last executing test programs: 5.698758886s ago: executing program 4 (id=5): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x2}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0xc}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 5.125033019s ago: executing program 4 (id=7): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x470bd2d, 0xffffdffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 4.852833195s ago: executing program 4 (id=9): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000000010d, 0x2, &(0x7f00001c9fff), 0xce) 4.698516091s ago: executing program 4 (id=12): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120500000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)={0x20, 0xb, 0xa, "d82fc306ee228b8ae644"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.795784637s ago: executing program 1 (id=13): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) 3.608048683s ago: executing program 1 (id=14): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0x8000}, {0x0, 0x2}], 0x2, 0x0) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 3.50236762s ago: executing program 3 (id=15): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha256-arm64-neon\x00'}}) 3.091703247s ago: executing program 3 (id=18): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x2, 0x1, 0x0, 0x4, 0x0, 0xc, [{0x1, 0x2, 0x7}]}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3.070625476s ago: executing program 0 (id=19): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r2, r4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x0, r4, 0x1}) 2.949737791s ago: executing program 3 (id=20): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r4], 0x44}}, 0x0) 2.874122254s ago: executing program 0 (id=22): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x9, 0x4, 0x0, 0x80000000, 0x4}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 2.735755092s ago: executing program 3 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000000100)=@hci={0x1f, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x28048801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x250, 0x280, 0x280, 0x0, 0x280, 0x360, 0x365, 0x350, 0x360, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'syzkaller1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'wlan0\x00', {0x0, 0xfffffffffffffffd, 0x30, 0x2, 0x20000000, 0x1ab618fe, 0x802, 0x0, 0x80}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffffff], 'rose0\x00', 'veth0\x00', {}, {}, 0x87, 0x0, 0x0, 0x30}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x5, 0x951, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa0800) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) 2.68791293s ago: executing program 1 (id=24): timer_create(0x3, 0x0, &(0x7f0000000100)) timer_create(0x7, 0x0, &(0x7f00000002c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) 2.679550365s ago: executing program 0 (id=25): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400", @ANYRESHEX=0x0], 0x30}}, 0x0) 2.518028042s ago: executing program 1 (id=27): migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 2.456794869s ago: executing program 0 (id=28): keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha256-arm64-neon\x00'}}) 2.276453873s ago: executing program 1 (id=30): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00004dd000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58e04"]) 2.262251108s ago: executing program 4 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x26, 0x2, 0x0, "dd3e9db9a79317cb7346eaff4dfa5b899cec82438ff87936dfd70000ecff00"}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.112186373s ago: executing program 2 (id=32): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r2, r4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x0, r4, 0x1}) 2.111729278s ago: executing program 0 (id=33): unshare(0x68040200) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="30000000130001000000000000000000080000000900000008000000ffffffff08001300", @ANYRES32=r1], 0x30}], 0x1}, 0x0) 2.014245257s ago: executing program 2 (id=34): r0 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 1.815961332s ago: executing program 2 (id=35): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x9, 0x4, 0x0, 0x80000000, 0x4}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.642216481s ago: executing program 2 (id=36): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100) 1.503389214s ago: executing program 0 (id=37): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b251b0000000000010902240001000000000904000d010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.360011922s ago: executing program 2 (id=38): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 1.228550832s ago: executing program 2 (id=39): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r0, 0x0, 0x3a) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0) 762.256171ms ago: executing program 1 (id=40): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000580)={0x0, 0x18, 0x4, "ac3614bd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 500.074074ms ago: executing program 3 (id=41): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 433.959596ms ago: executing program 3 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) syz_open_dev$media(&(0x7f0000000000), 0x2, 0x101000) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0xf0ff, 0x0) 0s ago: executing program 4 (id=43): syz_emit_vhci(0x0, 0xf) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xa6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000740)=0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) setuid(r2) r3 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x501801, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b1cc37e0"}, 0x0, 0x2, {0x0}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 71.908834][ T5820] cgroup: Unknown subsys name 'net' [ 72.034878][ T5820] cgroup: Unknown subsys name 'cpuset' [ 