last executing test programs: 12.601458222s ago: executing program 1 (id=591): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$evdev(0x0, 0x20000000000000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c9b) 12.212960859s ago: executing program 4 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128025b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b752"], 0x184}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(0x0, 0x1, 0x400) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11.194103825s ago: executing program 1 (id=594): fallocate(0xffffffffffffffff, 0x0, 0x3, 0x5) socket(0x10, 0x80002, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, 0x0, 0x0, 0x4, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 10.965517909s ago: executing program 1 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0x0, r1}, 0x20) 10.920411948s ago: executing program 4 (id=597): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioperm(0x0, 0x7, 0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040120c300000000000000109028e8652bf7c3422917e0001000000000904000001030000000921000000012207000905810300"/67], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x4) sendmsg$nl_generic(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) epoll_create(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getpid() 9.61051888s ago: executing program 1 (id=600): syz_open_dev$admmidi(0x0, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_pts(0xffffffffffffffff, 0x4400) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)=0xfdf7fff8, 0x4) 9.352888163s ago: executing program 2 (id=601): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0000001fff110010004100926eb73ffd8eec94f77bf67ebc742015bb65370b0c2c753a45fe800b37d5bd72d3ca53b3adb4ebd908266bf945220c085c1ac070be8e9e72e3d76c961f346c42aa07cc160e95c2fed8970543365c7e0f5d9eb4b1ffc5f6b06bd6697bff9450715068ca5bd329fa6ed0d86c7cf84734d18f402bd5b9"], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000080)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 7.847291117s ago: executing program 1 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet(r6, &(0x7f0000001340)={&(0x7f0000001140)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001280)=[{&(0x7f00000011c0)='z', 0x1}], 0x1}, 0x18840) sendto$inet6(r6, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) shutdown(r6, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f0000000200)=""/47, 0x2e, 0x2f, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.774495445s ago: executing program 4 (id=605): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$evdev(0x0, 0x20000000000000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c9b) 7.40570188s ago: executing program 3 (id=606): fallocate(0xffffffffffffffff, 0x0, 0x3, 0x5) socket(0x10, 0x80002, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, 0x0, 0x0, 0x4, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 6.914463254s ago: executing program 3 (id=607): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128025b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b752"], 0x184}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(0x0, 0x1, 0x400) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 6.538385615s ago: executing program 4 (id=608): syz_io_uring_setup(0x416f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x1ff, {0xffffffffffffffff}, {}, 0xd, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) 5.132484525s ago: executing program 0 (id=609): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x80) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(0x0, 0x0) 4.889700663s ago: executing program 0 (id=610): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 4.721063145s ago: executing program 0 (id=611): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/4115, 0x1a, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)=')-&\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 4.036152271s ago: executing program 0 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000200)=ANY=[@ANYBLOB='4', @ANYRES16=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44094) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000009c0)={0x0, 0x4, 0x2, 0x1}) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100)=0x1, 0x4) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x401eb94) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 3.780895419s ago: executing program 3 (id=613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 3.630563543s ago: executing program 1 (id=614): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.46565791s ago: executing program 2 (id=615): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb", 0x8a}], 0x1}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.379224535s ago: executing program 4 (id=616): socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = dup3(r3, r6, 0x80000) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x19) 3.183692331s ago: executing program 2 (id=617): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xaf4, 0x0) 3.09365184s ago: executing program 2 (id=618): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$evdev(0x0, 0x20000000000000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x67}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1c9b) 2.741645609s ago: executing program 3 (id=619): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="61df71", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$inet(r3, 0x0, 0x18840) sendto$inet6(r3, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) shutdown(r3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000200)=""/47, 0x2e, 0x2f, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.381700287s ago: executing program 4 (id=620): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(0x0, 0x0) 2.009047282s ago: executing program 2 (id=621): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x13, 0x4, 0x4, 0xff, 0x8000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000000c0)=""/97, 0x61) 1.751554956s ago: executing program 0 (id=622): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/4115, 0x1a, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)=')-&\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 1.750889609s ago: executing program 3 (id=623): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128025b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b752"], 0x184}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(0x0, 0x1, 0x400) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000440)}) 732.155019ms ago: executing program 2 (id=624): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000140)="abf444daf2", 0x5, 0x4000815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 19.229143ms ago: executing program 0 (id=625): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0000001fff110010004100926eb73ffd8eec94f77bf67ebc742015bb65370b0c2c753a45fe800b37d5bd72d3ca53b3adb4ebd908266bf945220c085c1ac070be8e9e72e3d76c961f346c42aa07cc160e95c2fed8970543365c7e0f5d9eb4b1ffc5f6b06bd6697bff9450715068ca5bd329fa6ed0d86c7cf84734d18f402bd5b9"], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000080)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 0s ago: executing program 3 (id=626): syz_io_uring_setup(0x416f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x1ff, {0xffffffffffffffff}, {}, 0xd, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 59.716832][ T5808] cgroup: Unknown subsys name 'net' [ 59.912777][ T5808] cgroup: Unknown subsys name 'cpuset' [ 59.920605][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.276900][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.949018][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.972643][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.981149][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.982356][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.991147][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.998296][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.004028][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.011510][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.018252][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.025190][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.040261][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.048541][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.052251][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.056982][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.071092][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.071133][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.088197][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.093415][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.095759][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.110550][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.111304][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.126562][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.128451][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.135056][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.150255][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.164707][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.172161][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.190692][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.202210][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.209647][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.517703][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 