last executing test programs: 4.547794721s ago: executing program 2 (id=3): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 3.500615687s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r0], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 3.426063274s ago: executing program 2 (id=9): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000480)=[{0xa279, 0x5a11, 0x5, &(0x7f0000000240)="8684fa1614"}], 0x1}) 2.673811747s ago: executing program 0 (id=12): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x581}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f00000005c0)) 2.609140184s ago: executing program 1 (id=13): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2.58797247s ago: executing program 0 (id=14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x0, 0x8, "2a161d2d71db37f2"}}) 2.448745454s ago: executing program 0 (id=15): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 2.356290383s ago: executing program 3 (id=16): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="9fb2cf05260ff903bb", 0x9}], 0x1}}], 0x1, 0x40000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x7, 0x0, 0x6, 0x1000000002, 0x8000000, 0x80000000}) 2.34890269s ago: executing program 1 (id=17): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 1.896997s ago: executing program 3 (id=18): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8006, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 1.208677213s ago: executing program 0 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, 0x0) 1.115840209s ago: executing program 1 (id=20): pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="7927393059dab7272a842d1a8644", 0xe}, {&(0x7f0000000040)="7ee7e9a7", 0x4}], 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x12, 0x4) 937.453067ms ago: executing program 1 (id=21): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/86, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) 904.292297ms ago: executing program 0 (id=22): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f00000005c0)) 615.059215ms ago: executing program 1 (id=23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x0, 0x8, "2a161d2d71db37f2"}}) 516.578944ms ago: executing program 0 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r0], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 406.29193ms ago: executing program 2 (id=25): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 150.603246ms ago: executing program 1 (id=26): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="9fb2cf05260ff903bb", 0x9}], 0x1}}], 0x1, 0x40000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x7, 0x0, 0x6, 0x1000000002, 0x8000000, 0x80000000}) 89.364737ms ago: executing program 3 (id=27): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) recvmmsg(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=28): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 75.776181][ T5581] cgroup: Unknown subsys name 'net' [ 76.016369][ T5581] cgroup: Unknown subsys name 'cpuset' [ 76.071471][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.744027][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.041977][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.106123][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.118322][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.141602][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.150062][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.155376][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.157421][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.162593][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.165985][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.167836][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.168803][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.169802][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.186571][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.188286][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.191117][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.194683][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.213435][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.221984][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.272251][ T5600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.273252][ T5600] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.233051][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.234152][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.234312][ T5594] bridge_slave_0: entered allmulticast mode [ 82.236211][ T5594] bridge_slave_0: entered promiscuous mode [ 82.251944][ T4909] Bluetooth: hci1: command tx timeout [ 82.278727][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.278894][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.279049][ T5593] bridge_slave_0: entered allmulticast mode [ 82.281788][ T5593] bridge_slave_0: entered promiscuous mode [ 