72.044094][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.514074][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.520699][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.389193][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.618466][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.627832][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.636415][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.645906][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.652992][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.655269][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.661173][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.668701][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.683032][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.690595][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.691065][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.701764][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.707794][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.713519][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.723652][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.729589][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.736220][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.741808][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.762339][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.762862][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.769921][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.786053][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.789189][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.800745][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.802034][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.832023][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.845022][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.861042][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.871537][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.881862][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.272126][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 76.375603][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 76.455201][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 76.465784][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 76.483102][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.490921][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.498590][ T5847] bridge_slave_0: entered allmulticast mode [ 76.506635][ T5847] bridge_slave_0: entered promiscuous mode [ 76.535362][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.542751][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.550264][ T5847] bridge_slave_1: entered allmulticast mode [ 76.557456][ T5847] bridge_slave_1: entered promiscuous mode [ 76.577535][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 76.695216][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.704728][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.712108][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.719306][ T5848] bridge_slave_0: entered allmulticast mode [ 76.727133][ T5848] bridge_slave_0: entered promiscuous mode [ 76.752785][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.769984][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.777628][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.785039][ T5848] bridge_slave_1: entered allmulticast mode [ 76.792103][ T5848] bridge_slave_1: entered promiscuous mode [ 76.813788][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.821066][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.829078][ T5849] bridge_slave_0: entered allmulticast mode [ 76.838890][ T5849] bridge_slave_0: entered promiscuous mode [ 76.875348][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.886366][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.894117][ T5849] bridge_slave_1: entered allmulticast mode [ 76.900658][ T5849] bridge_slave_1: entered promiscuous mode [ 76.925940][ T5847] team0: Port device team_slave_0 added [ 76.934803][ T5847] team0: Port device team_slave_1 added [ 76.948824][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.956290][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.963640][ T5851] bridge_slave_0: entered allmulticast mode [ 76.970241][ T5851] bridge_slave_0: entered promiscuous mode [ 76.986932][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.995399][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.002765][ T5850] bridge_slave_0: entered allmulticast mode [ 77.009401][ T5850] bridge_slave_0: entered promiscuous mode [ 77.017789][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.025248][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.032584][ T5850] bridge_slave_1: entered allmulticast mode [ 77.040223][ T5850] bridge_slave_1: entered promiscuous mode [ 77.055597][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.064932][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.072318][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.079512][ T5851] bridge_slave_1: entered allmulticast mode [ 77.086330][ T5851] bridge_slave_1: entered promiscuous mode [ 77.096023][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.123281][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.130375][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.157117][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.173126][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.193614][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.218061][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.225255][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.251244][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.285723][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.297080][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.330151][ T5848] team0: