last executing test programs: 13.47636446s ago: executing program 3 (id=801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x2, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) 12.247446567s ago: executing program 3 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3586dd60ff00f5004d0601fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYBLOB="5008ffff90780002fb"], 0x0) 9.252971124s ago: executing program 1 (id=808): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 9.208026895s ago: executing program 3 (id=810): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000801"], 0x1c}, 0x1, 0x0, 0x0, 0x240088c1}, 0x0) 8.896674042s ago: executing program 3 (id=812): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410eb) 8.800265264s ago: executing program 1 (id=813): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 7.981433892s ago: executing program 2 (id=814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x58}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) 7.957796723s ago: executing program 1 (id=815): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) 7.61601036s ago: executing program 0 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10004e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sched_setaffinity(0x0, 0xfffffffffffffe86, &(0x7f0000000240)=0xfffffffffffffffe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0x9, 0x0, 0x0) brk(0x689d80000000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.074677895s ago: executing program 2 (id=817): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f00000000c0)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x7, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8, 0x200]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) 6.033815795s ago: executing program 0 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3586dd60ff00f5004d0601fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYBLOB="5008ffff90780002fb"], 0x0) 5.486875358s ago: executing program 0 (id=819): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 3.16637849s ago: executing program 3 (id=820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.108226901s ago: executing program 2 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x200000, 0x0) 2.71349601s ago: executing program 2 (id=822): r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/361, @ANYRESHEX=0xee01, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0xd, 0x643, &(0x7f0000001380)="$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") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0), 0x0, 0x9000) io_setup(0x200, &(0x7f0000000140)=0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRESHEX=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xfffff) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 2.68865535s ago: executing program 1 (id=823): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 2.662878631s ago: executing program 0 (id=824): socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000180)=0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=0x1], 0x0, 0x7, 0x21, &(0x7f0000000780)=""/33, 0x41000, 0x44, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x9, 0x6, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000840)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000880)=[{0x2, 0x1, 0xd, 0xb}, {0x2, 0x4, 0xc, 0x9}, {0x0, 0x3, 0x10, 0x4}, {0x0, 0x3, 0xc, 0x8}, {0x0, 0x4, 0xc, 0x8}, {0x1, 0x1, 0x8, 0xa}, {0x0, 0x1, 0x9, 0x1}], 0x10, 0x3ff}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) epoll_create1(0x0) 1.909355087s ago: executing program 0 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, 0x80400}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.856313229s ago: executing program 1 (id=826): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 855.036581ms ago: executing program 2 (id=827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3586dd60ff00f5004d0601fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYBLOB="5008ffff90780002fb"], 0x0) 407.350601ms ago: executing program 3 (id=828): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410eb) 328.244533ms ago: executing program 1 (id=829): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f00000000c0)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x7, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8, 0x200]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) 327.991543ms ago: executing program 0 (id=830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000000)) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) newfstatat(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x200000, 0x0) 0s ago: executing program 2 (id=831): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f15", 0xaf}], 0x1, 0x0, 0xb8, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 59.729735][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.763781][ T5432] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. syzkaller login: [ 83.019758][ T5759] cgroup: Unknown subsys name 'net' [ 83.160979][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.896497][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.540710][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.549541][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.557579][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.565872][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.573778][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.581235][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.592614][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.608032][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.616499][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.626067][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.642409][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.659874][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.771822][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.781125][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.790586][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.799123][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.806933][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.808107][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.820066][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.829278][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.837201][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.840685][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.852904][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.860639][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.165960][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.447268][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.472374][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.479949][ T5775] bridge_slave_0: entered allmulticast mode [ 87.503854][ T5775] bridge_slave_0: entered promiscuous mode [ 87.529912][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.544939][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.558745][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.566076][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.574809][ T5775] bridge_slave_1: entered allmulticast mode [ 87.582867][ T5775] bridge_slave_1: entered promiscuous mode [ 87.694167][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.706957][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.749250][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.861524][ T5775] team0: Port device team_slave_0 added [ 87.868764][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.876376][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.883897][ T5771] bridge_slave_0: entered allmulticast mode [ 87.891038][ T5771] bridge_slave_0: entered promiscuous mode [ 87.919617][ T5775] team0: Port device team_slave_1 added [ 87.926428][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.934180][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.941455][ T5771] bridge_slave_1: entered allmulticast mode [ 87.948590][ T5771] bridge_slave_1: entered promiscuous mode [ 88.045830][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.053339][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.060934][ T5780] bridge_slave_0: entered allmulticast mode [ 88.068314][ T5780] bridge_slave_0: entered promiscuous mode [ 88.078049][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.091546][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.099467][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.126266][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.138816][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.146208][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.153873][ T5781] bridge_slave_0: entered allmulticast mode [ 88.160911][ T5781] bridge_slave_0: entered promiscuous mode [ 88.169834][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.177182][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.185170][ T5780] bridge_slave_1: entered allmulticast mode [ 88.193022][ T5780] bridge_slave_1: entered promiscuous mode [ 88.206769][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.216736][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.224012][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.250197][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.269627][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.276953][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.287627][ T5781] bridge_slave_1: entered allmulticast mode [ 88.294843][ T5781] bridge_slave_1: entered promiscuous mode [ 88.357551][ T5771] team0: Port device team_slave_0 added [ 88.368033][ T5771] team0: Port device team_slave_1 added [ 88.399912][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.434430][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.446361][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.490739][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.517055][ T5775] hsr_slave_0: entered promiscuous mode [ 88.524084][ T5775] hsr_slave_1: entered promiscuous mode [ 88.531779][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.541539][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.570865][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.584015][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.591015][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.617104][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.642906][ T5781] team0: Port device team_slave_0 added [ 88.657194][ T5082] Bluetooth: hci0: command tx timeout [ 88.671156][ T5780] team0: Port device team_slave_0 added [ 88.688167][ T5781] team0: Port device team_slave_1 added [ 88.696854][ T5780] team0: Port device team_slave_1 added [ 88.732087][ T5082] Bluetooth: hci1: command tx timeout [ 88.798379][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.805643][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.831797][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.856772][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.864708][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.891008][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.893691][ T5082] Bluetooth: hci3: command tx timeout [ 88.901738][ T51] Bluetooth: hci2: command tx timeout [ 88.922422][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.929449][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.956539][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.979968][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.987092][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.013217][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.049093][ T5771] hsr_slave_0: entered promiscuous mode [ 89.057002][ T5771] hsr_slave_1: entered promiscuous mode [ 89.063669][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.071560][ T5771] Cannot create hsr debugfs directory [ 89.133974][ T5780] hsr_slave_0: entered promiscuous mode [ 89.141096][ T5780] hsr_slave_1: entered promiscuous mode [ 89.148017][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.156568][ T5780] Cannot create hsr debugfs directory [ 89.205206][ T5781] hsr_slave_0: entered promiscuous mode [ 89.212170][ T5781] hsr_slave_1: entered promiscuous mode [ 89.218629][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.226777][ T5781] Cannot create hsr debugfs directory [ 89.506442][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.562200][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.574030][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.626083][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.746062][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.761490][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.776444][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.790000][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.894190][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.929918][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.966237][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.977034][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.049163][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.061465][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.084992][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.097623][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.110150][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.144952][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.199176][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.209758][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.217415][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.248068][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.255275][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.299895][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.358155][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.365408][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.400555][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.407784][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.592805][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.603541][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.656208][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.675786][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.706919][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.714154][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.732217][ T51] Bluetooth: hci0: command tx timeout [ 90.776870][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.784171][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.801773][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.809057][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.822791][ T51] Bluetooth: hci1: command tx timeout [ 90.854827][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.862070][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.913041][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.972467][ T51] Bluetooth: hci2: command tx timeout [ 90.974788][ T5082] Bluetooth: hci3: command tx timeout [ 91.039094][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.170718][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.239765][ T5775] veth0_vlan: entered promiscuous mode [ 91.326117][ T5775] veth1_vlan: entered promiscuous mode [ 91.351675][ T5781] veth0_vlan: entered promiscuous mode [ 91.435424][ T5781] veth1_vlan: entered promiscuous mode [ 91.470482][ T5775] veth0_macvtap: entered promiscuous mode [ 91.519273][ T5775] veth1_macvtap: entered promiscuous mode [ 91.587070][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.605109][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.636860][ T5781] veth0_macvtap: entered promiscuous mode [ 91.659235][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.668597][ T5781] veth1_macvtap: entered promiscuous mode [ 91.696596][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.706468][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.715615][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.725279][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.762946][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.815712][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.829122][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.842986][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.867474][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.889556][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.901874][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.918831][ T5780] veth0_vlan: entered promiscuous mode [ 91.945143][ T5780] veth1_vlan: entered promiscuous mode [ 91.960622][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.970716][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982000][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.991017][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.073787][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.112187][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.147009][ T5771] veth0_vlan: entered promiscuous mode [ 92.199573][ T5780] veth0_macvtap: entered promiscuous mode [ 92.223032][ T5771] veth1_vlan: entered promiscuous mode [ 92.239467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.245765][ T5780] veth1_macvtap: entered promiscuous mode [ 92.267327][ T788] cfg80211: failed to load regulatory.db [ 92.276910][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.348487][ T5771] veth0_macvtap: entered promiscuous mode [ 92.359000][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.369325][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.385391][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.390247][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.405093][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.415942][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.428564][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.440152][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.451500][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.462562][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.483525][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.506553][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.520671][ T5771] veth1_macvtap: entered promiscuous mode [ 