65.644485][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 65.677599][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 65.730801][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.738698][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.747559][ T5819] bridge_slave_0: entered allmulticast mode [ 65.755695][ T5819] bridge_slave_0: entered promiscuous mode [ 65.780750][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 65.796314][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.803585][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.811654][ T5819] bridge_slave_1: entered allmulticast mode [ 65.818162][ T5819] bridge_slave_1: entered promiscuous mode [ 65.895450][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 65.918680][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.958221][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.982167][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.989562][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.996742][ T5818] bridge_slave_0: entered allmulticast mode [ 66.004085][ T5818] bridge_slave_0: entered promiscuous mode [ 66.025008][ T5819] team0: Port device team_slave_0 added [ 66.054728][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.064922][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.072655][ T5818] bridge_slave_1: entered allmulticast mode [ 66.079382][ T5818] bridge_slave_1: entered promiscuous mode [ 66.099575][ T5819] team0: Port device team_slave_1 added [ 66.105510][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.112769][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.120008][ T5826] bridge_slave_0: entered allmulticast mode [ 66.126611][ T5826] bridge_slave_0: entered promiscuous mode [ 66.134722][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.141899][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.150092][ T5826] bridge_slave_1: entered allmulticast mode [ 66.157007][ T5826] bridge_slave_1: entered promiscuous mode [ 66.202938][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.214778][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.224240][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.234551][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.241891][ T5825] bridge_slave_0: entered allmulticast mode [ 66.248485][ T5825] bridge_slave_0: entered promiscuous mode [ 66.256534][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.263874][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.271752][ T5825] bridge_slave_1: entered allmulticast mode [ 66.278343][ T5825] bridge_slave_1: entered promiscuous mode [ 66.329720][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.336672][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.364329][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.377844][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.400939][ T5818] team0: Port device team_slave_0 added [ 66.418128][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.427945][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.437774][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.464273][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.477858][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.505888][ T5818] team0: Port device team_slave_1 added [ 66.515537][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.543288][ T5826] team0: Port device team_slave_0 added [ 66.558508][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.565866][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.573392][ T5828] bridge_slave_0: entered allmulticast mode [ 66.580526][ T5828] bridge_slave_0: entered promiscuous mode [ 66.613128][ T5826] team0: Port device team_slave_1 added [ 66.626401][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.633886][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.641220][ T5828] bridge_slave_1: entered allmulticast mode [ 66.648252][ T5828] bridge_slave_1: entered promiscuous mode [ 66.695058][ T5819] hsr_slave_0: entered promiscuous mode [ 66.701660][ T5819] hsr_slave_1: entered promiscuous mode [ 66.716460][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.724211][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.750385][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.764198][ T5825] team0: Port device team_slave_0 added [ 66.779943][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.786926][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.813272][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.826845][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.838969][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.848999][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.856311][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.882711][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.895747][ T5825] team0: Port device team_slave_1 added [ 66.912464][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.919719][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.945838][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.016865][ T5828] team0: Port device team_slave_0 added [ 67.025694][ T5828] team0: Port device team_slave_1 added [ 67.041628][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.048604][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.075116][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.087854][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.095223][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.121508][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.186321][ T5826] hsr_slave_0: entered promiscuous mode [ 67.193769][ T5826] hsr_slave_1: entered promiscuous mode [ 67.200063][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.207925][ T5826] Cannot create hsr debugfs directory [ 67.220746][ T5829] Bluetooth: hci3: command tx timeout [ 67.221371][ T5822] Bluetooth: hci0: command tx timeout [ 67.226688][ T5829] Bluetooth: hci1: command tx timeout [ 67.243764][ T5818] hsr_slave_0: entered promiscuous mode [ 67.250465][ T5818] hsr_slave_1: entered promiscuous mode [ 67.256550][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.264473][ T5818] Cannot create hsr debugfs directory [ 67.277184][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.284409][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.300514][ T5822] Bluetooth: hci2: command tx timeout [ 67.310862][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.316623][ T5829] Bluetooth: hci4: command tx timeout [ 67.357724][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.364981][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.391390][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.410613][ T5825] hsr_slave_0: entered promiscuous mode [ 67.416787][ T5825] hsr_slave_1: entered promiscuous mode [ 67.423267][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.430981][ T5825] Cannot create hsr debugfs directory [ 67.535013][ T5828] hsr_slave_0: entered promiscuous mode [ 67.543741][ T5828] hsr_slave_1: entered promiscuous mode [ 67.550290][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.557900][ T5828] Cannot create hsr debugfs directory [ 67.788235][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.822283][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.836582][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.873280][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.898145][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.910002][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.921408][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.934274][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.009392][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.029854][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.039656][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.065447][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.145944][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.157510][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.167907][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.203237][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.213512][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.295137][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.303442][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.315532][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.328867][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.339524][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.367040][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.374721][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.384134][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.417516][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.424767][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.437284][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.476093][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.483229][ T724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.504705][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.511884][ T724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.537284][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.555166][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.615589][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.637505][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.653496][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.660660][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.691408][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.698553][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.728653][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.735827][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.776036][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.783243][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.852542][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.864467][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.961802][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.065105][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.120899][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.157415][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.205481][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.212693][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.238451][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.245658][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.299583][ T5829] Bluetooth: hci0: command tx timeout [ 69.305057][ T5829] Bluetooth: hci3: command tx timeout [ 69.311572][ T5822] Bluetooth: hci1: command tx timeout [ 69.328090][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.380685][ T5835] Bluetooth: hci2: command tx timeout [ 69.386475][ T5829] Bluetooth: hci4: command tx timeout [ 69.410730][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.422320][ T5819] veth0_vlan: entered promiscuous mode [ 69.450297][ T5818] veth0_vlan: entered promiscuous mode [ 69.463912][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.497699][ T5819] veth1_vlan: entered promiscuous mode [ 69.520469][ T5818] veth1_vlan: entered promiscuous mode [ 69.550949][ T5826] veth0_vlan: entered promiscuous mode [ 69.575045][ T5825] veth0_vlan: entered promiscuous mode [ 69.611190][ T5826] veth1_vlan: entered promiscuous mode [ 69.661462][ T5825] veth1_vlan: entered promiscuous mode [ 69.677634][ T5818] veth0_macvtap: entered promiscuous mode [ 69.704942][ T5818] veth1_macvtap: entered promiscuous mode [ 69.725428][ T5819] veth0_macvtap: entered promiscuous mode [ 69.744351][ T5819] veth1_macvtap: entered promiscuous mode [ 69.757717][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.771302][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.783697][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.793874][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.803800][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.813056][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.839070][ T5826] veth0_macvtap: entered promiscuous mode [ 69.851473][ T5826] veth1_macvtap: entered promiscuous mode [ 69.888657][ T5825] veth0_macvtap: entered promiscuous mode [ 69.906173][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.922137][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.933244][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.943902][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.956878][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.968566][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.978894][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.991292][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.002631][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.010456][ T5825] veth1_macvtap: entered promiscuous mode [ 70.046490][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.061585][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.072676][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.082352][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.093814][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.104795][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.115407][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.126275][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.152355][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.161493][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.170597][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.180128][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.211131][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.220504][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.230059][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.238786][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.262776][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.273986][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.284231][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.294753][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.305001][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.315668][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.326723][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.342903][ T5828] veth0_vlan: entered promiscuous mode [ 70.356707][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.369077][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.377291][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.388218][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.398261][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.408818][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.418800][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.429821][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.440834][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.453233][ T5828] veth1_vlan: entered promiscuous mode [ 70.496075][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.505636][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.514681][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.525146][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578121][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.592368][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.615430][ T5828] veth0_macvtap: entered promiscuous mode [ 70.648772][ T724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.667629][ T724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.670611][ T5828] veth1_macvtap: entered promiscuous mode [ 70.682481][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.764729][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.799394][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.810549][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.829782][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.840023][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.851172][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.861136][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.871972][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.889263][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.012112][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.151582][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.210154][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.245373][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.256465][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.270489][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.281474][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.295408][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.319417][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.332436][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.357076][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.380523][ T5829] Bluetooth: hci3: command tx timeout [ 71.386225][ T5829] Bluetooth: hci1: command tx timeout [ 71.393183][ T5829] Bluetooth: hci0: command tx timeout [ 71.459392][ T5835] Bluetooth: hci4: command tx timeout [ 71.470904][ T5835] Bluetooth: hci2: command tx timeout [ 71.485658][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.485892][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.504547][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.504722][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524342][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.533267][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.593681][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.612822][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.673623][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.681662][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.744593][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.782108][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.796962][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.803639][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.903458][ T724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.918951][ T724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.857930][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.876332][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.939444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.949535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.470638][ T5829] Bluetooth: hci1: command tx timeout [ 73.476243][ T5835] Bluetooth: hci0: command tx timeout [ 73.481894][ T5829] Bluetooth: hci3: command tx timeout [ 73.550195][ T5829] Bluetooth: hci4: command tx timeout [ 73.556710][ T5822] Bluetooth: hci2: command tx timeout [ 74.919972][ T5159] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.033581][ T5946] random: crng reseeded on system resumption [ 75.340874][ T5159] usb 5-1: Using ep0 maxpacket: 16 [ 75.352888][ T5951] netlink: 288 bytes leftover after parsing attributes in process `syz.1.12'. [ 75.353806][ T5159] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.380693][ T5159] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.396102][ T5159] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.404657][ T5159] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 75.424764][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.443485][ T5159] usb 5-1: config 0 descriptor?? [ 75.638435][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.733191][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.745875][ T5954] capability: warning: `syz.1.12' uses 32-bit capabilities (legacy support in use) [ 75.760592][ T5954] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 75.798766][ T29] audit: type=1800 audit(1737620762.417:2): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.12" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 76.089443][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 76.259644][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 76.305883][ T5872] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 76.349162][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 76.397862][ T5872] usb 4-1: Product: syz [ 76.416049][ T5159] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 76.419181][ T5872] usb 4-1: Manufacturer: syz [ 76.440638][ T5159] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 76.448544][ T5159] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 76.456698][ T5159] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 76.469831][ T5872] usb 4-1: SerialNumber: syz [ 76.469962][ T5159] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 76.501092][ T5872] usb 4-1: config 0 descriptor?? [ 76.518527][ T5159] hid-corsair-void 0003:1B1C:1B25.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.4-1/input0 [ 76.531404][ T5950] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.733401][ T5904] hid-corsair-void 0003:1B1C:1B25.0001: failed to request battery (reason: -71) [ 76.773184][ T5159] usb 5-1: USB disconnect, device number 2 [ 77.747304][ T5872] usb 4-1: USB disconnect, device number 2 [ 81.020317][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.135721][ T5992] Bluetooth: MGMT ver 1.23 [ 81.240091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.249006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 81.258618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.431777][ T6001] Zero length message leads to an empty skb [ 82.164121][ T46] cfg80211: failed to load regulatory.db [ 83.219659][ T5822] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 83.268798][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 85.509480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.529514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.179433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.187118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.541114][ T6049] autofs: Unknown parameter '0x0000000000000000' [ 87.596169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.189778][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 93.211971][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.033691][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 94.153662][ T9] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 94.177717][ T9] usb 1-1: config 0 has no interface number 0 [ 94.200678][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.259489][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 94.404145][ T9] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 94.570064][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 94.596969][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 94.598726][ T6134] ipt_ECN: cannot use operation on non-tcp rule [ 94.860202][ T9] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.878664][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 94.893450][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.906918][ T9] usb 1-1: Product: syz [ 94.915535][ T9] usb 1-1: Manufacturer: syz [ 94.925559][ T9] usb 1-1: SerialNumber: syz [ 94.943511][ T9] usb 1-1: config 0 descriptor?? [ 94.962745][ T6114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.501082][ T6114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.818434][ T9] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 95.991330][ T6156] autofs: Unknown parameter '0x0000000000000000' [ 96.706479][ T9] etas_es58x 1-1:0.219: could not parse product info: '424242424242' [ 97.664388][ T9] usb 1-1: USB disconnect, device number 2 [ 97.806421][ T9] etas_es58x 1-1:0.219: Disconnecting syz syz [ 99.062677][ T6179] netlink: 288 bytes leftover after parsing attributes in process `syz.3.77'. [ 99.699556][ T29] audit: type=1800 audit(1737620786.387:3): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.77" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 99.822216][ T6185] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 100.597492][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.79'. [ 100.833036][ T6200] random: crng reseeded on system resumption [ 103.194580][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.379773][ T6234] syz.1.91 uses obsolete (PF_INET,SOCK_PACKET) [ 104.883867][ T6247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.92'. [ 106.089849][ T6256] netlink: 288 bytes leftover after parsing attributes in process `syz.0.96'. [ 106.443570][ T29] audit: type=1800 audit(1737620793.127:4): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.96" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 106.570761][ T6260] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 106.670255][ T6265] random: crng reseeded on system resumption [ 108.036961][ T5829] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 108.043430][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 108.869498][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.048051][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 109.122324][ T5904] usb 3-1: config 0 has an invalid interface number: 199 but max is 0 [ 109.265771][ T5904] usb 3-1: config 0 has no interface number 0 [ 109.499856][ T5904] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=15.3d [ 109.529382][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.587094][ T5904] usb 3-1: Product: syz [ 109.625723][ T5904] usb 3-1: Manufacturer: syz [ 109.652008][ T5904] usb 3-1: SerialNumber: syz [ 109.883324][ T5904] usb 3-1: config 0 descriptor?? [ 110.034351][ T5904] usbhid 3-1:0.199: couldn't find an input interrupt endpoint [ 110.318278][ T5904] usb 3-1: USB disconnect, device number 2 [ 112.499275][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 112.505636][ T5829] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 114.234780][ T6332] netlink: 44 bytes leftover after parsing attributes in process `syz.4.109'. [ 115.017948][ T6346] netlink: 288 bytes leftover after parsing attributes in process `syz.0.121'. [ 115.355315][ T29] audit: type=1800 audit(1737620802.047:5): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.121" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 115.397792][ T6351] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 116.131417][ T6349] sctp: failed to load transform for md5: -2 [ 121.150684][ T6409] random: crng reseeded on system resumption [ 122.065209][ T6424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.136'. [ 124.030013][ T6443] netlink: 288 bytes leftover after parsing attributes in process `syz.1.141'. [ 124.290820][ T29] audit: type=1800 audit(1737620810.977:6): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.141" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 124.312547][ T6443] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 126.591176][ T29] audit: type=1326 audit(1737620813.247:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00edb8cd29 code=0x7ffc0000 [ 127.410934][ T29] audit: type=1326 audit(1737620813.247:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00edb8cd29 code=0x7ffc0000 [ 127.433202][ T29] audit: type=1326 audit(1737620813.367:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f00edb8cd29 code=0x7ffc0000 [ 127.454458][ T29] audit: type=1326 audit(1737620813.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00edb8cd29 code=0x7ffc0000 [ 127.561548][ T29] audit: type=1326 audit(1737620813.