Port device team_slave_0 added [ 77.338129][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.348873][ T5848] team0: Port device team_slave_1 added [ 77.388215][ T5847] hsr_slave_0: entered promiscuous mode [ 77.396083][ T5847] hsr_slave_1: entered promiscuous mode [ 77.411098][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.431059][ T5849] team0: Port device team_slave_0 added [ 77.440078][ T5850] team0: Port device team_slave_0 added [ 77.449133][ T5850] team0: Port device team_slave_1 added [ 77.462804][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.469891][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.496157][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.520511][ T5849] team0: Port device team_slave_1 added [ 77.547508][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.554636][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.580948][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.595273][ T5851] team0: Port device team_slave_0 added [ 77.620358][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.631279][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.658204][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.679703][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.686774][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.713196][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.726016][ T5851] team0: Port device team_slave_1 added [ 77.738174][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.745415][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.771536][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.795317][ T5840] Bluetooth: hci1: command tx timeout [ 77.795322][ T5837] Bluetooth: hci0: command tx timeout [ 77.808050][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.815682][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.841872][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.877918][ T5837] Bluetooth: hci4: command tx timeout [ 77.881587][ T5840] Bluetooth: hci2: command tx timeout [ 77.921639][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.928796][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955434][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.961718][ T5840] Bluetooth: hci3: command tx timeout [ 77.970395][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.979037][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.005180][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.029394][ T5848] hsr_slave_0: entered promiscuous mode [ 78.035685][ T5848] hsr_slave_1: entered promiscuous mode [ 78.042339][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.050156][ T5848] Cannot create hsr debugfs directory [ 78.087895][ T5850] hsr_slave_0: entered promiscuous mode [ 78.094359][ T5850] hsr_slave_1: entered promiscuous mode [ 78.100321][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.108063][ T5850] Cannot create hsr debugfs directory [ 78.153364][ T5849] hsr_slave_0: entered promiscuous mode [ 78.159734][ T5849] hsr_slave_1: entered promiscuous mode [ 78.166531][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.174661][ T5849] Cannot create hsr debugfs directory [ 78.214721][ T5851] hsr_slave_0: entered promiscuous mode [ 78.220870][ T5851] hsr_slave_1: entered promiscuous mode [ 78.227347][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.235160][ T5851] Cannot create hsr debugfs directory [ 78.489540][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.522063][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.532496][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.563604][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.626011][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.644188][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.666066][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.685900][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.702216][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.732889][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.755410][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.767162][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.809097][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.818722][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.844166][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.856270][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.912893][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.935286][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.945992][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.957114][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.010061][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.068868][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.109049][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.120518][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.150597][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.157905][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.186180][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.201973][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.209063][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.224431][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.249722][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.256898][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.295005][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.302172][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.313986][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.321183][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.348487][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.363781][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.371043][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.396406][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.440339][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.447544][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.475506][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.490763][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.502220][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.516158][ T1860] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.523331][ T1860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.594434][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.615682][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.622931][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.658230][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.688563][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.695694][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.716044][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.751109][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.769975][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.825419][ T5847] veth0_vlan: entered promiscuous mode [ 79.871692][ T5840] Bluetooth: hci1: command tx timeout [ 79.872697][ T5847] veth1_vlan: entered promiscuous mode [ 79.882281][ T5840] Bluetooth: hci0: command tx timeout [ 79.925563][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.939658][ T5850] veth0_vlan: entered promiscuous mode [ 79.953074][ T5840] Bluetooth: hci2: command tx timeout [ 79.958548][ T5840] Bluetooth: hci4: command tx timeout [ 79.994362][ T5850] veth1_vlan: entered promiscuous mode [ 80.019371][ T5851] veth0_vlan: entered promiscuous mode [ 80.031310][ T5848] veth0_vlan: entered promiscuous mode [ 80.042290][ T5840] Bluetooth: hci3: command tx timeout [ 80.052069][ T5849] veth0_vlan: entered promiscuous mode [ 80.070373][ T5847] veth0_macvtap: entered promiscuous mode [ 80.086424][ T5850] veth0_macvtap: entered promiscuous mode [ 80.094428][ T5851] veth1_vlan: entered promiscuous mode [ 80.102228][ T5847] veth1_macvtap: entered promiscuous mode [ 80.116141][ T5848] veth1_vlan: entered promiscuous mode [ 80.124251][ T5850] veth1_macvtap: entered promiscuous mode [ 80.142541][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.156640][ T5849] veth1_vlan: entered promiscuous mode [ 80.186205][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.197677][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.207501][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.216309][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.226401][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.241966][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.252965][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.265461][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.290886][ T5849] veth0_macvtap: entered promiscuous mode [ 80.311262][ T5851] veth0_macvtap: entered promiscuous mode [ 80.329519][ T5849] veth1_macvtap: entered promiscuous mode [ 80.339830][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.352832][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.364356][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.383119][ T5851] veth1_macvtap: entered promiscuous mode [ 80.407467][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.416611][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.428423][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.439046][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.474787][ T5848] veth0_macvtap: entered promiscuous mode [ 80.491040][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.506366][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.516621][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.531549][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.544288][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.561242][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.573710][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.584090][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.601771][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.614346][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.625261][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.637222][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.648313][ T5848] veth1_macvtap: entered promiscuous mode [ 80.660462][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.671319][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.682163][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.692817][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.704239][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.720792][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.733456][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.743561][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.755914][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.765844][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.776371][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.787628][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.807718][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.817017][ T1860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.820302][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.830904][ T1860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.835777][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.851000][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.879415][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.888735][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.897667][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.906605][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.986083][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.998613][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.010571][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.021352][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.031644][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.042154][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.052540][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.063358][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.075763][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.106506][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.122045][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.132227][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.142810][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.153081][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.163675][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.174264][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.185004][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.196366][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.209653][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.221022][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.232765][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.242014][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.244163][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.250713][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276228][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.287463][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.306620][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.330310][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.354768][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.367001][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.385472][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.398350][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.411796][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.529516][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.547622][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.618512][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.636847][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.648501][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.718629][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.782800][ T29] audit: type=1326 audit(1737623811.943:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 81.827547][ T1860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.868021][ T1860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.908045][ T29] audit: type=1326 audit(1737623811.943:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 81.964726][ T5840] Bluetooth: hci0: command tx timeout [ 81.970196][ T5840] Bluetooth: hci1: command tx timeout [ 82.005540][ T29] audit: type=1326 audit(1737623811.943:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.031908][ T5840] Bluetooth: hci4: command tx timeout [ 82.037974][ T5837] Bluetooth: hci2: command tx timeout [ 82.082120][ T29] audit: type=1326 audit(1737623811.943:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.104283][ T29] audit: type=1326 audit(1737623811.973:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.126689][ T5840] Bluetooth: hci3: command tx timeout [ 82.135189][ T29] audit: type=1326 audit(1737623811.973:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.157430][ T29] audit: type=1326 audit(1737623811.973:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.219199][ T29] audit: type=1326 audit(1737623811.973:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.305022][ T29] audit: type=1326 audit(1737623811.973:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 82.391112][ T29] audit: type=1326 audit(1737623811.973:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5894 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03598cd29 code=0x7ffc0000 [ 83.383071][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.571622][ T5889] usb 5-1: config index 0 descriptor too short (expected 1298, got 18) [ 83.580116][ T5889] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 83.613003][ T5889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 83.646830][ T5889] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 83.661503][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.670594][ T5889] usb 5-1: Product: syz [ 83.712669][ T5889] usb 5-1: Manufacturer: syz [ 83.717385][ T5889] usb 5-1: SerialNumber: syz [ 83.745675][ T5889] usb 5-1: config 0 descriptor?? [ 84.031998][ T5840] Bluetooth: hci1: command tx timeout [ 84.038112][ T5837] Bluetooth: hci0: command tx timeout [ 84.111726][ T5837] Bluetooth: hci4: command tx timeout [ 84.113396][ T5840] Bluetooth: hci2: command tx timeout [ 84.152589][ T5928] could not allocate digest TFM handle sha256-arm64-neon [ 84.192728][ T5840] Bluetooth: hci3: command tx timeout [ 84.366758][ T5889] usb 5-1: Firmware version (0.0) predates our first public release. [ 84.381852][ T5889] usb 5-1: Please update to version 0.2 or newer [ 84.470816][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.494769][ T5889] usb 5-1: USB disconnect, device number 2 [ 84.762461][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 85.067270][ T5961] could not allocate digest TFM handle sha256-arm64-neon [ 85.394189][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 86.060460][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.213488][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.411480][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 86.431166][ T5889] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.471503][ T5889] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.497207][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.526101][ T5889] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 86.561478][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.602499][ T5889] usb 1-1: config 0 descriptor?? [ 86.897192][ T836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.039256][ T5889] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 87.072643][ T5889] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 87.080622][ T5889] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 87.099226][ T5889] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 87.111482][ T5889] hid-corsair-void 0003:1B1C:1B25.0001: unknown main item tag 0x0 [ 87.182469][ T5889] hid-corsair-void 0003:1B1C:1B25.