82.310308][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.310588][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.326230][ T5594] bridge_slave_1: entered allmulticast mode [ 82.328158][ T5594] bridge_slave_1: entered promiscuous mode [ 82.332554][ T4909] Bluetooth: hci3: command tx timeout [ 82.332564][ T5600] Bluetooth: hci0: command tx timeout [ 82.340665][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.342226][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.342476][ T5593] bridge_slave_1: entered allmulticast mode [ 82.346351][ T5593] bridge_slave_1: entered promiscuous mode [ 82.411517][ T5600] Bluetooth: hci2: command tx timeout [ 82.477260][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.504014][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.515861][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.516481][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.516854][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.517086][ T5596] bridge_slave_0: entered allmulticast mode [ 82.521291][ T5596] bridge_slave_0: entered promiscuous mode [ 82.531868][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.572985][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.573272][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.573419][ T5596] bridge_slave_1: entered allmulticast mode [ 82.575198][ T5596] bridge_slave_1: entered promiscuous mode [ 82.655177][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.655397][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.655583][ T5606] bridge_slave_0: entered allmulticast mode [ 82.657427][ T5606] bridge_slave_0: entered promiscuous mode [ 82.663801][ T5594] team0: Port device team_slave_0 added [ 82.884025][ T5593] team0: Port device team_slave_0 added [ 82.884540][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.884836][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.885089][ T5606] bridge_slave_1: entered allmulticast mode [ 82.886956][ T5606] bridge_slave_1: entered promiscuous mode [ 82.889940][ T5594] team0: Port device team_slave_1 added [ 82.896368][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.906974][ T5593] team0: Port device team_slave_1 added [ 82.955463][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.033178][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.035184][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.035197][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.035211][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.067725][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.067741][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.067764][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.077227][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.079565][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.079578][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.079602][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.089132][ T5596] team0: Port device team_slave_0 added [ 83.092945][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.092958][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.092982][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.170453][ T5596] team0: Port device team_slave_1 added [ 83.256865][ T5606] team0: Port device team_slave_0 added [ 83.280600][ T5606] team0: Port device team_slave_1 added [ 83.302227][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.302237][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.302250][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.362449][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.362459][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.362472][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.415047][ T5594] hsr_slave_0: entered promiscuous mode [ 83.416652][ T5594] hsr_slave_1: entered promiscuous mode [ 83.439845][ T5593] hsr_slave_0: entered promiscuous mode [ 83.442019][ T5593] hsr_slave_1: entered promiscuous mode [ 83.443941][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 83.444058][ T5593] Cannot create hsr debugfs directory [ 83.447037][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.447049][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.447073][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.470982][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.470997][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.471021][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.610356][ T5596] hsr_slave_0: entered promiscuous mode [ 83.612189][ T5596] hsr_slave_1: entered promiscuous mode [ 83.624121][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 83.624143][ T5596] Cannot create hsr debugfs directory [ 84.087350][ T5606] hsr_slave_0: entered promiscuous mode [ 84.088584][ T5606] hsr_slave_1: entered promiscuous mode [ 84.089564][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 84.089586][ T5606] Cannot create