0)="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"}], 0x1}) 1.12823193s ago: executing program 2 (id=315): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5322, 0x10000, 0x0, 0x100002cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.002584468s ago: executing program 5 (id=317): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000380)=[{0x4, 0x4800, 0x0, 0x0}, {0xc, 0xb011, 0x0, 0x0}, {0x0, 0xc501, 0x73, &(0x7f00000002c0)="53ebce137433d040295bb67839bca048cf60cc7a31e6977c22b28461eebc5192d6e51404d42b6b8babc2be1db06c2cdad79fe457b0d72a57692932bf9f59bace382aa9e1adcf38aeed2f8e7daf4f1bf116e51ef1eea9c2f2771d38c0bcb19cea87453b42e6e655402dce6bdec5f439e028b804"}], 0x3}) 854.92924ms ago: executing program 0 (id=319): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000406d0462c200000000000109022400010000000009040000010300000009210400000122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="202d9b0000009b"], 0x0, 0x0, 0x0}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 636.521175ms ago: executing program 1 (id=321): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'virt_wifi0\x00', @random}) 504.486994ms ago: executing program 1 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a310000000028000480080001"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 412.828837ms ago: executing program 1 (id=323): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000180)={{@host, 0xa4e}, {@any, 0x767}, 0x400, "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"}, 0x418, 0x24c4}) 330.443725ms ago: executing program 1 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970001400078008"], 0x60}}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) 153.117392ms ago: executing program 1 (id=325): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x1d, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 0s ago: executing program 1 (id=326): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. [ 85.519532][ T5824] cgroup: Unknown subsys name 'net' [ 85.675352][ T5824] cgroup: Unknown subsys name 'cpuset' [ 85.685458][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.376262][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.106099][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.112820][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.114946][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.126375][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.128992][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.146227][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.151307][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.158341][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.160759][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.169015][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.176461][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.183968][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.191510][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.196274][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.211196][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.219646][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.227669][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.236549][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.245447][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.262950][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.271355][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.279449][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.288681][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.303612][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.311923][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.036835][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.057238][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.183446][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 91.205122][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 91.318446][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 91.495379][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.502991][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.510798][ T5835] bridge_slave_0: entered allmulticast mode [ 91.518627][ T5835] bridge_slave_0: entered promiscuous mode [ 91.533592][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.542350][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.549661][ T5843] bridge_slave_0: entered allmulticast mode [ 91.557498][ T5843] bridge_slave_0: entered promiscuous mode [ 91.586753][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.595477][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.602860][ T5848] bridge_slave_0: entered allmulticast mode [ 91.610512][ T5848] bridge_slave_0: entered promiscuous mode [ 91.619454][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.626899][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.634457][ T5835] bridge_slave_1: entered allmulticast mode [ 91.643260][ T5835] bridge_slave_1: entered promiscuous mode [ 91.666154][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.673612][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.680808][ T5843] bridge_slave_1: entered allmulticast mode [ 91.689560][ T5843] bridge_slave_1: entered promiscuous mode [ 91.704567][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.711888][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.719314][ T5848] bridge_slave_1: entered allmulticast mode [ 91.726892][ T5848] bridge_slave_1: entered promiscuous mode [ 91.822657][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.830121][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.838467][ T5851] bridge_slave_0: entered allmulticast mode [ 91.846651][ T5851] bridge_slave_0: entered promiscuous mode [ 91.891837][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.904003][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.918289][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.925674][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.933173][ T5851] bridge_slave_1: entered allmulticast mode [ 91.940667][ T5851] bridge_slave_1: entered promiscuous mode [ 91.964567][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.991602][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.004118][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.049125][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.073991][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.084422][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.092168][ T5834] bridge_slave_0: entered allmulticast mode [ 92.099622][ T5834] bridge_slave_0: entered promiscuous mode [ 92.109280][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.116671][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.125537][ T5834] bridge_slave_1: entered allmulticast mode [ 92.133162][ T5834] bridge_slave_1: entered promiscuous mode [ 92.170242][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.184578][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.281392][ T5848] team0: Port device team_slave_0 added [ 92.290642][ T5835] team0: Port device team_slave_0 added [ 92.302108][ T5835] team0: Port device team_slave_1 added [ 92.328542][ T5843] team0: Port device team_slave_0 added [ 92.338690][ T5843] team0: Port device team_slave_1 added [ 92.345586][ T5157] Bluetooth: hci0: command tx timeout [ 92.351680][ T5853] Bluetooth: hci3: command tx timeout [ 92.351780][ T5841] Bluetooth: hci4: command tx timeout [ 92.357327][ T5853] Bluetooth: hci1: command tx timeout [ 92.367149][ T5850] Bluetooth: hci2: command tx timeout [ 92.378835][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.397664][ T5848] team0: Port device team_slave_1 added [ 92.467159][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.516818][ T5851] team0: Port device team_slave_0 added [ 92.543886][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.551422][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.578559][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.628605][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.636816][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.664415][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.678567][ T5851] team0: Port device team_slave_1 added [ 92.687478][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.695554][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.722499][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.749131][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.756343][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.782897][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.796525][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.803963][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.831363][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.843753][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.851950][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.879017][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.914590][ T5834] team0: Port device team_slave_0 added [ 92.953936][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.961508][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.988024][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.003499][ T5834] team0: Port device team_slave_1 added [ 93.010194][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.017357][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.043882][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.143135][ T5835] hsr_slave_0: entered promiscuous mode [ 93.150172][ T5835] hsr_slave_1: entered promiscuous mode [ 93.186738][ T5843] hsr_slave_0: entered promiscuous mode [ 93.193841][ T5843] hsr_slave_1: entered promiscuous mode [ 93.200092][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.208115][ T5843] Cannot create hsr debugfs directory [ 93.230066][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.237465][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.264336][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.277462][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.284881][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.314542][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.402140][ T5848] hsr_slave_0: entered promiscuous mode [ 93.409215][ T5848] hsr_slave_1: entered promiscuous mode [ 93.416683][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.425628][ T5848] Cannot create hsr debugfs directory [ 93.485036][ T5851] hsr_slave_0: entered promiscuous mode [ 93.496291][ T5851] hsr_slave_1: entered promiscuous mode [ 93.504160][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.514893][ T5851] Cannot create hsr debugfs directory [ 93.656751][ T5834] hsr_slave_0: entered promiscuous mode [ 93.664324][ T5834] hsr_slave_1: entered promiscuous mode [ 93.670686][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.678344][ T5834] Cannot create hsr debugfs directory [ 94.200546][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.225792][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.238374][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.258980][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.319103][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.340239][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.374608][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.387189][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.421566][ T5850] Bluetooth: hci0: command tx timeout [ 94.427470][ T5850] Bluetooth: hci2: command tx timeout [ 94.433907][ T5841] Bluetooth: hci1: command tx timeout [ 94.439117][ T5850] Bluetooth: hci4: command tx timeout [ 94.439572][ T51] Bluetooth: hci3: command tx timeout [ 