last executing test programs: 4.235420658s ago: executing program 3 (id=4): ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x822b01) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) syz_usb_connect(0x2, 0x16, 0x0, 0x0) syz_usb_connect(0xba15db9db84bcd4b, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0xfff, 0x44, 0x2, 0x0, 0x7}, {0xfff, 0x3, 0x7fff, 0x8, 0xf, 0x8}]}) syz_usb_ep_read(0xffffffffffffffff, 0xf, 0x9a, &(0x7f0000000ec0)=""/154) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.9253816s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.71560754s ago: executing program 0 (id=1): syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 3.575078136s ago: executing program 2 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000100)={0x92, "e26c08b7cd72d60994fbdafed3ab9416e3ffd4ae3bd39d966ffba65774c82d2b2cb24b3876296701515dce3b18b2072241dc76674ba0f836144325d7765bbb36c7fb09249761b8f459c703b2eb2679a76fc1e1e337bcbc8bce54dc933f939461c7424ab48ea171c3233d0f07cd29a923a60178d6ae58f4566cedb619b5ee8e8810e8dd37cbda74fc6ae0563ead17531450cc"}) 3.574886381s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x5, 0x0, 0x5, 0x10000, 0xbdb], 0x1, 0x3c4210}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.344551585s ago: executing program 1 (id=6): r0 = socket$inet(0x10, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = syz_clone(0x80105000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open(0x0, 0x40, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e24, 0xfff, 0x4e24, 0x8ad, 0xa, 0x0, 0x20, 0x29, r1, r6}, {0x1, 0x8000000000000001, 0xd07, 0x3, 0x42e6, 0x10, 0x9, 0x9}, {0xdb, 0x3, 0x2, 0x400}, 0x7ff, 0x6e6bb3, 0x2, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x1, 0x2, 0x40, 0x9, 0x200, 0x9}}, 0xe4) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) 3.230325839s ago: executing program 1 (id=7): r0 = socket$inet(0x10, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x80105000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) r4 = open(0x0, 0x40, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e24, 0xfff, 0x4e24, 0x8ad, 0xa, 0x0, 0x20, 0x29, r1, r6}, {0x1, 0x8000000000000001, 0xd07, 0x3, 0x42e6, 0x10, 0x9, 0x9}, {0xdb, 0x3, 0x2, 0x400}, 0x7ff, 0x6e6bb3, 0x2, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x1, 0x2, 0x40, 0x9, 0x200, 0x9}}, 0xe4) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000006000a004e220000050002000a00000014000900000000000000000000ffffac1e0001"], 0x38}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000340)={0x0, 0x0, 0x6b, 0x2, 0x3}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) 3.150767591s ago: executing program 1 (id=8): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.055114559s ago: executing program 2 (id=9): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)=""/261, 0x105}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000040)=""/205, 0xcd}, {&(0x7f0000004ac0)=""/4134, 0x1026}, {&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000d80)=""/204, 0xcc}, {0x0}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000001a40)=""/4111, 0x100f}], 0x9}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.964965687s ago: executing program 2 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 1.244057755s ago: executing program 0 (id=11): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="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", 0x14c}], 0x1}}], 0x1, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.151049422s ago: executing program 0 (id=12): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1a748d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000001340)="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") 1.146499516s ago: executing program 3 (id=13): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 302.324348ms ago: executing program 2 (id=14): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'wlan1\x00', 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x280) 190.892046ms ago: executing program 3 (id=15): r0 = socket$inet(0x10, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = syz_clone(0x80105000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open(0x0, 0x40, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e24, 0xfff, 0x4e24, 0x8ad, 0xa, 0x0, 0x20, 0x29, r1}, {0x1, 0x8000000000000001, 0xd07, 0x3, 0x42e6, 0x10, 0x9, 0x9}, {0xdb, 0x3, 0x2, 0x400}, 0x7ff, 0x6e6bb3, 0x2, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x1, 0x2, 0x40, 0x9, 0x200, 0x9}}, 0xe4) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) 66.801766ms ago: executing program 2 (id=16): r0 = socket$inet(0x10, 0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x80105000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, 0x0) r4 = open(0x0, 0x40, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x4e24, 0xfff, 0x4e24, 0x8ad, 0xa, 0x0, 0x20, 0x29, r1, r6}, {0x1, 0x8000000000000001, 0xd07, 0x3, 0x42e6, 0x10, 0x9, 0x9}, {0xdb, 0x3, 0x2, 