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6463 comm="syz.3.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00edb8cd29 code=0x7ffc0000 [ 128.113800][ T6481] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 128.362268][ T29] audit: type=1800 audit(1737620814.787:12): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.152" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 128.428183][ T6480] netlink: 288 bytes leftover after parsing attributes in process `syz.3.152'. [ 129.058427][ T6500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.154'. [ 131.613390][ T6517] random: crng reseeded on system resumption [ 132.575902][ T6532] ======================================================= [ 132.575902][ T6532] WARNING: The mand mount option has been deprecated and [ 132.575902][ T6532] and is ignored by this kernel. Remove the mand [ 132.575902][ T6532] option from the mount to silence this warning. [ 132.575902][ T6532] ======================================================= [ 132.730521][ T6532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.230416][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.236769][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.024516][ T6539] netlink: 288 bytes leftover after parsing attributes in process `syz.1.165'. [ 134.537745][ T29] audit: type=1800 audit(1737620821.217:13): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.165" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 134.559291][ T6539] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 135.161575][ T6549] netlink: 100 bytes leftover after parsing attributes in process `syz.1.168'. [ 143.820602][ T6614] hub 2-0:1.0: USB hub found [ 143.827357][ T6614] hub 2-0:1.0: 1 port detected [ 155.362198][ T6693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.206'. [ 157.104035][ T6706] netlink: 100 bytes leftover after parsing attributes in process `syz.1.211'. [ 157.109529][ T6707] ipt_ECN: cannot use operation on non-tcp rule [ 158.510333][ T5829] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 158.511562][ T29] audit: type=1326 audit(1737620845.207:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6218cd29 code=0x0 [ 158.520232][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/u9:3 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 158.520253][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.520264][ T5829] Workqueue: hci0 hci_rx_work [ 158.520306][ T5829] Call Trace: [ 158.520313][ T5829] [ 158.520320][ T5829] dump_stack_lvl+0x241/0x360 [ 158.520372][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.520397][ T5829] ? __pfx__printk+0x10/0x10 [ 158.520423][ T5829] ? __kmalloc_cache_noprof+0x243/0x390 [ 158.520443][ T5829] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 158.520469][ T5829] sysfs_create_dir_ns+0x2ce/0x3a0 [ 158.520495][ T5829] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 158.520526][ T5829] kobject_add_internal+0x435/0x8d0 [ 158.520553][ T5829] kobject_add+0x152/0x220 [ 158.520571][ T5829] ? do_raw_spin_unlock+0x13c/0x8b0 [ 158.520588][ T5829] ? device_add+0x3e7/0xbf0 [ 158.520612][ T5829] ? __pfx_kobject_add+0x10/0x10 [ 158.520631][ T5829] ? _raw_spin_unlock+0x28/0x50 [ 158.520657][ T5829] ? get_device_parent+0x165/0x410 [ 158.520682][ T5829] device_add+0x4e5/0xbf0 [ 158.520710][ T5829] hci_conn_add_sysfs+0xe8/0x200 [ 158.520733][ T5829] le_conn_complete_evt+0xc9f/0x12e0 [ 158.520770][ T5829] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 158.520798][ T5829] ? __mutex_unlock_slowpath+0x227/0x800 [ 158.520825][ T5829] ? skb_pull_data+0x112/0x230 [ 158.520856][ T5829] hci_le_conn_complete_evt+0x18c/0x420 [ 158.520887][ T5829] hci_event_packet+0xa55/0x1540 [ 158.520912][ T5829] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 158.520940][ T5829] ? __pfx_hci_event_packet+0x10/0x10 [ 158.520959][ T5829] ? do_raw_spin_unlock+0x13c/0x8b0 [ 158.520982][ T5829] ? hci_send_to_monitor+0xd8/0x7f0 [ 158.521007][ T5829] ? kcov_remote_start+0x97/0x7d0 [ 158.521029][ T5829] hci_rx_work+0x3f3/0xdb0 [ 158.521057][ T5829] ? process_scheduled_works+0x976/0x1840 [ 158.521075][ T5829] process_scheduled_works+0xa66/0x1840 [ 158.521118][ T5829] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.521144][ T5829] ? assign_work+0x364/0x3d0 [ 158.521165][ T5829] worker_thread+0x870/0xd30 [ 158.521198][ T5829] ? __kthread_parkme+0x169/0x1d0 [ 158.521219][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 158.521236][ T5829] kthread+0x7a9/0x920 [ 158.521254][ T5829] ? __pfx_kthread+0x10/0x10 [ 158.521275][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 158.521293][ T5829] ? __pfx_kthread+0x10/0x10 [ 158.521310][ T5829] ? __pfx_kthread+0x10/0x10 [ 158.521333][ T5829] ? __pfx_kthread+0x10/0x10 [ 158.521350][ T5829] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.521372][ T5829] ? lockdep_hardirqs_on+0x99/0x150 [ 158.521387][ T5829] ? __pfx_kthread+0x10/0x10 [ 158.521408][ T5829] ret_from_fork+0x4b/0x80 [ 158.521423][ T5829] ? __pfx_kthread+0x10/0x10 [ 158.521442][ T5829] ret_from_fork_asm+0x1a/0x30 [ 158.521480][ T5829] [ 158.521508][ T5829] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 158.829798][ T5829] Bluetooth: hci0: failed to register connection device [ 162.755097][ T973] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 163.006872][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 163.046459][ T973] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.067596][ T973] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.078162][ T973] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.088074][ T973] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 163.097494][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.120278][ T973] usb 2-1: config 0 descriptor?? [ 163.380369][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.434608][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.131202][ T973] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x0 [ 164.196169][ T973] hid-corsair-void 0003:1B1C:1B25.0002: unknown main item tag 0x1 [ 165.044246][ T973] hid-corsair-void 0003:1B1C:1B25.0002: item fetching failed at offset 4/5 [ 165.069782][ T973] hid-corsair-void 0003:1B1C:1B25.0002: parse failed (reason: -22) [ 165.077815][ T973] hid-corsair-void 0003:1B1C:1B25.0002: probe with driver hid-corsair-void failed with error -22 [ 165.874845][ T6817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.922953][ T973] usb 2-1: USB disconnect, device number 2 [ 165.942490][ T6817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 166.014824][ T6817] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 168.085867][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.103385][ T6817] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.920660][ T6817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.272752][ T6817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.304081][ T6817] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 169.341278][ T6817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.351557][ T6817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.845162][ T6817] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 169.894405][ T6817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.060474][ T6817] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.080411][ T6817] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 170.099297][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.839416][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 171.227582][ T6817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.264501][ T6817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.637919][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.660482][ T6817] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 172.230220][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.236288][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.987309][ T5829] Bluetooth: hci0: command 0x0401 tx timeout [ 173.115376][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.241'. [ 173.695275][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.857654][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.866193][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.059900][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 175.779204][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.163400][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.169401][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.169569][ T5822] Bluetooth: hci0: command 0x0401 tx timeout [ 177.859330][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.369404][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 185.284238][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 188.509319][ T973] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 189.000267][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 189.192896][ T973] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.323420][ T973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.394499][ T973] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.509490][ T973] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.612001][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.149368][ T973] usb 1-1: Product: syz [ 190.185269][ T973] usb 1-1: Manufacturer: syz [ 190.203355][ T973] usb 1-1: SerialNumber: syz [ 192.020582][ T973] usb 1-1: 0:2 : does not exist [ 192.060939][ T973] usb 1-1: USB disconnect, device number 3 [ 192.130502][ T7057] netlink: 288 bytes leftover after parsing attributes in process `syz.3.278'. [ 192.308896][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.336987][ T7059] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 192.353748][ T29] audit: type=1800 audit(1737620879.017:15): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.278" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 194.390068][ T7095] netlink: 156 bytes leftover after parsing attributes in process `syz.0.290'. [ 194.666843][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.694112][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.309444][ T5904] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 195.479249][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 195.489866][ T5904] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 195.507769][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 195.539791][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 195.679308][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.710084][ T7113] netlink: 288 bytes leftover after parsing attributes in process `syz.0.296'. [ 195.936745][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.946493][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.970223][ T5904] usbtmc 2-1:16.0: bulk endpoints not found [ 196.092287][ T7117] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 197.343440][ T7123] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 199.218449][ T25] usb 2-1: USB disconnect, device number 3 [ 201.308524][ T7164] random: crng reseeded on system resumption [ 203.939273][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 204.219421][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 204.240154][ T5872] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 204.274730][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 204.289316][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 204.327820][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.353822][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.363399][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.400625][ T5872] usbtmc 2-1:16.0: bulk endpoints not found [ 205.082913][ T7197] netlink: 316 bytes leftover after parsing attributes in process `syz.3.318'. [ 206.809669][ T5874] usb 2-1: USB disconnect, device number 4 [ 207.426210][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 208.187227][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 208.216401][ T46] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.252411][ T46] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.276543][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.285649][ T46] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 208.422828][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.830371][ T46] usb 3-1: config 0 descriptor?? [ 209.317454][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.109593][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.393365][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 210.416014][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.447734][ T46] usb 3-1: USB disconnect, device number 3 [ 210.602756][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 210.759336][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 210.766070][ T25] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 210.776629][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.788838][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.799410][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 210.812916][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.822191][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.835804][ T25] usbtmc 2-1:16.0: bulk endpoints not found [ 212.058858][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 213.512358][ T973] usb 2-1: USB disconnect, device number 5 [ 220.091500][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 220.723832][ T5872] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 220.899716][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 220.919266][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.956655][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.109358][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.466112][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.479757][ T5872] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.500409][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.517110][ T5872] usbtmc 1-1:16.0: bulk endpoints not found [ 221.955826][ T7354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.358'. [ 223.163964][ T973] usb 1-1: USB disconnect, device number 4 [ 229.361464][ T7464] random: crng reseeded on system resumption [ 229.732114][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.939450][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 229.955516][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 229.980942][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 230.219212][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.509998][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.621604][ T5872] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.862952][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.938217][ T5872] usbtmc 1-1:16.0: bulk endpoints not found [ 230.981006][ T7480] netlink: 288 bytes leftover after parsing attributes in process `syz.3.377'. [ 231.403005][ T7487] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 233.853783][ T5876] usb 1-1: USB disconnect, device number 5 [ 235.764626][ T7534] random: crng reseeded on system resumption [ 236.404212][ T7537] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 236.648077][ T7541] netlink: 288 bytes leftover after parsing attributes in process `syz.1.391'. [ 237.013355][ T7545] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 238.303463][ T7553] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 238.311579][ T7553] netlink: 224 bytes leftover after parsing attributes in process `syz.0.395'. [ 239.193550][ T5159] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.419249][ T5159] usb 2-1: Using ep0 maxpacket: 8 [ 239.436532][ T5159] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 239.509244][ T5159] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 239.549352][ T5159] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.581190][ T5159] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.810267][ T5159] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.819869][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.832537][ T5159] usbtmc 2-1:16.0: bulk endpoints not found [ 242.285951][ T973] usb 2-1: USB disconnect, device number 6 [ 244.453865][ T7637] random: crng reseeded on system resumption [ 245.066585][ T7644] netlink: 156 bytes leftover after parsing attributes in process `syz.0.405'. [ 249.561163][ T7685] netlink: 84 bytes leftover after parsing attributes in process `syz.4.420'. [ 250.160995][ T7690] random: crng reseeded on system resumption [ 254.523843][ T7725] syz.1.430 (7725): drop_caches: 2 [ 255.099950][ T7745] random: crng reseeded on system resumption [ 256.123992][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.549237][ T5874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 264.889529][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 264.903415][ T5874] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.917453][ T5874] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.933756][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.978164][ T5874] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 265.040530][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.663957][ T5874] usb 4-1: config 0 descriptor?? [ 265.930693][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.975658][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.211194][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 266.229632][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 267.027607][ T5874] usb 4-1: USB disconnect, device number 3 [ 271.518994][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 271.528316][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 272.225702][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 272.656199][ T46] usb 4-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 272.689049][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.806604][ T46] usb 4-1: Product: syz [ 272.860272][ T46] usb 4-1: Manufacturer: syz [ 272.879484][ T46] usb 4-1: SerialNumber: syz [ 272.939325][ T46] usb 4-1: config 0 descriptor?? [ 273.034479][ T46] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 273.803750][ T5159] usb 4-1: USB disconnect, device number 4 [ 274.909263][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 275.137783][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 275.297961][ T5874] usb 4-1: config 0 has no interfaces? [ 275.312827][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 