94.495550][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.515769][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.546193][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.558763][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.664764][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.698802][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.715489][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.727867][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.826833][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.869780][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.884839][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.911283][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.925125][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.949647][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.017390][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.058319][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.077045][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.084554][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.106539][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.125814][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.133343][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.159409][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.166587][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.177179][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.184377][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.290194][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.303118][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.338891][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.413084][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.420502][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.466138][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.473774][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.504675][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.576443][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.609399][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.660905][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.668256][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.725851][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.733206][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.823954][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.865094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.872343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.954795][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.962503][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.023900][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.232735][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.263127][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.306910][ T5835] veth0_vlan: entered promiscuous mode [ 96.360336][ T5835] veth1_vlan: entered promiscuous mode [ 96.501263][ T51] Bluetooth: hci3: command tx timeout [ 96.515201][ T51] Bluetooth: hci1: command tx timeout [ 96.520965][ T5841] Bluetooth: hci4: command tx timeout [ 96.521016][ T5841] Bluetooth: hci2: command tx timeout [ 96.521049][ T5841] Bluetooth: hci0: command tx timeout [ 96.548286][ T5843] veth0_vlan: entered promiscuous mode [ 96.667363][ T5843] veth1_vlan: entered promiscuous mode [ 96.709763][ T5835] veth0_macvtap: entered promiscuous mode [ 96.736351][ T5835] veth1_macvtap: entered promiscuous mode [ 96.776345][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.808159][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.856592][ T5843] veth0_macvtap: entered promiscuous mode [ 96.873419][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.904849][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.917605][ T5843] veth1_macvtap: entered promiscuous mode [ 96.955733][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.972029][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.983862][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.993438][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.045954][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.065725][ T5834] veth0_vlan: entered promiscuous mode [ 97.080306][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.110026][ T5848] veth0_vlan: entered promiscuous mode [ 97.124798][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.135274][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144900][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.153956][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.187768][ T5848] veth1_vlan: entered promiscuous mode [ 97.234390][ T5834] veth1_vlan: entered promiscuous mode [ 97.296952][ T5851] veth0_vlan: entered promiscuous mode [ 97.307395][ T43] cfg80211: failed to load regulatory.db [ 97.315767][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.336444][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.394084][ T5848] veth0_macvtap: entered promiscuous mode [ 97.413251][ T5851] veth1_vlan: entered promiscuous mode [ 97.475871][ T5848] veth1_macvtap: entered promiscuous mode [ 97.484270][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.499136][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.516713][ T5834] veth0_macvtap: entered promiscuous mode [ 97.542364][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.554277][ T5834] veth1_macvtap: entered promiscuous mode [ 97.572354][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.628304][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.657611][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.675532][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.684679][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.702962][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.724888][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.744613][ T5851] veth0_macvtap: entered promiscuous mode [ 97.765682][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.808307][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.830201][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.840758][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.854604][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.884124][ T5851] veth1_macvtap: entered