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.0-1/input0 [ 87.231500][ T836] usb 2-1: Using ep0 maxpacket: 16 [ 87.250591][ T5889] usb 1-1: USB disconnect, device number 2 [ 87.273597][ T836] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.303547][ T5889] ------------[ cut here ]------------ [ 87.309112][ T5889] ODEBUG: free active (active state 0) object: ffff8880615ae9a8 object type: timer_list hint: corsair_void_status_work_handler+0x0/0x190 [ 87.333053][ T5887] hid-corsair-void 0003:1B1C:1B25.0001: failed to request battery (reason: -19) [ 87.376691][ T5889] WARNING: CPU: 1 PID: 5889 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 [ 87.386482][ T5889] Modules linked in: [ 87.390433][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 87.401522][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.411976][ T5889] Workqueue: usb_hub_wq hub_event [ 87.417052][ T5889] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 87.422956][ T5889] Code: e8 3b 10 38 fd 4c 8b 0b 48 c7 c7 80 1e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 fb 3c 92 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a8 9f 4d 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 87.442805][ T5889] RSP: 0018:ffffc9000418eeb8 EFLAGS: 00010286 [ 87.448955][ T5889] RAX: 6c77a0bf27ae7b00 RBX: ffffffff8c0ca540 RCX: 0000000000100000 [ 87.457451][ T5889] RDX: ffffc9001a459000 RSI: 000000000000b418 RDI: 000000000000b419 [ 87.466113][ T5889] RBP: ffffffff8c602000 R08: ffffffff81603132 R09: fffffbfff1cfa638 [ 87.474492][ T5889] R10: dffffc0000000000 R11: fffffbfff1cfa638 R12: 0000000000000000 [ 87.482728][ T5889] R13: ffffffff8c601f18 R14: dffffc0000000000 R15: ffff8880615ae9a8 [ 87.490754][ T5889] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 87.499845][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.506535][ T5889] CR2: 00000000200001c0 CR3: 000000007e0f4000 CR4: 00000000003526f0 [ 87.513162][ T836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.514569][ T5889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.532715][ T5889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.540721][ T5889] Call Trace: [ 87.544137][ T5889] [ 87.544677][ T836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.547081][ T5889] ? __warn+0x165/0x4d0 [ 87.547111][ T5889] ? debug_print_object+0x17a/0x1f0 [ 87.566454][ T5889] ? report_bug+0x2b3/0x500 [ 87.571006][ T5889] ? debug_print_object+0x17a/0x1f0 [ 87.576356][ T5889] ? handle_bug+0x60/0x90 [ 87.578818][ T836] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.580698][ T5889] ? exc_invalid_op+0x1a/0x50 [ 87.580725][ T5889] ? asm_exc_invalid_op+0x1a/0x20 [ 87.580753][ T5889] ? __warn_printk+0x292/0x360 [ 87.604475][ T5889] ? debug_print_object+0x17a/0x1f0 [ 87.608978][ T836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.609690][ T5889] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 87.624613][ T5889] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 87.631608][ T5889] debug_check_no_obj_freed+0x45b/0x580 [ 87.637145][ T836] usb 2-1: Product: syz [ 87.637186][ T5889] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 87.647541][ T5889] ? kasan_quarantine_put+0xdc/0x230 [ 87.650484][ T836] usb 2-1: Manufacturer: syz [ 87.652920][ T5889] ? devres_release_group+0x328/0x350 [ 87.652946][ T5889] ? devres_release_group+0x328/0x350 [ 87.652966][ T5889] kfree+0x115/0x430 [ 87.652997][ T5889] devres_release_group+0x328/0x350 [ 87.653023][ T5889] ? __pfx_devres_release_group+0x10/0x10 [ 87.653046][ T5889] ? __pfx_corsair_void_remove+0x10/0x10 [ 87.653066][ T5889] ? kernfs_put+0x315/0x370 [ 87.653088][ T5889] ? sysfs_remove_group+0x242/0x2c0 [ 87.674983][ T836] usb 2-1: SerialNumber: syz [ 87.678694][ T5889] ? __pfx_corsair_void_remove+0x10/0x10 [ 87.678725][ T5889] hid_device_remove+0x250/0x370 [ 87.678756][ T5889] ? __pfx_hid_device_remove+0x10/0x10 [ 87.721105][ T5889] device_release_driver_internal+0x4a9/0x7c0 [ 87.727295][ T5889] bus_remove_device+0x34f/0x420 [ 87.732322][ T5889] device_del+0x57a/0x9b0 [ 87.736698][ T5889] ? __pfx_device_del+0x10/0x10 [ 87.741683][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.748062][ T5889] hid_destroy_device+0x6a/0x1b0 [ 87.753102][ T5889] usbhid_disconnect+0x9e/0xc0 [ 87.757903][ T5889] usb_unbind_interface+0x25b/0x940 [ 87.763697][ T5889] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 87.769912][ T5889] ? __pfx_usb_unbind_interface+0x10/0x10 [ 87.775768][ T5889] device_release_driver_internal+0x503/0x7c0 [ 87.781951][ T5889] bus_remove_device+0x34f/0x420 [ 87.786932][ T5889] device_del+0x57a/0x9b0 [ 87.791301][ T5889] ? kobject_put+0x272/0x480 [ 87.796023][ T5889] ? __pfx_device_del+0x10/0x10 [ 87.800916][ T5889] ? kobject_put+0x44d/0x480 [ 87.805679][ T5889] usb_disable_device+0x3bf/0x850 [ 87.810762][ T5889] usb_disconnect+0x340/0x950 [ 87.815560][ T5889] hub_event+0x1ebc/0x5150 [ 87.820044][ T5889] ? debug_object_deactivate+0x2d5/0x390 [ 87.825862][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.831121][ T5889] ? __pfx_hub_event+0x10/0x10 [ 87.835996][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 87.841058][ T5889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.847187][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.853616][ T5889] ? process_scheduled_works+0x976/0x1840 [ 87.859373][ T5889] process_scheduled_works+0xa66/0x1840 [ 87.865550][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.872172][ T5889] ? assign_work+0x364/0x3d0 [ 87.876871][ T5889] worker_thread+0x870/0xd30 [ 87.881587][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 87.886645][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 