hsr debugfs directory [ 84.332244][ T5600] Bluetooth: hci1: command tx timeout [ 84.411919][ T5600] Bluetooth: hci3: command tx timeout [ 84.411952][ T5600] Bluetooth: hci0: command tx timeout [ 84.491427][ T4909] Bluetooth: hci2: command tx timeout [ 84.666078][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.716197][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.724609][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.765552][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.767318][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.795305][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.823787][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.847852][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.964793][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.017380][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.022128][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.055018][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.064380][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.095858][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.117962][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.154359][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.273923][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.312871][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.322081][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.366277][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.377517][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.416925][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.437156][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.478310][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.628572][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.654458][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.668153][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.694597][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.700610][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.748388][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.754211][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.797954][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.856330][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.944110][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.992933][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.993188][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.037966][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.053842][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.057194][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.157970][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.205695][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.205843][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.228571][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.265628][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.265743][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.365011][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.409216][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.411609][ T4909] Bluetooth: hci1: command tx timeout [ 86.439809][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.439978][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.491776][ T4909] Bluetooth: hci0: command tx timeout [ 86.491805][ T4909] Bluetooth: hci3: command tx timeout [ 86.499572][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.499682][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.575529][ T5600] Bluetooth: hci2: command tx timeout [ 86.599685][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.647313][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.647447][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.698997][ T10] cfg80211: failed to load regulatory.db [ 86.734096][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.735773][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.622401][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.866067][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.019162][ T5594] veth0_vlan: entered promiscuous mode [ 88.070352][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.112141][ T5594] veth1_vlan: entered promiscuous mode [ 88.275154][ T5596] veth0_vlan: entered promiscuous mode [ 88.283326][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.352265][ T5596] veth1_vlan: entered promiscuous mode [ 88.372026][ T5606] veth0_vlan: entered promiscuous mode [ 88.377684][ T5594] veth0_macvtap: entered promiscuous mode [ 88.408419][ T5594] veth1_macvtap: entered promiscuous mode [ 88.436610][ T5606] veth1_vlan: entered promiscuous mode [ 88.491446][ T5600] Bluetooth: hci1: command tx timeout [ 88.528249][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.554282][ T5593] veth0_vlan: entered promiscuous mode [ 88.560365][ T5596] veth0_macvtap: entered promiscuous mode [ 88.569253][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.571988][ T5600] Bluetooth: hci3: command tx timeout [ 88.572016][ T5600] Bluetooth: hci0: command tx timeout [ 88.605279][ T5596] veth1_macvtap: entered promiscuous mode [ 88.636058][ T1059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.650311][ T1059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.661121][ T5600] Bluetooth: hci2: command tx timeout [ 88.674974][ T5593] veth1_vlan: entered promiscuous mode [ 88.688987][ T1059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.698696][ T5606] veth0_macvtap: entered promiscuous mode [ 88.704992][ T1059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.789524][ T5606] veth1_macvtap: entered promiscuous mode [ 88.806772][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.887580][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.097666][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.116562][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.137260][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.137340][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.173192][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.276197][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.277204][ T5593] veth0_macvtap: entered promiscuous mode [ 89.309844][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.309867][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.358628][ T3381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.360111][ T5593] veth1_macvtap: entered promiscuous mode [ 89.393260][ T3381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.417879][ T3381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.464561][ T3381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.664559][ T3381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.664577][ T3381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.737510][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.882321][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.892103][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.892120][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.022780][ T3378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029962][ T3378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.108461][ T3378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113090][ T3378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184586][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.184605][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.347013][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.347030][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.744535][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.744554][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.874002][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.874020][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.274147][ T3381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.274165][ T3381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.643913][ T5760] input: syz1 as /devices/virtual/input/input5 [ 93.145753][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.351729][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 93.432034][ T37] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.432068][ T37] usb 3-1: config 0 has no interface number 0 [ 93.432111][ T37] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.503743][ T37] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 93.503772][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.503790][ T37] usb 3-1: Product: syz [ 93.503803][ T37] usb 3-1: Manufacturer: syz [ 93.503817][ T37] usb 3-1: SerialNumber: syz [ 93.578697][ T37] usb 3-1: config 0 descriptor?? [ 93.706466][ T37] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 93.706507][ T37] em28xx 3-1:0.132: Video interface 132 found: [ 94.063097][ T37] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 94.479254][ T5803] input: syz1 as /devices/virtual/input/input6 [ 94.887466][ T37] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 94.887516][ T37] em28xx 3-1:0.132: board has no eeprom [ 94.942199][ T37] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 94.942227][ T37] em28xx 3-1:0.132: analog set to bulk mode. [ 94.944319][ T5691] em28xx 3-1:0.132: Registering V4L2 extension [ 95.185392][ T37] usb 3-1: USB disconnect, device number 2 [ 95.418897][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 95.419036][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 95.419139][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 95.419243][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 95.533170][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 95.533285][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 95.533396][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-19) [ 95.533499][ T5691] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 95.534138][ T37] em28xx 3-1:0.132: Disconnecting em28xx [ 95.627701][ T5823] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 95.729308][ T5691] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 95.729330][ T5691] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 95.729342][ T5691] em28xx 3-1:0.132: No AC97 audio processor [ 95.763106][ T5691] usb 3-1: Decoder not found [ 95.763124][ T5691] em28xx 3-1:0.132: failed to create media graph [ 95.763187][ T5691] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 95.794339][ T5606] do_umount: task=syz-executor[5606] propagate_mount_busy()!