promiscuous mode [ 97.922984][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.938223][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.948029][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.957652][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.056421][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.172341][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.204461][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.223904][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.237500][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.247094][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.496518][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.538496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.550653][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.567054][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.581280][ T51] Bluetooth: hci0: command tx timeout [ 98.587949][ T5850] Bluetooth: hci2: command tx timeout [ 98.593988][ T5841] Bluetooth: hci4: command tx timeout [ 98.599444][ T5841] Bluetooth: hci1: command tx timeout [ 98.601116][ T5853] Bluetooth: hci3: command tx timeout [ 98.636465][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.646550][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.672883][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.718612][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.732766][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.789345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.819529][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.857547][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.885138][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.905122][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.914264][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.943077][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 98.983682][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.030705][ T24] usb 2-1: config 0 descriptor?? [ 99.285526][ T5978] CIFS: VFS: Malformed UNC in devname [ 99.333851][ T5977] tap0: tun_chr_ioctl cmd 2147767521 [ 99.538198][ T5985] netlink: 'syz.2.13': attribute type 18 has an invalid length. [ 99.563303][ T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 99.614314][ T24] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 99.903897][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 99.959732][ T9] usb 2-1: USB disconnect, device number 2 [ 100.030629][ T5991] fido_id[5991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 100.257147][ T30] audit: type=1326 audit(1754484156.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.338393][ T30] audit: type=1326 audit(1754484156.646:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.396986][ T30] audit: type=1326 audit(1754484156.646:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.419604][ T30] audit: type=1326 audit(1754484156.646:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.574786][ T30] audit: type=1326 audit(1754484156.646:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.656995][ T30] audit: type=1326 audit(1754484156.676:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.703277][ T6014] loop9: detected capacity change from 0 to 8 [ 100.736560][ T6014] Dev loop9: unable to read RDB block 8 [ 100.753760][ T6014] loop9: unable to read partition table [ 100.756685][ T30] audit: type=1326 audit(1754484156.726:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe603785ba7 code=0x7ffc0000 [ 100.769470][ T6014] loop9: partition table beyond EOD, truncated [ 100.827648][ T6014] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.830992][ T30] audit: type=1326 audit(1754484156.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60372add9 code=0x7ffc0000 [ 100.862246][ T5932] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.925408][ T30] audit: type=1326 audit(1754484156.726:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 100.950172][ T30] audit: type=1326 audit(1754484156.726:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe603785ba7 code=0x7ffc0000 [ 101.055279][ T5932] usb 1-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 101.088690][ T5932] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.123335][ T5932] usb 1-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 101.166123][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.177526][ T5932] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 101.190249][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.224037][ T5932] usb 1-1: config 0 descriptor?? [ 101.423515][ T6036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.653654][ T5932] hid (null): global environment stack underflow [ 101.685804][ T5932] nzxt-kraken2 0003:1E71:170E.0002: global environment stack underflow [ 101.722088][ T5932] nzxt-kraken2 0003:1E71:170E.0002: item 0 4 1 11 parsing failed [ 101.730679][ T5932] nzxt-kraken2 0003:1E71:170E.0002: hid parse failed with -22 [ 101.769286][ T5932] nzxt-kraken2 0003:1E71:170E.0002: probe with driver nzxt-kraken2 failed with error -22 [ 101.885898][ T43] usb 1-1: USB disconnect, device number 2 [ 101.994467][ T6055] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.089123][ T6057] bond_slave_0: entered promiscuous mode [ 102.095067][ T6057] bond_slave_1: entered promiscuous mode [ 102.121487][ T6057] macsec1: entered allmulticast mode [ 102.137706][ T6057] bond0: entered allmulticast mode [ 102.147863][ T6057] bond_slave_0: entered allmulticast mode [ 102.155859][ T6057] bond_slave_1: entered allmulticast mode [ 102.178271][ T6057] bond0: left allmulticast mode [ 102.191050][ T6057] bond_slave_0: left allmulticast mode [ 102.201318][ T6057] bond_slave_1: left allmulticast mode [ 102.217452][ T6057] bond_slave_0: left promiscuous mode [ 102.223320][ T6057] bond_slave_1: left promiscuous mode [ 102.719347][ T6085] process 'syz.4.58' launched '/dev/fd/3' with NULL argv: empty string added [ 103.050656][ T6099] sp0: Synchronizing with TNC [ 103.105939][ T6101] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.384123][ T6111] syzkaller1: tun_chr_ioctl cmd 21731 [ 103.580259][ T6119] batman_adv: batadv0: Adding interface: dummy0 [ 103.609445][ T6119] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.647228][ T6119] batman_adv: batadv0: Interface activated: dummy0 [ 103.855082][ T6137] loop7: detected capacity change from 0 to 524255232 [ 103.884470][ T6139] netlink: 888 bytes leftover after parsing attributes in process `syz.0.84'. [ 103.891317][ T43] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.931837][ T6137] loop7: detected capacity change from 524255232 to 524287912 [ 104.062892][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.081362][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 104.103633][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 104.126147][ T6147] batadv_slave_0: entered promiscuous mode [ 104.132602][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 104.153902][ T6146] batadv_slave_0: left promiscuous mode [ 104.160324][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.174763][ T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.206931][ T43] usb 2-1: Manufacturer: syz [ 104.223303][ T43] usb 2-1: config 0 descriptor?? [ 104.583484][ T43] rc_core: IR keymap rc-hauppauge not found [ 104.603652][ T43] Registered IR keymap rc-empty [ 104.629065][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 104.667960][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 104.703332][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 104.748405][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 104.775507][ T6170] netem: change failed [ 104.807580][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 104.871515][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 104.905680][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 104.941151][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 104.971294][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 105.022845][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 105.080519][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 105.121961][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 105.142887][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 105.180572][ T43] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 105.203331][ T43] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 105.235693][ T43] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.274184][ T43] usb 2-1: USB disconnect, device number 3 [ 105.298506][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 105.900403][ T6215] capability: warning: `syz.3.120' uses deprecated v2 capabilities in a way that may be insecure [ 107.844721][ T6279] Illegal XDP return value 4294967294 on prog (id 14) dev N/A, expect packet loss! [ 108.284635][ T6294] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.157'. [ 108.311831][ T6294] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.773196][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 109.824862][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.983014][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.165039][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.358923][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.373456][ T6360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.418935][ T6360] syz_tun: entered promiscuous mode [ 110.454393][ T6360] syz_tun: left promiscuous mode [ 110.945686][ T12] bridge_slave_1: left allmulticast mode [ 110.961027][ T12] bridge_slave_1: left promiscuous mode [ 111.005742][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.049483][ T12] bridge_slave_0: left allmulticast mode [ 111.065055][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.072434][ T12] bridge_slave_0: left promiscuous mode [ 111.073863][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.095665][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.105552][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.118503][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.128965][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.151731][ T5932] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.331019][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 111.358336][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.419482][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.469228][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.545139][ T5932] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 111.587166][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.666645][ T5932] usb 2-1: config 0 descriptor?? [ 111.900763][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 112.095485][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.120764][ T5932] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 112.133104][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.142019][ T5932] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 112.151461][ T12] bond0 (unregistering): Released all slaves [ 112.157618][ T5932] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 112.171307][ T5932] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 112.191666][ T5932] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 112.208620][ T5932] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 112.233885][ T6392] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 112.300734][ T5932] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 112.332128][ T6375] random: crng reseeded on system resumption [ 112.360697][ T5932] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 112.481778][ T1228] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 112.500351][ T5932] usb 2-1: USB disconnect, device number 4 [ 112.508493][ T1228] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 112.546529][ T1228] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 112.567884][ T1228] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 112.856365][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 