0x400}, 0x7ff, 0x6e6bb3, 0x2, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x1, 0x2, 0x40, 0x9, 0x200, 0x9}}, 0xe4) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000006000a004e220000050002000a00000014000900000000000000000000ffffac1e0001"], 0x38}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000340)={0x0, 0x0, 0x6b, 0x2, 0x3}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) 0s ago: executing program 1 (id=17): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000100)={0x92, "e26c08b7cd72d60994fbdafed3ab9416e3ffd4ae3bd39d966ffba65774c82d2b2cb24b3876296701515dce3b18b2072241dc76674ba0f836144325d7765bbb36c7fb09249761b8f459c703b2eb2679a76fc1e1e337bcbc8bce54dc933f939461c7424ab48ea171c3233d0f07cd29a923a60178d6ae58f4566cedb619b5ee8e8810e8dd37cbda74fc6ae0563ead17531450cc"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 67.828115][ T5845] cgroup: Unknown subsys name 'net' [ 67.939067][ T5845] cgroup: Unknown subsys name 'cpuset' [ 67.947167][ T5845] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.337690][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.294506][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.300945][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.603291][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.614730][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.622326][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.629815][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.638657][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.646535][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.686804][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.689687][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.694525][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.702138][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.708869][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.716097][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.723180][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.742609][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.743576][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.800262][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.808883][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.824150][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.835009][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.842663][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.271786][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 72.285559][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 72.364731][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 72.549135][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.557434][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.566519][ T5858] bridge_slave_0: entered allmulticast mode [ 72.574201][ T5858] bridge_slave_0: entered promiscuous mode [ 72.596869][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.604134][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.611211][ T5863] bridge_slave_0: entered allmulticast mode [ 72.619099][ T5863] bridge_slave_0: entered promiscuous mode [ 72.641793][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.648905][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.656145][ T5858] bridge_slave_1: entered allmulticast mode [ 72.663013][ T5858] bridge_slave_1: entered promiscuous mode [ 72.670430][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 72.693327][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.700461][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.707699][ T5863] bridge_slave_1: entered allmulticast mode [ 72.714648][ T5863] bridge_slave_1: entered promiscuous mode [ 72.771323][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.778836][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.786258][ T5854] bridge_slave_0: entered allmulticast mode [ 72.793126][ T5854] bridge_slave_0: entered promiscuous mode [ 72.811401][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.824191][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.835483][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.845359][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.852491][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.859689][ T5854] bridge_slave_1: entered allmulticast mode [ 72.866675][ T5854] bridge_slave_1: entered promiscuous mode [ 72.910800][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.938094][ T5858] team0: Port device team_slave_0 added [ 72.973014][ T5858] team0: Port device team_slave_1 added [ 73.006493][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.033112][ T5863] team0: Port device team_slave_0 added [ 73.042093][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.071772][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.078766][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.104894][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.118842][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.125865][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.152135][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.165396][ T5863] team0: Port device team_slave_1 added [ 73.181896][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.189045][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.196665][ T5867] bridge_slave_0: entered allmulticast mode [ 73.204423][ T5867] bridge_slave_0: entered promiscuous mode [ 73.245596][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.252683][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.260372][ T5867] bridge_slave_1: entered allmulticast mode [ 73.267505][ T5867] bridge_slave_1: entered promiscuous mode [ 73.303576][ T5854] team0: Port device team_slave_0 added [ 73.332570][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.340048][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.366113][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.379173][ T5854] team0: Port device team_slave_1 added [ 73.401842][ T5858] hsr_slave_0: entered promiscuous mode [ 73.408869][ T5858] hsr_slave_1: entered promiscuous mode [ 73.415842][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.422776][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.452511][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.490804][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.503226][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.520619][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.529289][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.555537][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.606388][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.613323][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.639861][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.659428][ T5867] team0: Port device team_slave_0 added [ 73.712056][ T5867] team0: Port device team_slave_1 added [ 73.740873][ T5863] hsr_slave_0: entered promiscuous mode [ 73.747119][ T5863] hsr_slave_1: entered promiscuous mode [ 73.753043][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 73.754341][ T5861] Bluetooth: hci0: command tx timeout [ 73.758962][ T5863] Cannot create hsr debugfs directory [ 73.804893][ T5854] hsr_slave_0: entered promiscuous mode [ 73.811032][ T5854] hsr_slave_1: entered promiscuous mode [ 73.817359][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 73.823075][ T5854] Cannot create hsr debugfs directory [ 73.833701][ T5861] Bluetooth: hci1: command tx timeout [ 73.844160][ T5861] Bluetooth: hci2: command tx timeout [ 73.885369][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.892311][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.918370][ T5861] Bluetooth: hci3: command tx timeout [ 73.924457][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.962172][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.969524][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.995456][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.159968][ T5867] hsr_slave_0: entered promiscuous mode [ 74.166539][ T5867] hsr_slave_1: entered promiscuous mode [ 74.172479][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 74.178228][ T5867] Cannot create hsr debugfs directory [ 74.398178][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.424998][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.436752][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.462860][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.529224][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.544718][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.569630][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.581285][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.643110][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.656027][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.667867][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.693951][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.785438][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.799815][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.818528][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.829104][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.905435][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.957480][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.992354][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.007116][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.014350][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.040930][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.048058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.074640][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.093878][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.116620][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.124059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