=0 [ 95.794626][ T5606] do_umount: task=syz-executor[5606] propagate_mount_busy()!=0 [ 95.799970][ T5691] INFO: trying to register non-static key. [ 95.799981][ T5691] The code is fine but needs lockdep annotation, or maybe [ 95.799987][ T5691] you didn't initialize this object before use? [ 95.799993][ T5691] turning off the locking correctness validator. [ 95.800019][ T5691] CPU: 1 UID: 0 PID: 5691 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.800040][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.800052][ T5691] Workqueue: events request_module_async [ 95.800084][ T5691] Call Trace: [ 95.800092][ T5691] [ 95.800099][ T5691] dump_stack_lvl+0xe8/0x150 [ 95.800124][ T5691] assign_lock_key+0x133/0x150 [ 95.800145][ T5691] register_lock_class+0xcc/0x2e0 [ 95.800173][ T5691] __lock_acquire+0xaf/0x2e40 [ 95.800191][ T5691] ? ret_from_fork_asm+0x1a/0x30 [ 95.800216][ T5691] ? stack_trace_save+0xa9/0x100 [ 95.800241][ T5691] ? __pfx_stack_trace_save+0x10/0x10 [ 95.800279][ T5691] lock_acquire+0x115/0x350 [ 95.800303][ T5691] ? __wake_up_common_lock+0x2f/0x1f0 [ 95.800333][ T5691] rt_spin_lock+0x83/0x400 [ 95.800356][ T5691] ? __wake_up_common_lock+0x2f/0x1f0 [ 95.800383][ T5691] ? __pfx_rt_spin_lock+0x10/0x10 [ 95.800410][ T5691] __wake_up_common_lock+0x2f/0x1f0 [ 95.800438][ T5691] __vb2_queue_cancel+0x2de/0xdc0 [ 95.800465][ T5691] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 95.800483][ T5691] ? lockdep_hardirqs_on+0x7a/0x110 [ 95.800501][ T5691] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 95.800528][ T5691] vb2_core_queue_release+0x2f/0x150 [ 95.800558][ T5691] vb2_video_unregister_device+0x15b/0x200 [ 95.800592][ T5691] em28xx_v4l2_init+0x1c60/0x3140 [ 95.800619][ T5691] em28xx_init_extension+0x120/0x1d0 [ 95.800648][ T5691] ? process_one_work+0x7fd/0x1480 [ 95.800666][ T5691] process_one_work+0xaaf/0x1480 [ 95.800684][ T5691] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.800715][ T5691] ? __pfx_process_one_work+0x10/0x10 [ 95.800732][ T5691] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.800757][ T5691] ? assign_work+0x3cf/0x5d0 [ 95.800774][ T5691] worker_thread+0xb05/0x10d0 [ 95.800798][ T5691] kthread+0x388/0x470 [ 95.800819][ T5691] ? __pfx_worker_thread+0x10/0x10 [ 95.800836][ T5691] ? __pfx_kthread+0x10/0x10 [ 95.800860][ T5691] ret_from_fork+0x514/0xb70 [ 95.800885][ T5691] ? __pfx_ret_from_fork+0x10/0x10 [ 95.800908][ T5691] ? __switch_to+0xc89/0x1420 [ 95.800929][ T5691] ? __pfx_kthread+0x10/0x10 [ 95.800953][ T5691] ret_from_fork_asm+0x1a/0x30 [ 95.800982][ T5691] [ 95.806719][ T5594] ------------[ cut here ]------------ [ 95.806730][ T5594] mas->ld_seq != lock_sequence(map) [ 95.806746][ T5594] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#0: syz-executor/5594 [ 95.806787][ T5594] Modules linked in: [ 95.806807][ T5594] CPU: 0 UID: 0 PID: 5594 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.806828][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.806838][ T5594] RIP: 0010:mas_find+0xa02/0xca0 [ 95.806857][ T5594] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 95.806871][ T5594] RSP: 0000:ffffc90004ec7738 EFLAGS: 00010293 [ 95.806886][ T5594] RAX: ffffffff8b48c241 RBX: 1ffff920009d8f19 RCX: ffff88803598ddc0 [ 95.806901][ T5594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.806911][ T5594] RBP: 00000000000000a6 R08: 0000000000000000 R09: 0000000000000000 [ 95.806922][ T5594] R10: 0000000000000100 R11: 00000000fffffffb R12: 00000000ffffffff [ 95.806935][ T5594] R13: ffffc90004ec78d4 R14: ffffc90004ec7880 R15: ffffc90004ec78c8 [ 95.806949][ T5594] FS: 00005555879cc500(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 95.806965][ T5594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.806977][ T5594] CR2: 00007faf9826ceb8 CR3: 000000002b34e000 CR4: 00000000003526f0 [ 95.806993][ T5594] Call Trace: [ 95.807000][ T5594] [ 95.807007][ T5594] ? up_write+0x5a/0x190 [ 95.807032][ T5594] dup_mmap+0xf92/0x1d30 [ 95.807065][ T5594] ? __pfx_dup_mmap+0x10/0x10 [ 95.807095][ T5594] ? lock_acquire+0x115/0x350 [ 95.807129][ T5594] copy_mm+0x11a/0x480 [ 95.807148][ T5594] ? copy_process+0xd3c/0x43f0 [ 95.807165][ T5594] copy_process+0x1e7d/0x43f0 [ 95.807186][ T5594] ? copy_process+0xd3c/0x43f0 [ 95.807210][ T5594] ? __pfx_copy_process+0x10/0x10 [ 95.807233][ T5594] kernel_clone+0x2d7/0x940 [ 95.807253][ T5594] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 95.807271][ T5594] ? __pfx_kernel_clone+0x10/0x10 [ 95.807297][ T5594] __x64_sys_clone+0x1b6/0x230 [ 95.807319][ T5594] ? __pfx___x64_sys_clone+0x10/0x10 [ 95.807346][ T5594] ? do_user_addr_fault+0xc4a/0x1340 [ 95.807374][ T5594] do_syscall_64+0x17b/0x530 [ 95.807392][ T5594] ? irqentry_exit+0x10f/0x8f0 [ 95.807407][ T5594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.807426][ T5594] ? clear_bhb_loop+0x40/0x90 [ 95.807446][ T5594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.807463][ T5594] RIP: 0033:0x7f2471c66912 [ 95.807484][ T5594] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 95.807498][ T5594] RSP: 002b:00007ffc391c04d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.807515][ T5594] RAX: ffffffffffffffda RBX: 00007ffc391c04d0 RCX: 00007f2471c66912 [ 95.807528][ T5594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 95.807539][ T5594] RBP: 00007ffc391c065c R08: 0000000000000000 R09: 0000000000000001 [ 95.807550][ T5594] R10: 00005555879cc7d0 R11: 0000000000000246 R12: 0000000000000001 [ 95.807562][ T5594] R13: 00000000000927c0 R14: 0000000000017488 R15: 00007ffc391c06b0 [ 95.807581][ T5594] [ 95.807591][ T5594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.807603][ T5594] CPU: 0 UID: 0 PID: 5594 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.807624][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.807633][ T5594] Call Trace: [ 95.807639][ T5594] [ 95.807646][ T5594] vpanic+0x56c/0xa60 [ 95.807664][ T5594] ? __pfx__printk+0x10/0x10 [ 95.807685][ T5594] ? __pfx_vpanic+0x10/0x10 [ 95.807701][ T5594] ? is_bpf_text_address+0x292/0x2b0 [ 95.807721][ T5594] ? is_bpf_text_address+0x26/0x2b0 [ 95.807744][ T5594] panic+0xc5/0xd0 [ 95.807759][ T5594] ? __pfx_panic+0x10/0x10 [ 95.807789][ T5594] __warn+0x315/0x4c0 [ 95.807805][ T5594] ? mas_find+0xa02/0xca0 [ 95.807823][ T5594] ? mas_find+0xa02/0xca0 [ 95.807839][ T5594] __report_bug+0x276/0x570 [ 95.807857][ T5594] ? mas_find+0xa02/0xca0 [ 95.807875][ T5594] ? __pfx___report_bug+0x10/0x10 [ 95.807897][ T5594] ? copy_page_range+0xe99/0x1170 [ 95.807915][ T5594] ? mas_find+0xa02/0xca0 [ 95.807932][ T5594] report_bug+0x16a/0x220 [ 95.807949][ T5594] ? mas_find+0xa02/0xca0 [ 95.807964][ T5594] ? mas_find+0xa04/0xca0 [ 95.807980][ T5594] handle_bug+0x9c/0x200 [ 95.808000][ T5594] exc_invalid_op+0x1a/0x50 [ 95.808020][ T5594] asm_exc_invalid_op+0x1a/0x20 [ 95.808037][ T5594] RIP: 0010:mas_find+0xa02/0xca0 [ 95.808055][ T5594] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 95.808068][ T5594] RSP: 0000:ffffc90004ec7738 EFLAGS: 00010293 [ 95.808083][ T5594] RAX: ffffffff8b48c241 RBX: 1ffff920009d8f19 RCX: ffff88803598ddc0 [ 95.808097][ T5594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.808108][ T5594] RBP: 00000000000000a6 R08: 0000000000000000 R09: 0000000000000000 [ 95.808119][ T5594] R10: 0000000000000100 R11: 00000000fffffffb R12: 00000000ffffffff [ 95.808131][ T5594] R13: ffffc90004ec78d4 R14: ffffc90004ec7880 R15: ffffc90004ec78c8 [ 95.808148][ T5594] ? mas_find+0xa01/0xca0 [ 95.808171][ T5594] ? mas_find+0xa01/0xca0 [ 95.808191][ T5594] ? up_write+0x5a/0x190 [ 95.808213][ T5594] dup_mmap+0xf92/0x1d30 [ 95.808245][ T5594] ? __pfx_dup_mmap+0x10/0x10 [ 95.808274][ T5594] ? lock_acquire+0x115/0x350 [ 95.808307][ T5594] copy_mm+0x11a/0x480 [ 95.808325][ T5594] ? copy_process+0xd3c/0x43f0 [ 95.808342][ T5594] copy_process+0x1e7d/0x43f0 [ 95.808364][ T5594] ? copy_process+0xd3c/0x43f0 [ 95.808387][ T5594] ? __pfx_copy_process+0x10/0x10 [ 95.808410][ T5594] kernel_clone+0x2d7/0x940 [ 95.808431][ T5594] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 95.808448][ T5594] ? __pfx_kernel_clone+0x10/0x10 [ 95.808475][ T5594] __x64_sys_clone+0x1b6/0x230 [ 95.808496][ T5594] ? __pfx___x64_sys_clone+0x10/0x10 [ 95.808524][ T5594] ? do_user_addr_fault+0xc4a/0x1340 [ 95.808551][ T5594] do_syscall_64+0x17b/0x530 [ 95.808568][ T5594] ? irqentry_exit+0x10f/0x8f0 [ 95.808584][ T5594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.808602][ T5594] ? clear_bhb_loop+0x40/0x90 [ 95.808622][ T5594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.808639][ T5594] RIP: 0033:0x7f2471c66912 [ 95.808652][ T5594] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 95.808665][ T5594] RSP: 002b:00007ffc391c04d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.808681][ T5594] RAX: ffffffffffffffda RBX: 00007ffc391c04d0 RCX: 00007f2471c66912 [ 95.808693][ T5594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 95.808704][ T5594] RBP: 00007ffc391c065c R08: 0000000000000000 R09: 0000000000000001 [ 95.808715][ T5594] R10: 00005555879cc7d0 R11: 0000000000000246 R12: 0000000000000001 [ 95.808727][ T5594] R13: 00000000000927c0 R14: 0000000000017488 R15: 00007ffc391c06b0 [ 95.808746][ T5594] [ 95.809036][ T5594] Kernel Offset: disabled