275.324838][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.491586][ T7934] Device name cannot be null; rc = [-22] [ 276.064937][ T5874] usb 4-1: Product: syz [ 276.069254][ T5874] usb 4-1: Manufacturer: syz [ 276.073904][ T5874] usb 4-1: SerialNumber: syz [ 276.160064][ T5874] usb 4-1: config 0 descriptor?? [ 276.480799][ T5874] usb 4-1: USB disconnect, device number 5 [ 279.817471][ T7974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.502'. [ 281.648975][ T7992] capability: warning: `syz.0.507' uses deprecated v2 capabilities in a way that may be insecure [ 283.617733][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.512'. [ 285.910077][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 286.080451][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 286.099789][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 286.124023][ T5874] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 286.153470][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.172765][ T5874] usb 4-1: Product: syz [ 286.186046][ T5874] usb 4-1: Manufacturer: syz [ 286.199161][ T5874] usb 4-1: SerialNumber: syz [ 286.212051][ T5874] usb 4-1: config 0 descriptor?? [ 286.688960][ T5874] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 286.862049][ T5874] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 286.880290][ T5874] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 286.924153][ T5874] usb 4-1: USB disconnect, device number 6 [ 287.472171][ T5822] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 289.490181][ T8063] random: crng reseeded on system resumption [ 289.943658][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.239290][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 290.267742][ T5876] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 291.009169][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 291.074093][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 291.125079][ T5876] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.179734][ T8085] warning: `syz.3.532' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 291.200205][ T5876] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.245188][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.496523][ T5876] usb 2-1: usb_control_msg returned -32 [ 291.506651][ T5876] usbtmc 2-1:16.0: can't read capabilities [ 291.578897][ T8090] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 291.578897][ T8090] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 292.351347][ T5876] usb 2-1: USB disconnect, device number 7 [ 292.816880][ T8097] ip6tnl1: entered promiscuous mode [ 292.822385][ T8097] ip6tnl1: entered allmulticast mode [ 295.328421][ T8124] random: crng reseeded on system resumption [ 298.557863][ T8154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.542'. [ 299.994538][ T8179] ip6tnl1: entered promiscuous mode [ 299.999917][ T8179] ip6tnl1: entered allmulticast mode [ 300.928639][ T8186] random: crng reseeded on system resumption [ 302.095619][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 302.619831][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 302.645851][ T5876] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 302.688664][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 302.770685][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.782076][ T5876] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.784219][ T5876] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.794141][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.438350][ T5876] usb 2-1: usb_control_msg returned -71 [ 304.475923][ T5876] usbtmc 2-1:16.0: can't read capabilities [ 304.545476][ T5876] usb 2-1: USB disconnect, device number 8 [ 307.924730][ T8247] random: crng reseeded on system resumption [ 308.319313][ T8248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.566'. [ 311.869223][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 313.840396][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 313.887725][ T5904] usb 3-1: device descriptor read/all, error -71 [ 314.490038][ T8283] netlink: 288 bytes leftover after parsing attributes in process `syz.3.579'. [ 316.905930][ T8301] random: crng reseeded on system resumption [ 317.545705][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.180807][ T5876] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 321.459208][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 321.465999][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 321.499297][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 321.510638][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.521157][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.534521][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 321.552175][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.772734][ T5876] usb 1-1: usb_control_msg returned -32 [ 321.794734][ T5876] usbtmc 1-1:16.0: can't read capabilities [ 321.811849][ T8339] netlink: 288 bytes leftover after parsing attributes in process `syz.4.593'. [ 321.847812][ T5876] usb 1-1: USB disconnect, device number 6 [ 322.719325][ T29] audit: type=1800 audit(1737621009.387:16): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.593" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 327.034661][ T8429] netlink: 288 bytes leftover after parsing attributes in process `syz.3.607'. [ 330.287428][ T5872] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 330.439683][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 330.584021][ T5872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 330.609583][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 330.620428][ T5872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.631111][ T973] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 330.638761][ T5872] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.656244][ T5872] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.665438][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.799451][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 330.812645][ T973] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.831029][ T973] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.846870][ T973] usb 2-1: config 0 interface 0 has no altsetting 0 [ 330.857322][ T973] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 330.874611][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.894090][ T5872] usb 1-1: usb_control_msg returned -32 [ 330.914533][ T5872] usbtmc 1-1:16.0: can't read capabilities [ 330.931888][ T973] usb 2-1: config 0 descriptor?? [ 330.962251][ T5872] usb 1-1: USB disconnect, device number 7 [ 331.398697][ T973] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 331.447873][ T973] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 331.543462][ T973] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 331.858267][ T973] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 331.878850][ T973] hid-corsair-void 0003:1B1C:1B25.0003: unknown main item tag 0x0 [ 331.908985][ T973] hid-corsair-void 0003:1B1C:1B25.0003: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.1-1/input0 [ 332.084593][ T973] usb 2-1: USB disconnect, device number 9 [ 332.146913][ T8477] netlink: 288 bytes leftover after parsing attributes in process `syz.3.623'. [ 333.122575][ T973] ------------[ cut here ]------------ [ 333.128150][ T973] ODEBUG: free active (active state 0) object: ffff88805efbb960 object type: work_struct hint: corsair_void_status_work_handler+0x0/0x190 [ 333.159206][ T5872] hid-corsair-void 0003:1B1C:1B25.0003: failed to request battery (reason: -19) [ 333.788878][ T973] WARNING: CPU: 0 PID: 973 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 [ 333.799337][ T973] Modules linked in: [ 333.803960][ T973] CPU: 0 UID: 0 PID: 973 Comm: kworker/0:2 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 333.814891][ T973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 333.825343][ T973] Workqueue: usb_hub_wq hub_event [ 333.830704][ T973] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 333.836565][ T973] Code: e8 db 5c 3d fd 4c 8b 0b 48 c7 c7 80 4b 5f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 5b 15 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 58 4e 54 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 333.856760][ T973] RSP: 0018:ffffc90003a8eeb8 EFLAGS: 00010286 [ 333.866524][ T973] RAX: fe093ceb62fda200 RBX: ffffffff8c09bf20 RCX: 0000000000100000 [ 333.875402][ T973] RDX: ffffc9001a3d0000 RSI: 000000000000b78a RDI: 000000000000b78b [ 333.884154][ T973] RBP: ffffffff8c5f4d00 R08: ffffffff81603052 R09: fffffbfff1cfa638 [ 333.892333][ T973] R10: dffffc0000000000 R11: fffffbfff1cfa638 R12: 0000000000000000 [ 333.900427][ T973] R13: ffffffff8c5f4c18 R14: dffffc0000000000 R15: ffff88805efbb960 [ 333.908436][ T973] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 333.917499][ T973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.924180][ T973] CR2: 00007fbf368d56c0 CR3: 000000000e738000 CR4: 00000000003526f0 [ 333.932239][ T973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.940373][ T973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.948392][ T973] Call Trace: [ 333.951816][ T973] [ 333.954786][ T973] ? __warn+0x165/0x4d0 [ 333.958984][ T973] ? debug_print_object+0x17a/0x1f0 [ 333.964306][ T973] ? report_bug+0x2b3/0x500 [ 333.968854][ T973] ? debug_print_object+0x17a/0x1f0 [ 333.974716][ T973] ? handle_bug+0x60/0x90 [ 333.979083][ T973] ? exc_invalid_op+0x1a/0x50 [ 333.984403][ T973] ? asm_exc_invalid_op+0x1a/0x20 [ 333.989531][ T973] ? __warn_printk+0x292/0x360 [ 333.994339][ T973] ? debug_print_object+0x17a/0x1f0 [ 333.999693][ T973] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 334.006503][ T973] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 334.013394][ T973] debug_check_no_obj_freed+0x45b/0x580 [ 334.018999][ T973] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 334.025319][ T973] ? kasan_quarantine_put+0xdc/0x230 [ 334.030759][ T973] ? devres_release_group+0x328/0x350 [ 334.036169][ T973] ? devres_release_group+0x328/0x350 [ 334.041666][ T973] kfree+0x115/0x430 [ 334.045623][ T973] devres_release_group+0x328/0x350 [ 334.050911][ T973] ? __pfx_devres_release_group+0x10/0x10 [ 334.056678][ T973] ? __pfx_corsair_void_remove+0x10/0x10 [ 334.062432][ T973] ? kernfs_put+0x315/0x370 [ 334.066975][ T973] ? sysfs_remove_group+0x242/0x2c0 [ 334.072288][ T973] ? __pfx_corsair_void_remove+0x10/0x10 [ 334.078559][ T973] hid_device_remove+0x250/0x370 [ 334.084223][ T973] ? __pfx_hid_device_remove+0x10/0x10 [ 334.089955][ T973] device_release_driver_internal+0x4a9/0x7c0 [ 334.096082][ T973] bus_remove_device+0x34f/0x420 [ 334.101205][ T973] device_del+0x57a/0x9b0 [ 334.105588][ T973] ? __pfx_device_del+0x10/0x10 [ 334.110549][ T973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.116928][ T973] hid_destroy_device+0x6a/0x1b0 [ 334.122063][ T973] usbhid_disconnect+0x9e/0xc0 [ 334.126861][ T973] usb_unbind_interface+0x25b/0x940 [ 334.132202][ T973] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 334.137957][ T973] ? __pfx_usb_unbind_interface+0x10/0x10 [ 334.143810][ T973] device_release_driver_internal+0x503/0x7c0 [ 334.150104][ T973] bus_remove_device+0x34f/0x420 [ 334.155084][ T973] device_del+0x57a/0x9b0 [ 334.159500][ T973] ? kobject_put+0x272/0x480 [ 334.164127][ T973] ? __pfx_device_del+0x10/0x10 [ 334.169012][ T973] ? kobject_put+0x44d/0x480 [ 334.173697][ T973] usb_disable_device+0x3bf/0x850 [ 334.179427][ T973] usb_disconnect+0x340/0x950 [ 334.184166][ T973] hub_event+0x1ebc/0x5150 [ 334.188633][ T973] ? debug_object_deactivate+0x2d5/0x390 [ 334.194997][ T973] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.200350][ T973] ? __pfx_hub_event+0x10/0x10 [ 334.205163][ T973] ? __pfx_lock_acquire+0x10/0x10 [ 334.210314][ T973] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.216318][ T973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.222730][ T973] ? process_scheduled_works+0x976/0x1840 [ 334.228491][ T973] process_scheduled_works+0xa66/0x1840 [ 334.234171][ T973] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.240306][ T973] ? assign_work+0x364/0x3d0 [ 334.244956][ T973] worker_thread+0x870/0xd30 [ 334.249757][ T973] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 334.255702][ T973] ? __kthread_parkme+0x169/0x1d0 [ 334.260900][ T973] ? __pfx_worker_thread+0x10/0x10 [ 334.266051][ T973] kthread+0x7a9/0x920 [ 334.270212][ T973] ? __pfx_kthread+0x10/0x10 [ 334.274847][ T973] ? __pfx_worker_thread+0x10/0x10 [ 334.280719][ T973] ? __pfx_kthread+0x10/0x10 [ 334.285362][ T973] ? __pfx_kthread+0x10/0x10 [ 334.290671][ T973] ? __pfx_kthread+0x10/0x10 [ 334.295315][ T973] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.300647][ T973] ? lockdep_hardirqs_on+0x99/0x150 [ 334.305898][ T973] ? __pfx_kthread+0x10/0x10 [ 334.310614][ T973] ret_from_fork+0x4b/0x80 [ 334.315070][ T973] ? __pfx_kthread+0x10/0x10 [ 334.319744][ T973] ret_from_fork_asm+0x1a/0x30 [ 334.324574][ T973] [ 334.327647][ T973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 334.334958][ T973] CPU: 0 UID: 0 PID: 973 Comm: kworker/0:2 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 334.345330][ T973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 334.355404][ T973] Workqueue: usb_hub_wq hub_event [ 334.360479][ T973] Call Trace: [ 334.363784][ T973] [ 334.366738][ T973] dump_stack_lvl+0x241/0x360 [ 334.371454][ T973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.376687][ T973] ? __pfx__printk+0x10/0x10 [ 334.381323][ T973] ? vscnprintf+0x5d/0x90 [ 334.385689][ T973] panic+0x349/0x880 [ 334.389617][ T973] ? __warn+0x174/0x4d0 [ 334.393802][ T973] ? __pfx_panic+0x10/0x10 [ 334.398258][ T973] ? ret_from_fork_asm+0x1a/0x30 [ 334.403238][ T973] __warn+0x344/0x4d0 [ 334.407248][ T973] ? debug_print_object+0x17a/0x1f0 [ 334.412485][ T973] report_bug+0x2b3/0x500 [ 334.416846][ T973] ? debug_print_object+0x17a/0x1f0 [ 334.422082][ T973] handle_bug+0x60/0x90 [ 334.426275][ T973] exc_invalid_op+0x1a/0x50 [ 334.430808][ T973] asm_exc_invalid_op+0x1a/0x20 [ 334.435691][ T973] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 334.441529][ T973] Code: e8 db 5c 3d fd 4c 8b 0b 48 c7 c7 80 4b 5f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 5b 15 9a fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 58 4e 54 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 334.461159][ T973] RSP: 0018:ffffc90003a8eeb8 EFLAGS: 00010286 [ 334.467252][ T973] RAX: fe093ceb62fda200 RBX: ffffffff8c09bf20 RCX: 0000000000100000 [ 334.475239][ T973] RDX: ffffc9001a3d0000 RSI: 000000000000b78a RDI: 000000000000b78b [ 334.483238][ T973] RBP: ffffffff8c5f4d00 R08: ffffffff81603052 R09: fffffbfff1cfa638 [ 334.491234][ T973] R10: dffffc0000000000 R11: fffffbfff1cfa638 R12: 0000000000000000 [ 334.499224][ T973] R13: ffffffff8c5f4c18 R14: dffffc0000000000 R15: ffff88805efbb960 [ 334.507230][ T973] ? __warn_printk+0x292/0x360 [ 334.512029][ T973] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 334.518814][ T973] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 334.525613][ T973] debug_check_no_obj_freed+0x45b/0x580 [ 334.531200][ T973] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 334.537311][ T973] ? kasan_quarantine_put+0xdc/0x230 [ 334.542611][ T973] ? devres_release_group+0x328/0x350 [ 334.547987][ T973] ? devres_release_group+0x328/0x350 [ 334.553361][ T973] kfree+0x115/0x430 [ 334.557261][ T973] devres_release_group+0x328/0x350 [ 334.562467][ T973] ? __pfx_devres_release_group+0x10/0x10 [ 334.568190][ T973] ? __pfx_corsair_void_remove+0x10/0x10 [ 334.573823][ T973] ? kernfs_put+0x315/0x370 [ 334.578336][ T973] ? sysfs_remove_group+0x242/0x2c0 [ 334.583545][ T973] ? __pfx_corsair_void_remove+0x10/0x10 [ 334.589189][ T973] hid_device_remove+0x250/0x370 [ 334.594147][ T973] ? __pfx_hid_device_remove+0x10/0x10 [ 334.599612][ T973] device_release_driver_internal+0x4a9/0x7c0 [ 334.605723][ T973] bus_remove_device+0x34f/0x420 [ 334.610665][ T973] device_del+0x57a/0x9b0 [ 334.615007][ T973] ? __pfx_device_del+0x10/0x10 [ 334.619868][ T973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.626203][ T973] hid_destroy_device+0x6a/0x1b0 [ 334.631154][ T973] usbhid_disconnect+0x9e/0xc0 [ 334.635921][ T973] usb_unbind_interface+0x25b/0x940 [ 334.641133][ T973] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 334.646863][ T973] ? __pfx_usb_unbind_interface+0x10/0x10 [ 334.652586][ T973] device_release_driver_internal+0x503/0x7c0 [ 334.658674][ T973] bus_remove_device+0x34f/0x420 [ 334.663625][ T973] device_del+0x57a/0x9b0 [ 334.667964][ T973] ? kobject_put+0x272/0x480 [ 334.672558][ T973] ? __pfx_device_del+0x10/0x10 [ 334.677417][ T973] ? kobject_put+0x44d/0x480 [ 334.682021][ T973] usb_disable_device+0x3bf/0x850 [ 334.687063][ T973] usb_disconnect+0x340/0x950 [ 334.691774][ T973] hub_event+0x1ebc/0x5150 [ 334.696213][ T973] ? debug_object_deactivate+0x2d5/0x390 [ 334.701873][ T973] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.707179][ T973] ? __pfx_hub_event+0x10/0x10 [ 334.711953][ T973] ? __pfx_lock_acquire+0x10/0x10 [ 334.716986][ T973] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.722974][ T973] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.729316][ T973] ? process_scheduled_works+0x976/0x1840 [ 334.735041][ T973] process_scheduled_works+0xa66/0x1840 [ 334.740613][ T973] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.746604][ T973] ? assign_work+0x364/0x3d0 [ 334.751200][ T973] worker_thread+0x870/0xd30 [ 334.755804][ T973] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 334.761718][ T973] ? __kthread_parkme+0x169/0x1d0 [ 334.766751][ T973] ? __pfx_worker_thread+0x10/0x10 [ 334.771869][ T973] kthread+0x7a9/0x920 [ 334.775945][ T973] ? __pfx_kthread+0x10/0x10 [ 334.780535][ T973] ? __pfx_worker_thread+0x10/0x10 [ 334.785648][ T973] ? __pfx_kthread+0x10/0x10 [ 334.790242][ T973] ? __pfx_kthread+0x10/0x10 [ 334.794846][ T973] ? __pfx_kthread+0x10/0x10 [ 334.799440][ T973] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.804655][ T973] ? lockdep_hardirqs_on+0x99/0x150 [ 334.809858][ T973] ? __pfx_kthread+0x10/0x10 [ 334.814453][ T973] ret_from_fork+0x4b/0x80 [ 334.818874][ T973] ? __pfx_kthread+0x10/0x10 [ 334.823471][ T973] ret_from_fork_asm+0x1a/0x30 [ 334.828256][ T973] [ 334.831554][ T973] Kernel Offset: disabled [ 334.835930][ T973] Rebooting in 86400 seconds..