.147705][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.154841][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.180473][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.210851][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.217941][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.238971][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.271437][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.278543][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.302209][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.332895][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.340052][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.382943][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.390087][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.831585][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.834192][ T5861] Bluetooth: hci0: command tx timeout [ 75.876516][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.915632][ T5861] Bluetooth: hci2: command tx timeout [ 75.915770][ T5182] Bluetooth: hci1: command tx timeout [ 75.940247][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.953261][ T5858] veth0_vlan: entered promiscuous mode [ 75.976044][ T5858] veth1_vlan: entered promiscuous mode [ 75.992606][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.001208][ T5182] Bluetooth: hci3: command tx timeout [ 76.067803][ T5854] veth0_vlan: entered promiscuous mode [ 76.090945][ T5863] veth0_vlan: entered promiscuous mode [ 76.106404][ T5854] veth1_vlan: entered promiscuous mode [ 76.113890][ T5858] veth0_macvtap: entered promiscuous mode [ 76.126202][ T5863] veth1_vlan: entered promiscuous mode [ 76.139182][ T5858] veth1_macvtap: entered promiscuous mode [ 76.171280][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.211969][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.248293][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.265983][ T5867] veth0_vlan: entered promiscuous mode [ 76.277643][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.287438][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302423][ T5863] veth0_macvtap: entered promiscuous mode [ 76.315035][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.332858][ T5854] veth0_macvtap: entered promiscuous mode [ 76.342446][ T5863] veth1_macvtap: entered promiscuous mode [ 76.359523][ T5867] veth1_vlan: entered promiscuous mode [ 76.378027][ T5854] veth1_macvtap: entered promiscuous mode [ 76.448146][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.455944][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.472089][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.480134][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.502807][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.542007][ T2867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.554524][ T2867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.565136][ T5867] veth0_macvtap: entered promiscuous mode [ 76.574409][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.590348][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.599210][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.615768][ T5867] veth1_macvtap: entered promiscuous mode [ 76.632992][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.661549][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.671965][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.700869][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.727927][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.737273][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.760112][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.771545][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.803956][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.825668][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.827687][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.869007][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.914784][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.923925][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959221][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.959663][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.972073][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.017762][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.032726][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.122834][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.145591][ T5900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.170744][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.176345][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.202065][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.225095][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.283198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.296990][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.306591][ T5900] usb 4-1: device descriptor