112.891235][ T5909] kernel write not supported for file /snd/midiC2D0 (pid: 5909 comm: kworker/1:6) [ 113.016849][ T12] hsr_slave_0: left promiscuous mode [ 113.052722][ T12] hsr_slave_1: left promiscuous mode [ 113.069200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.090529][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.118105][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.156204][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.221654][ T5850] Bluetooth: hci4: command tx timeout [ 113.237412][ T12] veth1_macvtap: left promiscuous mode [ 113.248877][ T12] veth0_macvtap: left promiscuous mode [ 113.294003][ T12] veth1_vlan: left promiscuous mode [ 113.308338][ T12] veth0_vlan: left promiscuous mode [ 114.295868][ T12] team0 (unregistering): Port device team_slave_1 removed [ 114.434089][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.302410][ T5850] Bluetooth: hci4: command tx timeout [ 115.396605][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 115.478006][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 115.778586][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.796323][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.805677][ T6380] bridge_slave_0: entered allmulticast mode [ 115.814601][ T6380] bridge_slave_0: entered promiscuous mode [ 115.824055][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.832155][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.839435][ T6380] bridge_slave_1: entered allmulticast mode [ 115.848129][ T6380] bridge_slave_1: entered promiscuous mode [ 115.931106][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.977284][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.995798][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.095147][ T6380] team0: Port device team_slave_0 added [ 116.114736][ T6380] team0: Port device team_slave_1 added [ 116.158562][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 116.190354][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 116.233635][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.235117][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 116.273589][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.287649][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.308595][ T6468] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 116.361061][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.362086][ T9] usb 3-1: config 0 descriptor?? [ 116.404696][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.424586][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.454917][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.493211][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.687823][ T6380] hsr_slave_0: entered promiscuous mode [ 116.699850][ T6380] hsr_slave_1: entered promiscuous mode [ 116.715791][ T6380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.729056][ T6380] Cannot create hsr debugfs directory [ 116.846831][ T9] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 116.854548][ T9] cm6533_jd 0003:0D8C:0022.0004: item fetching failed at offset 4/5 [ 116.864874][ T9] cm6533_jd 0003:0D8C:0022.0004: parse failed [ 116.871844][ T9] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22 [ 117.090807][ T5909] usb 3-1: USB disconnect, device number 2 [ 117.337834][ T6380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.371940][ T6380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.381293][ T5850] Bluetooth: hci4: command tx timeout [ 117.421772][ T6380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.455349][ T6380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.798702][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.869104][ T6500] netlink: 'syz.1.247': attribute type 15 has an invalid length. [ 117.889545][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.973471][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.980717][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.015467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.022757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.309359][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 118.309379][ T30] audit: type=1326 audit(1754484174.686:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4cd8ebe9 code=0x7ffc0000 [ 118.409881][ T30] audit: type=1326 audit(1754484174.696:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4cd8ebe9 code=0x7ffc0000 [ 118.491273][ T30] audit: type=1326 audit(1754484174.726:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e4cd8d550 code=0x7ffc0000 [ 118.571125][ T30] audit: type=1326 audit(1754484174.736:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4cd8ebe9 code=0x7ffc0000 [ 118.631273][ T30] audit: type=1326 audit(1754484174.736:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4cd8ebe9 code=0x7ffc0000 [ 118.841397][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.461495][ T5850] Bluetooth: hci4: command tx timeout [ 119.536021][ T6420] Set syz1 is full, maxelem 65536 reached [ 119.647222][ T6380] veth0_vlan: entered promiscuous mode [ 119.716670][ T6380] veth1_vlan: entered promiscuous mode [ 119.762323][ T6549] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 119.902782][ T6549] bond0: (slave bond_slave_0): Releasing backup interface [ 120.017934][ T6380] veth0_macvtap: entered promiscuous mode [ 120.066731][ T6380] veth1_macvtap: entered promiscuous mode [ 120.109234][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.157078][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.203872][ T6380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.225925][ T6380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.250300][ T6380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.265147][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.269597][ T6380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.357521][ T6567] syz.0.274 uses obsolete (PF_INET,SOCK_PACKET) [ 120.451319][ T5932] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.471384][ T5932] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.500281][ T5932] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.531913][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.550080][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.570453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.579111][ T6555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.616476][ T5932] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.706640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.731015][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.881164][ T24] usb 2-1: USB disconnect, device number 5 [ 121.091198][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 121.111735][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 121.910693][ T6617] bridge0: entered allmulticast mode [ 122.001797][ T6618] sp0: Synchronizing with TNC [ 122.123321][ T6628] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 122.479557][ T30] audit: type=1326 audit(1754484178.866:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe603785ba7 code=0x7ffc0000 [ 122.501198][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.558003][ T30] audit: type=1326 audit(1754484178.866:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60372add9 code=0x7ffc0000 [ 122.614445][ T30] audit: type=1326 audit(1754484178.866:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60378ebe9 code=0x7ffc0000 [ 122.636056][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.697105][ T30] audit: type=1326 audit(1754484178.866:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe603785ba7 code=0x7ffc0000 [ 122.718841][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.752752][ T30] audit: type=1326 audit(1754484178.866:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe60372add9 code=0x7ffc0000 [ 122.917237][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 123.090782][ T24] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 123.115567][ T24] usb 4-1: config 0 has no interface number 0 [ 123.131609][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.153768][ T24] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 123.165337][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.185087][ T24] usb 4-1: Product: syz [ 123.189512][ T24] usb 4-1: Manufacturer: syz [ 123.199843][ T24] usb 4-1: SerialNumber: syz [ 123.214611][ T24] usb 4-1: config 0 descriptor?? [ 123.290996][ T1228] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 123.304823][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.314100][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 123.317965][ T43] usb 6-1: config 0 has no interface number 0 [ 123.344276][ T43] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 123.354272][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.362431][ T43] usb 6-1: Product: syz [ 123.368762][ T43] usb 6-1: Manufacturer: syz [ 123.373667][ T43] usb 6-1: SerialNumber: syz [ 123.383106][ T43] usb 6-1: config 0 descriptor?? [ 123.436824][ T24] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 123.455457][ T1228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.467183][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 123.471491][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 123.490807][ T24] usb 4-1: media controller created [ 123.513858][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.513858][ T1228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.513909][ T1228] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 123.548331][ T1228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.560399][ T1228] usb 1-1: config 0 descriptor?? [ 123.612936][ T43] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 123.640299][ T43] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.654115][ T24] DVB: Unable to find symbol dib7000p_attach() [ 123.660359][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 123.670159][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 123.691089][ T43] usb 6-1: media controller created [ 123.696693][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 123.702240][ T6677] netlink: 277 bytes leftover after parsing attributes in process `syz.1.325'. [ 123.712033][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 123.732639][ T24] usb 4-1: media controller created [ 123.751706][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.763975][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.800733][ T24] dib0700: the master dib7090 has to be initialized first [ 123.809093][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 123.819257][ T6661] ------------[ cut here ]------------ [ 123.825551][ T6661] usb 4-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 123.852229][ T6661] WARNING: CPU: 0 PID: 6661 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 123.862415][ T6661] Modules linked in: [ 123.866830][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.5.317 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 123.876924][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.888360][ T6661] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 123.895378][ T6661] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 123.915566][ T6661] RSP: 0000:ffffc90002f07850 EFLAGS: 00010246 [ 123.921787][ T6661] RAX: bf81b01baf5d5300 RBX: ffff888140b24800 RCX: 0000000000080000 [ 123.930046][ T6661] RDX: ffffc90004681000 RSI: 0000000000003a62 RDI: 0000000000003a63 [ 123.938576][ T6661] RBP: 1ffff1100ecf7c78 R08: 0000000000000003 R09: 0000000000000004 [ 123.947458][ T6661] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff8880767be3c0 [ 123.956096][ T24] rc_core: IR keymap rc-dib0700-rc5 not found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.956104][ T6661] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888035810740 [ 123.970531][ T6661] FS: 00007ff05ae516c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 123.971878][ T24] Registered IR keymap rc-empty [ 123.979772][ T6661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.993815][ T6661] CR2: 