87.891836][ T5889] kthread+0x7a9/0x920 [ 87.895940][ T5889] ? __pfx_kthread+0x10/0x10 [ 87.900562][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 87.905815][ T5889] ? __pfx_kthread+0x10/0x10 [ 87.910439][ T5889] ? __pfx_kthread+0x10/0x10 [ 87.915126][ T5889] ? __pfx_kthread+0x10/0x10 [ 87.919758][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.925080][ T5889] ? lockdep_hardirqs_on+0x99/0x150 [ 87.930323][ T5889] ? __pfx_kthread+0x10/0x10 [ 87.935033][ T5889] ret_from_fork+0x4b/0x80 [ 87.939482][ T5889] ? __pfx_kthread+0x10/0x10 [ 87.944183][ T5889] ret_from_fork_asm+0x1a/0x30 [ 87.948993][ T5889] [ 87.952192][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.959504][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 87.969939][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.980028][ T5889] Workqueue: usb_hub_wq hub_event [ 87.985089][ T5889] Call Trace: [ 87.988382][ T5889] [ 87.991332][ T5889] dump_stack_lvl+0x241/0x360 [ 87.996039][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.001267][ T5889] ? __pfx__printk+0x10/0x10 [ 88.005888][ T5889] ? vscnprintf+0x5d/0x90 [ 88.010229][ T5889] panic+0x349/0x880 [ 88.014127][ T5889] ? __warn+0x174/0x4d0 [ 88.018283][ T5889] ? __pfx_panic+0x10/0x10 [ 88.022704][ T5889] ? ret_from_fork_asm+0x1a/0x30 [ 88.027665][ T5889] __warn+0x344/0x4d0 [ 88.031645][ T5889] ? debug_print_object+0x17a/0x1f0 [ 88.036850][ T5889] report_bug+0x2b3/0x500 [ 88.041180][ T5889] ? debug_print_object+0x17a/0x1f0 [ 88.046381][ T5889] handle_bug+0x60/0x90 [ 88.050537][ T5889] exc_invalid_op+0x1a/0x50 [ 88.055130][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 88.059997][ T5889] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 88.065815][ T5889] Code: e8 3b 10 38 fd 4c 8b 0b 48 c7 c7 80 1e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 fb 3c 92 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 a8 9f 4d 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 88.085433][ T5889] RSP: 0018:ffffc9000418eeb8 EFLAGS: 00010286 [ 88.091511][ T5889] RAX: 6c77a0bf27ae7b00 RBX: ffffffff8c0ca540 RCX: 0000000000100000 [ 88.099529][ T5889] RDX: ffffc9001a459000 RSI: 000000000000b418 RDI: 000000000000b419 [ 88.107499][ T5889] RBP: ffffffff8c602000 R08: ffffffff81603132 R09: fffffbfff1cfa638 [ 88.115481][ T5889] R10: dffffc0000000000 R11: fffffbfff1cfa638 R12: 0000000000000000 [ 88.123456][ T5889] R13: ffffffff8c601f18 R14: dffffc0000000000 R15: ffff8880615ae9a8 [ 88.131434][ T5889] ? __warn_printk+0x292/0x360 [ 88.136234][ T5889] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 88.143019][ T5889] ? __pfx_corsair_void_status_work_handler+0x10/0x10 [ 88.149830][ T5889] debug_check_no_obj_freed+0x45b/0x580 [ 88.155392][ T5889] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 88.161476][ T5889] ? kasan_quarantine_put+0xdc/0x230 [ 88.166812][ T5889] ? devres_release_group+0x328/0x350 [ 88.172186][ T5889] ? devres_release_group+0x328/0x350 [ 88.177575][ T5889] kfree+0x115/0x430 [ 88.181483][ T5889] devres_release_group+0x328/0x350 [ 88.186682][ T5889] ? __pfx_devres_release_group+0x10/0x10 [ 88.192399][ T5889] ? __pfx_corsair_void_remove+0x10/0x10 [ 88.198036][ T5889] ? kernfs_put+0x315/0x370 [ 88.202560][ T5889] ? sysfs_remove_group+0x242/0x2c0 [ 88.207782][ T5889] ? __pfx_corsair_void_remove+0x10/0x10 [ 88.213427][ T5889] hid_device_remove+0x250/0x370 [ 88.218376][ T5889] ? __pfx_hid_device_remove+0x10/0x10 [ 88.223841][ T5889] device_release_driver_internal+0x4a9/0x7c0 [ 88.229925][ T5889] bus_remove_device+0x34f/0x420 [ 88.234868][ T5889] device_del+0x57a/0x9b0 [ 88.239214][ T5889] ? __pfx_device_del+0x10/0x10 [ 88.244075][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.250406][ T5889] hid_destroy_device+0x6a/0x1b0 [ 88.255351][ T5889] usbhid_disconnect+0x9e/0xc0 [ 88.260111][ T5889] usb_unbind_interface+0x25b/0x940 [ 88.265327][ T5889] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 88.271066][ T5889] ? __pfx_usb_unbind_interface+0x10/0x10 [ 88.276797][ T5889] device_release_driver_internal+0x503/0x7c0 [ 88.282882][ T5889] bus_remove_device+0x34f/0x420 [ 88.287840][ T5889] device_del+0x57a/0x9b0 [ 88.292196][ T5889] ? kobject_put+0x272/0x480 [ 88.296798][ T5889] ? __pfx_device_del+0x10/0x10 [ 88.301665][ T5889] ? kobject_put+0x44d/0x480 [ 88.306293][ T5889] usb_disable_device+0x3bf/0x850 [ 88.311333][ T5889] usb_disconnect+0x340/0x950 [ 88.316023][ T5889] hub_event+0x1ebc/0x5150 [ 88.320451][ T5889] ? debug_object_deactivate+0x2d5/0x390 [ 88.326092][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.331326][ T5889] ? __pfx_hub_event+0x10/0x10 [ 88.336142][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 88.341191][ T5889] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.347190][ T5889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.353537][ T5889] ? process_scheduled_works+0x976/0x1840 [ 88.359259][ T5889] process_scheduled_works+0xa66/0x1840 [ 88.364838][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.370829][ T5889] ? assign_work+0x364/0x3d0 [ 88.375422][ T5889] worker_thread+0x870/0xd30 [ 88.380034][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 88.385064][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 88.390173][ T5889] kthread+0x7a9/0x920 [ 88.394256][ T5889] ? __pfx_kthread+0x10/0x10 [ 88.398874][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 88.404004][ T5889] ? __pfx_kthread+0x10/0x10 [ 88.408602][ T5889] ? __pfx_kthread+0x10/0x10 [ 88.413208][ T5889] ? __pfx_kthread+0x10/0x10 [ 88.417798][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.422996][ T5889] ? lockdep_hardirqs_on+0x99/0x150 [ 88.428197][ T5889] ? __pfx_kthread+0x10/0x10 [ 88.432791][ T5889] ret_from_fork+0x4b/0x80 [ 88.437202][ T5889] ? __pfx_kthread+0x10/0x10 [ 88.441793][ T5889] ret_from_fork_asm+0x1a/0x30 [ 88.446580][ T5889] [ 88.449888][ T5889] Kernel Offset: disabled [ 88.454258][ T5889] Rebooting in 86400 seconds..