92.557234][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.567237][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.576516][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.586795][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.627231][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.639510][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.647807][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.667729][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.669958][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.691214][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.701552][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.723654][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.737038][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.813083][ T5082] Bluetooth: hci0: command tx timeout [ 92.825599][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.839656][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.850673][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.864737][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.872760][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.876532][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.903966][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.914537][ T5082] Bluetooth: hci1: command tx timeout [ 92.930711][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.974685][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985682][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.996280][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.005839][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.052532][ T5082] Bluetooth: hci2: command tx timeout [ 93.052772][ T51] Bluetooth: hci3: command tx timeout [ 93.165385][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.198566][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.309783][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.347971][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.385349][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.405904][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.556560][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.582029][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.923814][ T51] Bluetooth: hci0: command tx timeout [ 94.972019][ T51] Bluetooth: hci1: command tx timeout [ 95.131977][ T51] Bluetooth: hci2: command tx timeout [ 95.146891][ T51] Bluetooth: hci3: command tx timeout [ 95.892390][ T5866] syz.1.10[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.930501][ T5866] loop1: detected capacity change from 0 to 256 [ 95.940434][ T5867] loop3: detected capacity change from 0 to 1024 [ 95.983119][ T5867] ======================================================= [ 95.983119][ T5867] WARNING: The mand mount option has been deprecated and [ 95.983119][ T5867] and is ignored by this kernel. Remove the mand [ 95.983119][ T5867] option from the mount to silence this warning. [ 95.983119][ T5867] ======================================================= [ 96.026014][ T5866] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.195732][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.317978][ T5876] capability: warning: `syz.2.11' uses deprecated v2 capabilities in a way that may be insecure [ 96.412816][ T5867] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.599492][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7'. [ 96.647684][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7'. [ 96.864745][ T5867] Zero length message leads to an empty skb [ 97.488053][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.527893][ T28] audit: type=1800 audit(1784845147.547:2): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10" name="file1" dev="loop1" ino=1048592 res=0 errno=0 [ 98.083508][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.272047][ T5809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.296799][ T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 98.309694][ T23] usb 1-1: config 0 has no interface number 0 [ 98.316536][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 98.327969][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 98.341681][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 98.352859][ T23] usb 1-1: config 0 interface 2 has no altsetting 0 [ 98.375132][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.391005][ T23] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 98.406479][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.416510][ T23] usb 1-1: Product: syz [ 98.420743][ T23] usb 1-1: Manufacturer: syz [ 98.429487][ T23] usb 1-1: SerialNumber: syz [ 98.442492][ T23] usb 1-1: config 0 descriptor?? [ 98.455744][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.461389][ T5895] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.478204][ T5895] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.483326][ T5809] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 98.499324][ T5809] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.529660][ T5809] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 98.539504][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.549884][ T5809] usb 4-1: Product: syz [ 98.554578][ T5809] usb 4-1: Manufacturer: syz [ 98.559279][ T5809] usb 4-1: SerialNumber: syz [ 98.582104][ T5810] usb 2-1: Using ep0 maxpacket: 8 [ 98.597054][ T5810] usb 2-1: config 1 has an invalid interface descriptor of length 7, skipping [ 98.613933][ T5810] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 98.623767][ T5810] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.639769][ T5810] usb 2-1: config 1 interface 0 has no altsetting 0 [ 98.655776][ T5810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.668143][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.677453][ T5810] usb 2-1: Product: syz [ 98.681785][ T5810] usb 2-1: Manufacturer: syz [ 98.705714][ T5810] usb 2-1: SerialNumber: syz [ 98.729237][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 98.814264][ T5809] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 98.829600][ T5809] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 98.850686][ T5809] usb 4-1: failed to enable PITCH for EP 0x1 [ 98.862651][ T5809] usb 4-1: unit 2 not found! [ 98.867423][ T5809] usb 4-1: unit 0 not found! [ 98.990465][ T5809] usb 4-1: USB disconnect, device number 2 [ 99.011799][ T5810] cdc_ether 2-1:1.0: skipping garbage [ 99.033156][ T5810] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 99.078312][ T5810] usb 2-1: USB disconnect, device number 2 [ 99.141075][ T9] usb 1-1: USB disconnect, device number 2 [ 99.236040][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 99.433471][ T5913] loop2: detected capacity change from 0 to 4096 [ 99.447160][ T5913] EXT4-fs: inline encryption not supported [ 99.461052][ T5913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.476586][ T5913] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.486568][ T5913] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 99.512086][ T5913] System zones: 0-5 [ 99.544650][ T5913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.858956][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.084413][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.010402][ T5933] loop3: detected capacity change from 0 to 16 [ 101.086294][ T5933] erofs: (device loop3): mounted with root inode @ nid 36. [ 101.137627][ T5930] loop2: detected capacity change from 0 to 4096 [ 101.176843][ T5933] syz.3.27: attempt to access beyond end of device [ 101.176843][ T5933] loop3: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 101.237674][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.282844][ T5933] syz.3.27: attempt to access beyond end of device [ 101.282844][ T5933] loop3: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 101.297483][ T28] audit: type=1800 audit(1784845151.317:3): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.27" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 102.669561][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.891909][ C0] sched: RT throttling activated [ 104.453301][ T5963] Bluetooth: MGMT ver 1.22 [ 104.458888][ T5963] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 105.862590][ T5973] loop1: detected capacity change from 0 to 4096 [ 106.026041][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.447246][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.821996][ T5809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.039084][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 110.090438][ T5809] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 110.483365][ T5809] usb 1-1: config 0 has no interface number 0 [ 110.574602][ T5809] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 110.699750][ T6090] netlink: 84 bytes leftover after parsing attributes in process `syz.3.60'. [ 110.712906][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 110.745712][ T5809] usb 1-1: Product: syz [ 110.745736][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 110.750127][ T5809] usb 1-1: SerialNumber: syz [ 110.823096][ T5809] usb 1-1: config 0 descriptor?? [ 110.869779][ T6090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.60'. [ 110.911542][ T6094] autofs4:pid:6094:autofs_fill_super: called with bogus options [ 111.022127][ T5809] cm109 1-1:0.8: invalid payload size 32, expected 4 [ 112.726013][ T5809] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 113.708786][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.718066][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.725277][ T27] usb 1-1: USB disconnect, device number 3 [ 113.725650][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.738418][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.140897][ T27] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 117.009830][ T6175] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 117.263055][ T5810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.482037][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 117.528835][ T5810] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 117.572265][ T5810] usb 4-1: config 0 has no interface number 0 [ 117.597784][ T5810] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 117.632069][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 117.670981][ T5810] usb 4-1: Product: syz [ 117.678541][ T5810] usb 4-1: SerialNumber: syz [ 117.713242][ T5810] usb 4-1: config 0 descriptor?? [ 117.747455][ T5810] cm109 4-1:0.8: invalid payload size 32, expected 4 [ 117.788989][ T5810] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 118.296340][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 118.305029][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.312664][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.319996][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.327348][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.334676][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.341839][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.349054][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 118.362234][ T5810] usb 4-1: USB disconnect, device number 3 [ 118.368148][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 120.264901][ T5810] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 121.254090][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 121.324105][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'. [ 121.532700][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.589463][ T6212] autofs4:pid:6212:autofs_fill_super: called with bogus options [ 121.736755][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.758583][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.768064][ T9] usb 3-1: Product: syz [ 121.772902][ T9] usb 3-1: Manufacturer: syz [ 121.777572][ T9] usb 3-1: SerialNumber: syz [ 122.224338][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 122.516576][ T6235] process 'syz.0.93' launched './file0' with NULL argv: empty string added [ 122.768001][ T6243] netlink: 256 bytes leftover after parsing attributes in process `syz.1.96'. [ 122.986208][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'. [ 123.012375][ T6249] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 124.661915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.681935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.721917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 124.771926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 124.961929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 125.466344][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 125.492603][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 125.563507][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 125.620802][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 125.634862][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 125.666188][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 125.707273][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 125.739186][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 125.772262][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 125.828040][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 125.859625][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.281945][ T9] lan78xx: probe of 3-1:1.0 failed with error -71 [ 126.475422][ T9] usb 3-1: USB disconnect, device number 2 [ 133.873625][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.880448][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.506584][ T6380] loop0: detected capacity change from 0 to 4096 [ 135.800971][ T6382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.962217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.845002][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 142.854435][ T6438] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 142.872050][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 143.064527][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 143.076670][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 143.096259][ T5810] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 143.108339][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.116970][ T5810] usb 1-1: Product: syz [ 143.121187][ T5810] usb 1-1: Manufacturer: syz [ 143.126274][ T5810] usb 1-1: SerialNumber: syz [ 143.135437][ T5810] usb 1-1: config 0 descriptor?? [ 143.141414][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.149356][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.597817][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.661190][ T6435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.328763][ T5810] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 144.612934][ T5810] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 144.978641][ T5810] usb 1-1: USB disconnect, device number 4 [ 146.446860][ T6462] loop3: detected capacity change from 0 to 1024 [ 147.270731][ T28] audit: type=1800 audit(1784845197.207:4): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.162" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 148.308850][ T6489] futex_wake_op: syz.1.170 tries to shift op by 144; fix this program [ 153.375343][ T6512] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.489201][ T6521] loop0: detected capacity change from 0 to 512 [ 154.501284][ T6521] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.682383][ T27] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 154.700916][ T6521] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 154.940590][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.054371][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.084688][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.115340][ T27] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 155.142126][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.178068][ T27] hub 2-1:1.0: bad descriptor, ignoring hub [ 155.195299][ T27] hub: probe of 2-1:1.0 failed with error -5 [ 155.210082][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 155.225854][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 155.231794][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 155.292246][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.761733][ T27] usb 2-1: USB disconnect, device number 3 [ 156.641998][ T9] usb 3-1: device not accepting address 3, error -71 [ 159.471931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 159.593468][ T51] Bluetooth: hci3: link tx timeout [ 159.630209][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.946669][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.734320][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 165.545270][ T6601] macsec1: entered promiscuous mode [ 166.852089][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.806875][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 167.817187][ T27] usb 4-1: config 0 has no interfaces? [ 167.832653][ T27] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 167.854116][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.892275][ T27] usb 4-1: Product: syz [ 167.896531][ T27] usb 4-1: Manufacturer: syz [ 167.901270][ T27] usb 4-1: SerialNumber: syz [ 168.065639][ T27] usb 4-1: config 0 descriptor?? [ 168.130791][ T6627] capability: warning: `syz.1.214' uses 32-bit capabilities (legacy support in use) [ 169.711936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 170.052823][ T8] usb 4-1: USB disconnect, device number 4 [ 172.339984][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 174.702273][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.952793][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.051714][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.091817][ T8] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.101261][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.174763][ T8] usb 4-1: config 0 descriptor?? [ 176.725005][ T6679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.233'. [ 178.717078][ T8] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input8 [ 179.058949][ T8] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 179.172188][ T8] usb 4-1: USB disconnect, device number 5 [ 182.511926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 182.803835][ T6697] fido_id[6697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 184.086079][ T6714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.665191][ T6767] Invalid ELF header magic: != ELF [ 194.570921][ T6777] ALSA: seq fatal error: cannot create timer (-16) [ 194.735863][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.605368][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.482334][ T28] audit: type=1326 audit(1784845250.497:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 200.550482][ T6816] Invalid ELF header magic: != ELF [ 200.558750][ T28] audit: type=1326 audit(1784845250.507:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.139707][ T28] audit: type=1326 audit(1784845250.507:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.193883][ T28] audit: type=1326 audit(1784845250.517:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.234983][ T28] audit: type=1326 audit(1784845250.527:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.313798][ T28] audit: type=1326 audit(1784845250.527:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.341752][ T28] audit: type=1326 audit(1784845250.527:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.369287][ T28] audit: type=1326 audit(1784845250.527:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 201.581223][ T28] audit: type=1326 audit(1784845250.527:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 202.304997][ T28] audit: type=1326 audit(1784845250.527:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742bb9de99 code=0x7ffc0000 [ 202.521517][ T6830] loop0: detected capacity change from 0 to 1024 [ 202.843835][ T6832] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 204.435592][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 206.154488][ T6851] Invalid ELF header magic: != ELF [ 207.662317][ T6864] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 208.071169][ T6874] Invalid ELF header magic: != ELF [ 209.541740][ T6881] loop0: detected capacity change from 0 to 1024 [ 212.183786][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 212.189881][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 212.196392][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 213.311430][ T6923] ALSA: seq fatal error: cannot create timer (-16) [ 217.987871][ T6948] loop3: detected capacity change from 0 to 1024 [ 221.754586][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 224.132059][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 224.437498][ T27] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 224.472723][ T27] usb 4-1: config 0 has no interface number 0 [ 224.709565][ T27] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.723732][ T27] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.737975][ T27] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 224.761897][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.769988][ T27] usb 4-1: Product: syz [ 224.782329][ T27] usb 4-1: Manufacturer: syz [ 225.527264][ T27] usb 4-1: SerialNumber: syz [ 225.535829][ T27] usb 4-1: config 0 descriptor?? [ 225.554997][ T27] yurex 4-1:0.50: Could not submitting URB [ 225.561104][ T27] yurex: probe of 4-1:0.50 failed with error -5 [ 225.902095][ T8] usb 4-1: USB disconnect, device number 6 [ 228.733384][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 236.648675][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 240.344409][ T7137] erspan0: entered promiscuous mode [ 241.392465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.254835][ T7155] Invalid ELF header magic: != ELF [ 244.093246][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.293928][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 244.301676][ T8] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 244.322124][ T8] usb 4-1: config 0 has no interface number 0 [ 244.328350][ T8] usb 4-1: config 0 interface 12 has no altsetting 0 [ 244.354676][ T8] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 244.382038][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.390122][ T8] usb 4-1: Product: syz [ 244.416517][ T8] usb 4-1: Manufacturer: syz [ 244.421201][ T8] usb 4-1: SerialNumber: syz [ 244.438928][ T8] usb 4-1: config 0 descriptor?? [ 245.607264][ T8] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 245.619960][ T8] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 245.628528][ T8] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 246.860257][ T8] f81534: probe of 4-1:0.12 failed with error -71 [ 246.891209][ T8] usb 4-1: USB disconnect, device number 8 [ 248.421370][ T7190] Invalid ELF header magic: != ELF [ 248.514542][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 251.988428][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 252.246834][ T7213] : renamed from team_slave_1 (while UP) [ 254.260955][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 254.482027][ T5883] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 254.589706][ T7233] loop0: detected capacity change from 0 to 512 [ 254.677457][ T7233] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.732381][ T7233] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 254.768713][ T5883] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.780233][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.789880][ T5883] usb 4-1: Product: syz [ 254.800519][ T5883] usb 4-1: Manufacturer: syz [ 254.806864][ T5883] usb 4-1: SerialNumber: syz [ 254.827641][ T5883] usb 4-1: config 0 descriptor?? [ 255.108336][ T5883] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.123692][ T7236] Invalid ELF header magic: != ELF [ 255.583835][ T5883] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 255.699931][ T5883] usb 4-1: USB disconnect, device number 9 [ 256.132536][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.139829][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.247523][ T5774] Bluetooth: hci3: link tx timeout [ 259.253500][ T5774] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 262.214884][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 262.393896][ T7278] loop2: detected capacity change from 0 to 512 [ 262.488619][ T7278] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.527437][ T7278] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 263.192269][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 263.402041][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 263.457409][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.512210][ T27] usb 2-1: config 137 has an invalid interface number: 5 but max is 0 [ 263.535992][ T27] usb 2-1: config 137 has no interface number 0 [ 263.563685][ T27] usb 2-1: config 137 interface 5 has no altsetting 0 [ 263.605380][ T27] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=c2.5a [ 263.630837][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.649172][ T27] usb 2-1: Product: syz [ 263.661391][ T27] usb 2-1: Manufacturer: syz [ 263.678549][ T27] usb 2-1: SerialNumber: syz [ 263.957828][ T27] usb_ehset_test: probe of 2-1:137.5 failed with error -32 [ 263.980339][ T27] usb 2-1: USB disconnect, device number 4 [ 265.310706][ T7308] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 265.466119][ T7308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.498761][ T7311] bond1: (slave ip6gretap1): making interface the new active one [ 265.522059][ T5883] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 265.553230][ T7311] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 265.728043][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.776536][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.789258][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.828223][ T5883] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 265.850364][ T7323] Invalid ELF header magic: != ELF [ 265.930476][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.997213][ T5883] usb 3-1: config 0 descriptor?? [ 266.108557][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 266.633237][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.657942][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.680711][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.708666][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.723019][ T7329] loop0: detected capacity change from 0 to 1024 [ 266.729524][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.743958][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.800492][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 266.819049][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.003243][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.019918][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.036392][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.043724][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.050851][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.058991][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.621954][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.629192][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.637717][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.644955][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.652075][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.659105][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.666236][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.699601][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.727275][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.824304][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.831358][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.838564][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.845635][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.852743][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.859761][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.866846][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.873939][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.880962][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.905688][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.920903][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 267.968313][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 268.002703][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 268.009797][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 268.031005][ T5883] belkin 0003:050D:3201.0002: unknown main item tag 0x0 [ 268.050217][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 268.091412][ T5883] belkin 0003:050D:3201.