000000110c274ee1 CR3: 0000000033052000 CR4: 00000000003526f0 [ 124.002048][ T6661] Call Trace: [ 124.005398][ T6661] [ 124.008398][ T6661] usb_start_wait_urb+0x114/0x4c0 [ 124.013633][ T6661] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 124.019284][ T6661] usb_control_msg+0x232/0x3e0 [ 124.024483][ T6661] dib0700_i2c_xfer+0xba7/0xf70 [ 124.029615][ T6661] __i2c_transfer+0x874/0x2170 [ 124.034525][ T6661] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.039981][ T6661] ? __pfx___i2c_transfer+0x10/0x10 [ 124.045322][ T6661] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 124.050977][ T6661] ? i2c_transfer+0x11d/0x3a0 [ 124.055805][ T6661] i2c_transfer+0x25b/0x3a0 [ 124.060467][ T6661] ? __pfx_i2c_transfer+0x10/0x10 [ 124.065738][ T6661] ? _copy_from_user+0x94/0xb0 [ 124.070765][ T6661] i2cdev_ioctl_rdwr+0x460/0x740 [ 124.075998][ T6661] i2cdev_ioctl+0x64b/0x7f0 [ 124.080576][ T6661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 124.086905][ T6661] ? __fget_files+0x3a0/0x420 [ 124.092763][ T6661] ? __fget_files+0x2a/0x420 [ 124.097441][ T6661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.102532][ T6661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 124.107632][ T6661] __se_sys_ioctl+0xfc/0x170 [ 124.112465][ T6661] do_syscall_64+0xfa/0x3b0 [ 124.117144][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.123343][ T6661] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.129663][ T6661] ? clear_bhb_loop+0x60/0xb0 [ 124.134595][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.140585][ T6661] RIP: 0033:0x7ff059f8ebe9 [ 124.145380][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.165703][ T6661] RSP: 002b:00007ff05ae51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.174516][ T6661] RAX: ffffffffffffffda RBX: 00007ff05a1b5fa0 RCX: 00007ff059f8ebe9 [ 124.184641][ T6661] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 124.193943][ T6661] RBP: 00007ff05a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.203141][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.211349][ T6661] R13: 00007ff05a1b6038 R14: 00007ff05a1b5fa0 R15: 00007ffd1d64e758 [ 124.219501][ T6661] [ 124.222737][ T6661] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.230287][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.5.317 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 124.240492][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.250812][ T6661] Call Trace: [ 124.254141][ T6661] [ 124.257118][ T6661] dump_stack_lvl+0x99/0x250 [ 124.261839][ T6661] ? __asan_memcpy+0x40/0x70 [ 124.266733][ T6661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.272097][ T6661] ? __pfx__printk+0x10/0x10 [ 124.276737][ T6661] panic+0x2db/0x790 [ 124.280872][ T6661] ? __pfx_panic+0x10/0x10 [ 124.285500][ T6661] __warn+0x31b/0x4b0 [ 124.289677][ T6661] ? usb_submit_urb+0x115d/0x1890 [ 124.294871][ T6661] ? usb_submit_urb+0x115d/0x1890 [ 124.300040][ T6661] report_bug+0x2be/0x4f0 [ 124.304442][ T6661] ? usb_submit_urb+0x115d/0x1890 [ 124.309585][ T6661] ? usb_submit_urb+0x115d/0x1890 [ 124.314643][ T6661] ? usb_submit_urb+0x115f/0x1890 [ 124.319720][ T6661] handle_bug+0x84/0x160 [ 124.324034][ T6661] exc_invalid_op+0x1a/0x50 [ 124.328659][ T6661] asm_exc_invalid_op+0x1a/0x20 [ 124.333628][ T6661] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 124.339380][ T6661] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 124.359557][ T6661] RSP: 0000:ffffc90002f07850 EFLAGS: 00010246 [ 124.365670][ T6661] RAX: bf81b01baf5d5300 RBX: ffff888140b24800 RCX: 0000000000080000 [ 124.373761][ T6661] RDX: ffffc90004681000 RSI: 0000000000003a62 RDI: 0000000000003a63 [ 124.381934][ T6661] RBP: 1ffff1100ecf7c78 R08: 0000000000000003 R09: 0000000000000004 [ 124.389943][ T6661] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff8880767be3c0 [ 124.397956][ T6661] R13: dffffc0000000000 R14: 0000000080000280 R15: ffff888035810740 [ 124.406250][ T6661] usb_start_wait_urb+0x114/0x4c0 [ 124.411508][ T6661] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 124.417116][ T6661] usb_control_msg+0x232/0x3e0 [ 124.421914][ T6661] dib0700_i2c_xfer+0xba7/0xf70 [ 124.426898][ T6661] __i2c_transfer+0x874/0x2170 [ 124.431772][ T6661] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.437016][ T6661] ? __pfx___i2c_transfer+0x10/0x10 [ 124.442355][ T6661] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 124.447795][ T6661] ? i2c_transfer+0x11d/0x3a0 [ 124.452673][ T6661] i2c_transfer+0x25b/0x3a0 [ 124.457423][ T6661] ? __pfx_i2c_transfer+0x10/0x10 [ 124.462563][ T6661] ? _copy_from_user+0x94/0xb0 [ 124.467496][ T6661] i2cdev_ioctl_rdwr+0x460/0x740 [ 124.472574][ T6661] i2cdev_ioctl+0x64b/0x7f0 [ 124.477094][ T6661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 124.482143][ T6661] ? __fget_files+0x3a0/0x420 [ 124.486864][ T6661] ? __fget_files+0x2a/0x420 [ 124.491492][ T6661] ? bpf_lsm_file_ioctl+0x9/0x20 [ 124.496452][ T6661] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 124.501508][ T6661] __se_sys_ioctl+0xfc/0x170 [ 124.506141][ T6661] do_syscall_64+0xfa/0x3b0 [ 124.510761][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.516944][ T6661] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.523304][ T6661] ? clear_bhb_loop+0x60/0xb0 [ 124.528613][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.534537][ T6661] RIP: 0033:0x7ff059f8ebe9 [ 124.539067][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.559421][ T6661] RSP: 002b:00007ff05ae51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.568335][ T6661] RAX: ffffffffffffffda RBX: 00007ff05a1b5fa0 RCX: 00007ff059f8ebe9 [ 124.576697][ T6661] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 124.584829][ T6661] RBP: 00007ff05a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.592845][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.601209][ T6661] R13: 00007ff05a1b6038 R14: 00007ff05a1b5fa0 R15: 00007ffd1d64e758 [ 124.609520][ T6661] [ 124.613044][ T6661] Kernel Offset: disabled [ 124.617598][ T6661] Rebooting in 86400 seconds..