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 268.192121][ T5883] usb 3-1: USB disconnect, device number 5 [ 268.948140][ T7339] fido_id[7339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 269.258826][ T7354] Invalid ELF header magic: != ELF [ 270.062358][ T7363] loop0: detected capacity change from 0 to 1024 [ 273.490884][ T7383] warning: `syz.2.452' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 274.542705][ T7392] Invalid ELF header magic: != ELF [ 275.214591][ T7395] GUP no longer grows the stack in syz.0.457 (7395): 200000007000-200000008000 (200000004000) [ 275.240870][ T7395] CPU: 1 PID: 7395 Comm: syz.0.457 Not tainted syzkaller #0 [ 275.248245][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 275.258380][ T7395] Call Trace: [ 275.261710][ T7395] [ 275.264694][ T7395] dump_stack_lvl+0x18c/0x250 [ 275.269461][ T7395] ? show_regs_print_info+0x20/0x20 [ 275.274731][ T7395] ? load_image+0x420/0x420 [ 275.279295][ T7395] ? find_vma+0x134/0x1b0 [ 275.283690][ T7395] fixup_user_fault+0x691/0x750 [ 275.288624][ T7395] fault_in_user_writeable+0x71/0xd0 [ 275.293968][ T7395] futex_lock_pi+0x276/0xa00 [ 275.298630][ T7395] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 275.304106][ T7395] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 275.309895][ T7395] do_futex+0x23d/0x3e0 [ 275.314115][ T7395] ? __ia32_sys_get_robust_list+0x110/0x110 [ 275.320072][ T7395] __se_sys_futex+0x3a9/0x440 [ 275.324985][ T7395] ? __x64_sys_futex+0xf0/0xf0 [ 275.329806][ T7395] ? __x64_sys_futex+0x21/0xf0 [ 275.334621][ T7395] do_syscall_64+0x55/0xb0 [ 275.339097][ T7395] ? clear_bhb_loop+0x40/0x90 [ 275.343814][ T7395] ? clear_bhb_loop+0x40/0x90 [ 275.348525][ T7395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.354468][ T7395] RIP: 0033:0x7f742bb9de99 [ 275.358919][ T7395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.378556][ T7395] RSP: 002b:00007f742cb11028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 275.386999][ T7395] RAX: ffffffffffffffda RBX: 00007f742be25fa0 RCX: 00007f742bb9de99 [ 275.394999][ T7395] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 275.403003][ T7395] RBP: 00007f742bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 275.411029][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.419027][ T7395] R13: 00007f742be26038 R14: 00007f742be25fa0 R15: 00007fff827d75f8 [ 275.427042][ T7395] [ 275.558098][ T7402] loop1: detected capacity change from 0 to 1024 [ 276.899304][ T7424] Invalid ELF header magic: != ELF [ 277.545733][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 277.545752][ T28] audit: type=1326 audit(1784845327.557:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.1.468" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c9f99de99 code=0x0 [ 278.852063][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 278.936353][ T7447] loop3: detected capacity change from 0 to 1024 [ 281.347869][ T7474] netlink: 'syz.0.483': attribute type 39 has an invalid length. [ 282.734956][ T3063] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.899352][ T7503] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 282.953118][ T3063] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 282.978686][ T3063] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.002594][ T3063] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.024154][ T3063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.260473][ T3063] usb 3-1: config 0 descriptor?? [ 283.269888][ T3063] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 283.422226][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 283.613636][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 283.626515][ T5811] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.638739][ T5811] usb 2-1: config 0 has no interface number 0 [ 283.660759][ T5811] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.677558][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.697173][ T5811] usb 2-1: Product: syz [ 283.713272][ T5811] usb 2-1: Manufacturer: syz [ 283.720334][ T5811] usb 2-1: SerialNumber: syz [ 283.732312][ T5811] usb 2-1: config 0 descriptor?? [ 283.744558][ T5811] smsc95xx v2.0.0 [ 284.166194][ T5811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 284.976615][ T5811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.128061][ T7529] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 285.214696][ T5811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 285.244820][ T5811] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 285.258161][ T5811] usb 2-1: USB disconnect, device number 5 [ 285.505222][ T8] usb 3-1: USB disconnect, device number 6 [ 285.629324][ T7542] binder: 7541:7542 ioctl 4018620d 0 returned -22 [ 286.423264][ T7559] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 286.963440][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 287.920509][ T7585] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 289.817287][ T7615] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 291.183654][ T7642] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 292.265302][ T7673] [U] [ 292.268412][ T7673] [U] [ 292.271180][ T7673] [U] [ 292.273943][ T7673] [U] [ 292.281547][ T7673] [U] [ 292.284325][ T7673] [U] [ 292.287153][ T7673] [U] [ 292.289907][ T7673] [U] [ 292.311387][ T7673] [U] [ 292.314177][ T7673] [U] [ 292.316923][ T7673] [U] [ 292.319656][ T7673] [U] [ 292.338760][ T7673] [U] [ 292.341549][ T7673] [U] [ 292.344293][ T7673] [U] [ 292.347032][ T7673] [U] [ 292.362113][ T7673] [U] [ 292.364900][ T7673] [U] [ 292.367645][ T7673] [U] [ 292.370396][ T7673] [U] [ 292.382156][ T7673] [U] [ 292.384948][ T7673] [U] [ 292.387700][ T7673] [U] [ 292.390440][ T7673] [U] [ 292.440369][ T7673] [U] [ 292.443164][ T7673] [U] [ 292.445908][ T7673] [U] [ 292.448644][ T7673] [U] [ 292.473135][ T7673] [U] [ 292.475947][ T7673] [U] [ 292.478695][ T7673] [U] [ 292.481434][ T7673] [U] [ 292.514855][ T7673] [U] [ 292.517679][ T7673] [U] [ 292.520423][ T7673] [U] [ 292.523168][ T7673] [U] [ 292.555074][ T7673] [U] [ 292.557859][ T7673] [U] [ 292.560609][ T7673] [U] [ 292.563360][ T7673] [U] [ 292.569171][ T7673] [U] [ 292.571939][ T7673] [U] [ 292.574692][ T7673] [U] [ 292.577450][ T7673] [U] [ 292.581361][ T7673] [U] [ 292.584126][ T7673] [U] [ 292.586912][ T7673] [U] [ 292.589662][ T7673] [U] [ 292.602365][ T7673] [U] [ 292.605168][ T7673] [U] [ 292.607915][ T7673] [U] [ 292.610651][ T7673] [U] [ 292.625568][ T7673] [U] [ 292.628357][ T7673] [U] [ 292.631100][ T7673] [U] [ 292.633944][ T7673] [U] [ 292.652225][ T7673] [U] [ 292.655027][ T7673] [U] [ 292.657775][ T7673] [U] [ 292.660519][ T7673] [U] [ 292.692173][ T7673] [U] [ 292.694971][ T7673] [U] [ 292.697731][ T7673] [U] [ 292.700512][ T7673] [U] [ 292.721552][ T7673] [U] [ 292.724348][ T7673] [U] [ 292.727096][ T7673] [U] [ 292.729845][ T7673] [U] [ 292.741611][ T7673] [U] [ 292.744398][ T7673] [U] [ 292.747152][ T7673] [U] [ 292.749903][ T7673] [U] [ 292.770374][ T7673] [U] [ 292.773153][ T7673] [U] [ 292.775880][ T7673] [U] [ 292.778600][ T7673] [U] [ 292.805505][ T7673] [U] [ 292.808348][ T7673] [U] [ 292.811103][ T7673] [U] [ 292.813856][ T7673] [U] [ 292.826763][ T7673] [U] [ 292.829549][ T7673] [U] [ 292.832304][ T7673] [U] [ 292.835068][ T7673] [U] [ 292.845759][ T7673] [U] [ 292.848545][ T7673] [U] [ 292.851326][ T7673] [U] [ 292.854078][ T7673] [U] [ 292.859976][ T7673] [U] [ 292.862753][ T7673] [U] [ 292.865539][ T7673] [U] [ 292.868283][ T7673] [U] [ 292.892319][ T7673] [U] [ 292.895107][ T7673] [U] [ 292.897877][ T7673] [U] [ 292.900617][ T7673] [U] [ 292.922175][ T7673] [U] [ 292.924971][ T7673] [U] [ 292.927742][ T7673] [U] [ 292.930541][ T7673] [U] [ 292.952143][ T7673] [U] [ 292.954956][ T7673] [U] [ 292.957718][ T7673] [U] [ 292.960468][ T7673] [U] [ 292.965938][ T7673] [U] [ 292.968711][ T7673] [U] [ 292.971546][ T7673] [U] [ 292.974289][ T7673] [U] [ 292.989752][ T7673] [U] [ 292.992537][ T7673] [U] [ 292.995282][ T7673] [U] [ 292.998032][ T7673] [U] [ 293.018872][ T7673] [U] [ 293.021703][ T7673] [U] [ 293.024450][ T7673] [U] [ 293.027211][ T7673] [U] [ 293.043491][ T7673] [U] [ 293.046287][ T7673] [U] [ 293.049041][ T7673] [U] [ 293.051794][ T7673] [U] [ 293.056429][ T7673] [U] [ 293.059198][ T7673] [U] [ 293.061938][ T7673] [U] [ 293.064689][ T7673] [U] [ 293.068334][ T7673] [U] [ 293.071095][ T7673] [U] [ 293.073839][ T7673] [U] [ 293.097754][ T7672] [U] [ 293.113608][ T7690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 293.495827][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 295.425866][ T7722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.289991][ T7746] sg_write: data in/out 2147418082/52 bytes for SCSI command 0x0-- guessing data in; [ 298.289991][ T7746] program syz.1.586 not setting count and/or reply_len properly [ 298.329207][ T7746] sg_read: process 451 (syz.1.586) changed security contexts after opening file descriptor, this is not allowed. [ 298.553691][ T7751] comedi comedi3: comedi_config --init_data is deprecated [ 299.549351][ T7755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.212385][ T7791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.352222][ T5761] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 302.506916][ T7798] loop1: detected capacity change from 0 to 1024 [ 302.546207][ T5761] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 302.597669][ T5761] usb 4-1: config 0 has no interface number 0 [ 302.636846][ T5761] usb 4-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 31 [ 302.908524][ T5761] usb 4-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 302.919831][ T5761] usb 4-1: config 0 interface 238 has no altsetting 0 [ 302.930265][ T5761] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 302.941366][ T5761] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 303.699794][ T5761] usb 4-1: Product: syz [ 303.720114][ T5761] usb 4-1: Manufacturer: syz [ 303.742187][ T5761] usb 4-1: SerialNumber: syz [ 303.790819][ T5761] usb 4-1: config 0 descriptor?? [ 303.832392][ T7788] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.896828][ T5761] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device. [ 304.093161][ T5761] usb 4-1: USB disconnect, device number 10 [ 304.169933][ T7815] Invalid ELF header magic: != ELF [ 304.957707][ T7821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.318689][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 305.549888][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.710710][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.834225][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.903427][ T8] usb 3-1: config 0 descriptor?? [ 306.191485][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 306.207934][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 306.948006][ T8] usb 3-1: USB disconnect, device number 7 [ 307.311923][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 309.053974][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 309.112022][ T8] usb 3-1: device descriptor read/all, error -71 [ 309.371937][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 309.792270][ T8] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 309.912382][ T3063] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 310.015310][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 310.050689][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.069192][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.086333][ T8] usb 3-1: Product: syz [ 310.100772][ T8] usb 3-1: Manufacturer: 薳划㭼㈥Ͳᨣﭞ᧒䃏ꖳ㠡컻华컧࢞̕럪㿀ྦྷᲇ㮢첇묬 [ 310.112300][ T3063] usb 2-1: Using ep0 maxpacket: 8 [ 310.124108][ T8] usb 3-1: SerialNumber: syz [ 310.127262][ T3063] usb 2-1: unable to get BOS descriptor or descriptor too short [ 310.148572][ T3063] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 310.181979][ T3063] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 310.201571][ T3063] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 310.216313][ T3063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.224867][ T3063] usb 2-1: Product: syz [ 310.229250][ T3063] usb 2-1: Manufacturer: syz [ 310.234379][ T3063] usb 2-1: SerialNumber: syz [ 310.385995][ T8] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 310.406504][ T8] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 310.437764][ T8] usb 3-1: found format II with max.bitrate = 0, frame size=128 [ 310.488748][ T8] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 310.571711][ T8] usb 3-1: USB disconnect, device number 9 [ 310.583738][ T3063] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 311.307460][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.657682][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 311.713541][ T3063] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 312.096109][ T3063] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.128057][ T3063] usb 2-1: device firmware changed [ 312.160302][ T3063] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 312.405590][ T3063] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 312.471046][ T5810] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 313.054107][ T3063] usb 2-1: USB disconnect, device number 6 [ 313.063290][ T5810] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 313.158489][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 313.368501][ T7929] Invalid ELF header magic: != ELF [ 314.774333][ T7939] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 314.824131][ T7939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.954731][ T7939] bond1: (slave dummy0): making interface the new active one [ 315.011257][ T7939] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 315.060924][ T7941] bond1: (slave dummy0): Releasing active interface [ 315.078757][ T7947] loop0: detected capacity change from 0 to 512 [ 315.096403][ T7947] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.117557][ T7941] bridge_slave_0: left allmulticast mode [ 315.125548][ T7947] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 315.137516][ T7941] bridge_slave_0: left promiscuous mode [ 315.293641][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.340982][ T7941] bridge_slave_1: left allmulticast mode [ 315.357502][ T7941] bridge_slave_1: left promiscuous mode [ 315.375250][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.383765][ T5883] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 315.409499][ T7941] bond0: (slave bond_slave_0): Releasing backup interface [ 315.436066][ T7941] bond0: (slave bond_slave_1): Releasing backup interface [ 315.514288][ T7941] team0: Port device team_slave_0 removed [ 315.543418][ T7941] team0: Port device 26 removed [ 315.553525][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.565144][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.575612][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.588363][ T5883] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 315.598088][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.612061][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.619396][ T5883] usb 3-1: Product: syz [ 315.624171][ T5883] usb 3-1: Manufacturer: syz [ 315.628823][ T5883] usb 3-1: SerialNumber: syz [ 315.649334][ T5883] usb 3-1: config 0 descriptor?? [ 315.674451][ T5883] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 315.805413][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 316.157496][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.661'. [ 316.295707][ T5883] gspca_stk1135: reg_w 0x3 err -71 [ 316.394175][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 316.580408][ T5883] gspca_stk1135: Sensor write failed [ 316.711376][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 316.845356][ T5883] gspca_stk1135: Sensor write failed [ 316.850760][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 316.936437][ T5883] gspca_stk1135: Sensor read failed [ 316.941744][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 317.052207][ T5883] gspca_stk1135: Sensor read failed [ 317.057487][ T5883] gspca_stk1135: Detected sensor type unknown (0x0) [ 317.101628][ T7971] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 317.112092][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 317.118492][ T5883] gspca_stk1135: Sensor read failed [ 317.158389][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 317.172459][ T5883] gspca_stk1135: Sensor read failed [ 317.177801][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 317.203122][ T5883] gspca_stk1135: Sensor write failed [ 317.208616][ T5883] gspca_stk1135: serial bus timeout: status=0x00 [ 317.223595][ T7975] Invalid ELF header magic: != ELF [ 317.230212][ T5883] gspca_stk1135: Sensor write failed [ 317.247657][ T5883] stk1135: probe of 3-1:0.0 failed with error -71 [ 317.560076][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.583394][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.706956][ T5883] usb 3-1: USB disconnect, device number 10 [ 318.373735][ T7987] loop1: detected capacity change from 0 to 1024 [ 318.691135][ T7997] netlink: 276 bytes leftover after parsing attributes in process `syz.2.672'. [ 319.386505][ T8005] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 320.142084][ T8022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.682'. [ 320.335855][ T8029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 321.227206][ T8041] loop2: detected capacity change from 0 to 1024 [ 322.465799][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.693'. [ 322.500900][ T8053] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 323.424238][ T8075] loop3: detected capacity change from 0 to 1024 [ 323.778817][ T8078] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 324.592363][ T8085] ALSA: seq fatal error: cannot create timer (-16) [ 324.652059][ T8088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.706'. [ 325.452131][ T8094] Invalid ELF header magic: != ELF [ 326.003321][ T8096] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 326.184119][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 327.543834][ T8109] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 327.854148][ T8116] loop1: detected capacity change from 0 to 1024 [ 327.875280][ T8119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.718'. [ 327.900182][ T8118] Invalid ELF header magic: != ELF [ 329.823581][ T8139] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 330.438551][ T8150] netlink: 44 bytes leftover after parsing attributes in process `syz.1.730'. [ 330.623056][ T5761] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 331.016701][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 331.663350][ T5761] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 331.675314][ T5761] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 331.685713][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 331.694804][ T5761] usb 3-1: config 1 has no interface number 0 [ 331.700960][ T5761] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.713210][ T5761] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 331.726332][ T5761] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 331.735509][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.770639][ T5761] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 332.251152][ T5761] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 332.802049][ T8168] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 332.928856][ T5761] usb 3-1: USB disconnect, device number 11 [ 332.940926][ T5761] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 335.183929][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 336.013621][ T8189] Invalid ELF header magic: != ELF [ 337.726562][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 337.949511][ T8211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.751'. [ 341.252241][ T8234] Invalid ELF header magic: != ELF [ 342.086965][ T8243] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 342.144042][ T8243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.247239][ T8243] bond1: (slave veth0_to_bond): making interface the new active one [ 342.269728][ T8243] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 342.476357][ T8246] bond1: entered promiscuous mode [ 342.509365][ T8246] veth0_to_bond: entered promiscuous mode [ 342.820562][ T8246] bond1: entered allmulticast mode [ 342.932968][ T8246] veth0_to_bond: entered allmulticast mode [ 347.622631][ T8270] Invalid ELF header magic: != ELF [ 349.754783][ T8291] overlay: Bad value for 'uuid' [ 351.989645][ T8309] Invalid ELF header magic: != ELF [ 352.337509][ T28] audit: type=1326 audit(1784845402.357:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.3.785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd085d9de99 code=0x7fc00000 [ 352.447662][ T28] audit: type=1326 audit(1784845402.387:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.3.785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd085d9de99 code=0x7fc00000 [ 352.523281][ T28] audit: type=1326 audit(1784845402.397:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8313 comm="syz.3.785" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd085d9de99 code=0x7fc00000 [ 354.842824][ T8333] Invalid ELF header magic: != ELF [ 356.069445][ T8341] loop2: detected capacity change from 0 to 512 [ 356.132156][ T8341] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 356.186825][ T8341] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 359.242764][ T8365] Invalid ELF header magic: != ELF [ 359.508420][ T8370] comedi comedi3: comedi_config --init_data is deprecated [ 362.739740][ T8386] Invalid ELF header magic: != ELF [ 366.307647][ T8414] comedi comedi3: comedi_config --init_data is deprecated [ 369.114937][ T8424] Invalid ELF header magic: != ELF [ 369.162551][ T8426] loop2: detected capacity change from 0 to 1024 [ 370.299267][ T8434] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 370.335650][ T8434] netlink: 'syz.1.826': attribute type 4 has an invalid length. [ 370.363524][ T8434] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.826'. [ 371.661545][ T8447] comedi comedi3: comedi_config --init_data is deprecated [ 374.035626][ T5810] ------------[ cut here ]------------ [ 374.041731][ T5810] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 374.453467][ T5810] WARNING: CPU: 1 PID: 5810 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 374.463014][ T5810] Modules linked in: [ 374.466955][ T5810] CPU: 1 PID: 5810 Comm: kworker/1:4 Not tainted syzkaller #0 [ 374.474552][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 374.484701][ T5810] Workqueue: events request_firmware_work_func [ 374.490952][ T5810] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 374.496985][ T5810] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 1f c9 ff 49 8b 17 48 c7 c7 40 bb da 8a 48 89 de e8 05 81 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef a7 70 ff [ 374.517968][ T5810] RSP: 0018:ffffc9000481f820 EFLAGS: 00010246 [ 374.524321][ T5810] RAX: 675de3fcf43cfe00 RBX: ffffffff8b422ee0 RCX: ffff888079b8da00 [ 374.532402][ T5810] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 374.540411][ T5810] RBP: ffffc9000481f950 R08: ffffc9000481f427 R09: 1ffff92000903e84 [ 374.548518][ T5810] R10: dffffc0000000000 R11: fffff52000903e85 R12: 1ffffffff16845e0 [ 374.556607][ T5810] R13: dffffc0000000000 R14: ffff8880251262e8 R15: ffff8880765fe008 [ 374.564662][ T5810] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 374.573762][ T5810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.580405][ T5810] CR2: 000020000000c000 CR3: 0000000045d0f000 CR4: 00000000003526e0 [ 374.588487][ T5810] Call Trace: [ 374.591873][ T5810] [ 374.594851][ T5810] ? sysfs_unmerge_group+0x10d/0x130 [ 374.600187][ T5810] device_del+0x251/0x910 [ 374.604621][ T5810] ? kill_device+0x160/0x160 [ 374.609245][ T5810] ? __fw_load_abort+0x8b/0x1a0 [ 374.614761][ T5810] firmware_fallback_sysfs+0x68c/0x950 [ 374.620491][ T5810] _request_firmware+0xf29/0x1520 [ 374.625664][ T5810] ? request_firmware+0x50/0x50 [ 374.630600][ T5810] ? lockdep_hardirqs_on+0x98/0x150 [ 374.636052][ T5810] ? read_lock_is_recursive+0x20/0x20 [ 374.641497][ T5810] request_firmware_work_func+0x9e/0x1a0 [ 374.647276][ T5810] ? process_scheduled_works+0x975/0x1600 [ 374.653246][ T5810] process_scheduled_works+0xa60/0x1600 [ 374.658899][ T5810] ? worker_attach_to_pool+0x370/0x370 [ 374.664815][ T5810] ? assign_work+0x3cc/0x5d0 [ 374.669574][ T5810] worker_thread+0xa5e/0xfe0 [ 374.674324][ T5810] kthread+0x2fa/0x390 [ 374.678478][ T5810] ? pr_cont_work+0x550/0x550 [ 374.683293][ T5810] ? kthread_blkcg+0xd0/0xd0 [ 374.687941][ T5810] ret_from_fork+0x48/0x80 [ 374.692540][ T5810] ? kthread_blkcg+0xd0/0xd0 [ 374.697198][ T5810] ret_from_fork_asm+0x11/0x20 [ 374.702139][ T5810] [ 374.705348][ T5810] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.712670][ T5810] CPU: 1 PID: 5810 Comm: kworker/1:4 Not tainted syzkaller #0 [ 374.720172][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 374.730280][ T5810] Workqueue: events request_firmware_work_func [ 374.736513][ T5810] Call Trace: [ 374.739930][ T5810] [ 374.742911][ T5810] dump_stack_lvl+0x18c/0x250 [ 374.747679][ T5810] ? show_regs_print_info+0x20/0x20 [ 374.752951][ T5810] ? load_image+0x420/0x420 [ 374.757586][ T5810] panic+0x2ca/0x720 [ 374.761566][ T5810] ? bpf_jit_dump+0xd0/0xd0 [ 374.766148][ T5810] ? ret_from_fork_asm+0x11/0x20 [ 374.771269][ T5810] __warn+0x2e0/0x470 [ 374.775334][ T5810] ? sysfs_remove_group+0x17b/0x290 [ 374.780589][ T5810] ? sysfs_remove_group+0x17b/0x290 [ 374.785844][ T5810] report_bug+0x2be/0x4f0 [ 374.790256][ T5810] ? sysfs_remove_group+0x17b/0x290 [ 374.795503][ T5810] ? sysfs_remove_group+0x17b/0x290 [ 374.800746][ T5810] ? sysfs_remove_group+0x17d/0x290 [ 374.805972][ T5810] handle_bug+0xcf/0x120 [ 374.810242][ T5810] exc_invalid_op+0x1a/0x50 [ 374.814801][ T5810] asm_exc_invalid_op+0x1a/0x20 [ 374.819795][ T5810] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 374.825642][ T5810] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 1f c9 ff 49 8b 17 48 c7 c7 40 bb da 8a 48 89 de e8 05 81 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef a7 70 ff [ 374.845290][ T5810] RSP: 0018:ffffc9000481f820 EFLAGS: 00010246 [ 374.851393][ T5810] RAX: 675de3fcf43cfe00 RBX: ffffffff8b422ee0 RCX: ffff888079b8da00 [ 374.859388][ T5810] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 374.867406][ T5810] RBP: ffffc9000481f950 R08: ffffc9000481f427 R09: 1ffff92000903e84 [ 374.875406][ T5810] R10: dffffc0000000000 R11: fffff52000903e85 R12: 1ffffffff16845e0 [ 374.883416][ T5810] R13: dffffc0000000000 R14: ffff8880251262e8 R15: ffff8880765fe008 [ 374.891513][ T5810] ? sysfs_unmerge_group+0x10d/0x130 [ 374.896835][ T5810] device_del+0x251/0x910 [ 374.901199][ T5810] ? kill_device+0x160/0x160 [ 374.905823][ T5810] ? __fw_load_abort+0x8b/0x1a0 [ 374.910732][ T5810] firmware_fallback_sysfs+0x68c/0x950 [ 374.916238][ T5810] _request_firmware+0xf29/0x1520 [ 374.921310][ T5810] ? request_firmware+0x50/0x50 [ 374.926203][ T5810] ? lockdep_hardirqs_on+0x98/0x150 [ 374.931438][ T5810] ? read_lock_is_recursive+0x20/0x20 [ 374.936850][ T5810] request_firmware_work_func+0x9e/0x1a0 [ 374.942519][ T5810] ? process_scheduled_works+0x975/0x1600 [ 374.948273][ T5810] process_scheduled_works+0xa60/0x1600 [ 374.953901][ T5810] ? worker_attach_to_pool+0x370/0x370 [ 374.959397][ T5810] ? assign_work+0x3cc/0x5d0 [ 374.964017][ T5810] worker_thread+0xa5e/0xfe0 [ 374.968663][ T5810] kthread+0x2fa/0x390 [ 374.972842][ T5810] ? pr_cont_work+0x550/0x550 [ 374.977555][ T5810] ? kthread_blkcg+0xd0/0xd0 [ 374.982219][ T5810] ret_from_fork+0x48/0x80 [ 374.986686][ T5810] ? kthread_blkcg+0xd0/0xd0 [ 374.991598][ T5810] ret_from_fork_asm+0x11/0x20 [ 374.996509][ T5810] [ 375.000146][ T5810] Kernel Offset: disabled [ 375.004664][ T5810] Rebooting in 86400 seconds..