read/64, error -71 [ 77.543624][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.673778][ T5900] usb 4-1: device descriptor read/64, error -71 [ 77.674061][ T910] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.730547][ T5958] autofs: Unknown parameter 'fd0x0000000000000000' [ 77.754744][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.786877][ T5900] usb usb4-port1: attempt power cycle [ 77.841621][ T5960] autofs: Bad value for 'fd' [ 77.857074][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.872736][ T910] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.888154][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.910525][ T910] usb 1-1: config 0 descriptor?? [ 77.915860][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.915892][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.915924][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 77.926934][ T5182] Bluetooth: hci0: command tx timeout [ 77.975877][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.986701][ T9] usb 3-1: config 0 descriptor?? [ 77.995199][ T5182] Bluetooth: hci1: command tx timeout [ 77.995594][ T5861] Bluetooth: hci2: command tx timeout [ 78.078163][ T5861] Bluetooth: hci3: command tx timeout [ 78.133537][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.155309][ T5900] usb 4-1: device descriptor read/8, error -71 [ 78.166476][ T910] usbhid 1-1:0.0: can't add hid device: -71 [ 78.172587][ T910] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 78.186228][ T910] usb 1-1: USB disconnect, device number 2 [ 78.255343][ T94] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.403298][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 78.412380][ T5900] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.421776][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 78.433553][ T94] usb 2-1: Using ep0 maxpacket: 16 [ 78.440628][ T94] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 78.455239][ T9] usb 3-1: USB disconnect, device number 2 [ 78.461158][ T5900] usb 4-1: device descriptor read/8, error -71 [ 78.471887][ T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.492884][ T94] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 78.501965][ T94] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.511371][ T94] usb 2-1: Product: syz [ 78.517775][ T94] usb 2-1: Manufacturer: syz [ 78.523250][ T94] usb 2-1: SerialNumber: syz [ 78.529885][ T94] usb 2-1: config 0 descriptor?? [ 78.541269][ T94] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 78.550643][ T94] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 78.575093][ T5900] usb usb4-port1: unable to enumerate USB device [ 78.603553][ T910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.753639][ T910] usb 1-1: Using ep0 maxpacket: 32 [ 78.761717][ T910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.774217][ T910] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 78.783253][ T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.801987][ T910] usb 1-1: config 0 descriptor?? [ 78.810766][ T910] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 78.823192][ T910] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 79.014118][ T5968] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9'. [ 79.023981][ T5967] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9'. [ 79.033294][ T5968] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9'. [ 79.141206][ T94] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 79.148260][ T94] em28xx 2-1:0.0: Config register raw data: 0x56 [ 79.267607][ T910] usb 1-1: USB disconnect, device number 3 [ 79.278029][ T910] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 79.343456][ T5965] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.351088][ T94] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 79.359012][ T94] em28xx 2-1:0.0: No AC97 audio processor [ 79.515899][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.526969][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.536773][ T5965] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 79.546748][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.557799][ T5965] usb 3-1: config 0 descriptor?? [ 79.994038][ T5861] Bluetooth: hci0: command tx timeout [ 80.073704][ T5861] Bluetooth: hci2: command tx timeout [ 80.073723][ T5182] Bluetooth: hci1: command tx timeout [ 80.103655][ T94] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.153894][ T5182] Bluetooth: hci3: command tx timeout [ 80.174652][ T5965] usbhid 3-1:0.0: can't add hid device: -71 [ 80.192945][ T5965] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 80.217330][ T5965] usb 3-1: USB disconnect, device number 3 [ 80.272481][ T94] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.287887][ T94] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.297714][ T94] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 80.316693][ T94] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.342802][ T94] usb 1-1: config 0 descriptor?? [ 80.563915][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.581677][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.812184][ T94] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 80.895152][ T94] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 80.912597][ T94] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 80.950508][ T94] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 81.000435][ T5964] usb 2-1: USB disconnect, device number 2 [ 81.001428][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.012207][ T5964] em28xx 2-1:0.0: Disconnecting em28xx [ 81.018247][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.063396][ T5993] autofs: Unknown parameter '0x0000000000000000' [ 81.080830][ T5964] ================================================================== [ 81.088898][ T5964] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 81.097241][ T5964] Read of size 4 at addr ffff888141b3b4f0 by task kworker/1:7/5964 [ 81.105122][ T5964] [ 81.107455][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 81.107477][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.107488][ T5964] Workqueue: usb_hub_wq hub_event [ 81.107517][ T5964] Call Trace: [ 81.107525][ T5964] [ 81.107532][ T5964] dump_stack_lvl+0x189/0x250 [ 81.107558][ T5964] ? rcu_is_watching+0x15/0xb0 [ 81.107578][ T5964] ? __kasan_check_byte+0x12/0x40 [ 81.107597][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.107620][ T5964] ? rcu_is_watching+0x15/0xb0 [ 81.107640][ T5964] ? lock_release+0x4b/0x3e0 [ 81.107659][ T5964] ? __virt_addr_valid+0x1c8/0x5c0 [ 81.107683][ T5964] ? __virt_addr_valid+0x4a5/0x5c0 [ 81.107706][ T5964] print_report+0xca/0x240 [ 81.107723][ T5964] ? media_devnode_unregister+0xe2/0xf0 [ 81.107743][ T5964] kasan_report+0x118/0x150 [ 81.107846][ T5964] ? media_devnode_unregister+0xe2/0xf0 [ 81.107887][ T5964] media_devnode_unregister+0xe2/0xf0 [ 81.107908][ T5964] media_device_unregister+0x37c/0x400 [ 81.107928][ T5964] ? em28xx_audio_fini+0x59/0x1b0 [ 81.107949][ T5964] em28xx_release_resources+0xac/0x240 [ 81.107979][ T5964] em28xx_usb_disconnect+0x19f/0x2f0 [ 81.108003][ T5964] usb_unbind_interface+0x26e/0x910 [ 81.108026][ T5964] ? __pfx_usb_unbind_interface+0x10/0x10 [ 81.108059][ T5964] device_release_driver_internal+0x4d6/0x800 [ 81.108085][ T5964] bus_remove_device+0x34d/0x410 [ 81.108112][ T5964] device_del+0x511/0x8e0 [ 81.108133][ T5964] ? __pfx_device_del+0x10/0x10 [ 81.108150][ T5964] ? kobject_put+0x446/0x480 [ 81.108178][ T5964] usb_disable_device+0x3e9/0x8a0 [ 81.108197][ T5964] usb_disconnect+0x330/0x950 [ 81.108223][ T5964] hub_event+0x1cf5/0x4a20 [ 81.108239][ T5964] ? sched_clock+0x3f/0x60 [ 81.108264][ T5964] ? do_raw_spin_lock+0x121/0x290 [ 81.108289][ T5964] ? register_lock_class+0x51/0x320 [ 81.108312][ T5964] ? __pfx_hub_event+0x10/0x10 [ 81.108327][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 81.108349][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.108369][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 81.108386][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 81.108406][ T5964] process_scheduled_works+0xae1/0x17b0 [ 81.108435][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.108463][ T5964] worker_thread+0x8a0/0xda0 [ 81.108483][ T5964] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.108507][ T5964] ? __kthread_parkme+0x7b/0x200 [ 81.108532][ T5964] kthread+0x711/0x8a0 [ 81.108555][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 81.108574][ T5964] ? __pfx_kthread+0x10/0x10 [ 81.108595][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.108615][ T5964] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.108636][ T5964] ? __pfx_kthread+0x10/0x10 [ 81.108658][ T5964] ret_from_fork+0x47c/0x820 [ 81.108675][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 81.108695][ T5964] ? __switch_to_asm+0x39/0x70 [ 81.108712][ T5964] ? __switch_to_asm+0x33/0x70 [ 81.108728][ T5964] ? __pfx_kthread+0x10/0x10 [ 81.108750][ T5964] ret_from_fork_asm+0x1a/0x30 [ 81.108773][ T5964] [ 81.108780][ T5964] [ 81.405026][ T5964] Allocated by task 94: [ 81.409163][ T5964] kasan_save_track+0x3e/0x80 [ 81.413822][ T5964] __kasan_kmalloc+0x93/0xb0 [ 81.418392][ T5964] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 81.423742][ T5964] __media_device_register+0x58/0x280 [ 81.429095][ T5964] em28xx_usb_probe+0x1764/0x2a20 [ 81.434102][ T5964] usb_probe_interface+0x665/0xc30 [ 81.439208][ T5964] really_probe+0x26a/0x9e0 [ 81.443694][ T5964] __driver_probe_device+0x18c/0x2f0 [ 81.448965][ T5964] driver_probe_device+0x4f/0x430 [ 81.453976][ T5964] __device_attach_driver+0x2ce/0x530 [ 81.459335][ T5964] bus_for_each_drv+0x251/0x2e0 [ 81.464169][ T5964] __device_attach+0x2b8/0x400 [ 81.468911][ T5964] bus_probe_device+0x185/0x260 [ 81.473748][ T5964] device_add+0x7b6/0xb50 [ 81.478058][ T5964] usb_set_configuration+0x1a87/0x20e0 [ 81.483496][ T5964] usb_generic_driver_probe+0x8d/0x150 [ 81.488937][ T5964] usb_probe_device+0x1c1/0x390 [ 81.493775][ T5964] really_probe+0x26a/0x9e0 [ 81.498263][ T5964] __driver_probe_device+0x18c/0x2f0 [ 81.503534][ T5964] driver_probe_device+0x4f/0x430 [ 81.508539][ T5964] __device_attach_driver+0x2ce/0x530 [ 81.513889][ T5964] bus_for_each_drv+0x251/0x2e0 [ 81.518754][ T5964] __device_attach+0x2b8/0x400 [ 81.523498][ T5964] bus_probe_device+0x185/0x260 [ 81.528336][ T5964] device_add+0x7b6/0xb50 [ 81.532644][ T5964] usb_new_device+0xa39/0x16f0 [ 81.537395][ T5964] hub_event+0x2958/0x4a20 [ 81.541794][ T5964] process_scheduled_works+0xae1/0x17b0 [ 81.547321][ T5964] worker_thread+0x8a0/0xda0 [ 81.551892][ T5964] kthread+0x711/0x8a0 [ 81.555947][ T5964] ret_from_fork+0x47c/0x820 [ 81.560519][ T5964] ret_from_fork_asm+0x1a/0x30 [ 81.565263][ T5964] [ 81.567570][ T5964] Freed by task 5964: [ 81.571525][ T5964] kasan_save_track+0x3e/0x80 [ 81.576183][ T5964] __kasan_save_free_info+0x46/0x50 [ 81.581368][ T5964] __kasan_slab_free+0x5b/0x80 [ 81.586114][ T5964] kfree+0x199/0x6d0 [ 81.589992][ T5964] media_devnode_release+0x61/0xa0 [ 81.595085][ T5964] device_release+0x9c/0x1c0 [ 81.599664][ T5964] kobject_put+0x228/0x480 [ 81.604088][ T5964] media_devnode_unregister+0x6d/0xf0 [ 81.609447][ T5964] media_device_unregister+0x37c/0x400 [ 81.614885][ T5964] em28xx_release_resources+0xac/0x240 [ 81.620330][ T5964] em28xx_usb_disconnect+0x19f/0x2f0 [ 81.625601][ T5964] usb_unbind_interface+0x26e/0x910 [ 81.630782][ T5964] device_release_driver_internal+0x4d6/0x800 [ 81.636830][ T5964] bus_remove_device+0x34d/0x410 [ 81.641750][ T5964] device_del+0x511/0x8e0 [ 81.646056][ T5964] usb_disable_device+0x3e9/0x8a0 [ 81.651059][ T5964] usb_disconnect+0x330/0x950 [ 81.655717][ T5964] hub_event+0x1cf5/0x4a20 [ 81.660113][ T5964] process_scheduled_works+0xae1/0x17b0 [ 81.665641][ T5964] worker_thread+0x8a0/0xda0 [ 81.670209][ T5964] kthread+0x711/0x8a0 [ 81.674262][ T5964] ret_from_fork+0x47c/0x820 [ 81.678835][ T5964] ret_from_fork_asm+0x1a/0x30 [ 81.683577][ T5964] [ 81.685888][ T5964] The buggy address belongs to the object at ffff888141b3b000 [ 81.685888][ T5964] which belongs to the cache kmalloc-2k of size 2048 [ 81.699918][ T5964] The buggy address is located 1264 bytes inside of [ 81.699918][ T5964] freed 2048-byte region [ffff888141b3b000, ffff888141b3b800) [ 81.713871][ T5964] [ 81.716177][ T5964] The buggy address belongs to the physical page: [ 81.722577][ T5964] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888141b39000 pfn:0x141b38 [ 81.732704][ T5964] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.741182][ T5964] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 81.749757][ T5964] page_type: f5(slab) [ 81.753719][ T5964] raw: 057ff00000000240 ffff88801a842000 ffff888140400948 ffffea000508e410 [ 81.762281][ T5964] raw: ffff888141b39000 0000000000080004 00000000f5000000 0000000000000000 [ 81.770843][ T5964] head: 057ff00000000240 ffff88801a842000 ffff888140400948 ffffea000508e410 [ 81.779489][ T5964] head: ffff888141b39000 0000000000080004 00000000f5000000 0000000000000000 [ 81.788138][ T5964] head: 057ff00000000003 ffffea000506ce01 00000000ffffffff 00000000ffffffff [ 81.796788][ T5964] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 81.805437][ T5964] page dumped because: kasan: bad access detected [ 81.811835][ T5964] page_owner tracks the page as allocated [ 81.817527][ T5964] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6379266048, free_ts 0 [ 81.837131][ T5964] post_alloc_hook+0x240/0x2a0 [ 81.841880][ T5964] get_page_from_freelist+0x21e4/0x22c0 [ 81.847407][ T5964] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.853193][ T5964] alloc_pages_mpol+0x232/0x4a0 [ 81.858024][ T5964] allocate_slab+0x8a/0x330 [ 81.862509][ T5964] ___slab_alloc+0xbd1/0x13f0 [ 81.867170][ T5964] __slab_alloc+0x55/0xa0 [ 81.871478][ T5964] __kmalloc_cache_noprof+0x411/0x6f0 [ 81.876838][ T5964] acpi_ds_create_walk_state+0xd9/0x270 [ 81.882362][ T5964] acpi_ps_execute_method+0x220/0x7c0 [ 81.887717][ T5964] acpi_ns_evaluate+0x5a6/0xa20 [ 81.892552][ T5964] acpi_rs_set_srs_method_data+0x271/0x350 [ 81.898340][ T5964] acpi_pci_link_set+0x4ff/0xac0 [ 81.903263][ T5964] acpi_pci_link_allocate_irq+0x757/0xcb0 [ 81.908967][ T5964] acpi_pci_irq_enable+0x22f/0x6e0 [ 81.914064][ T5964] do_pci_enable_device+0x25e/0x470 [ 81.919242][ T5964] page_owner free stack trace missing [ 81.924583][ T5964] [ 81.926887][ T5964] Memory state around the buggy address: [ 81.932495][ T5964] ffff888141b3b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.940531][ T5964] ffff888141b3b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.948571][ T5964] >ffff888141b3b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.956604][ T5964] ^ [ 81.964295][ T5964] ffff888141b3b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.972331][ T5964] ffff888141b3b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.980367][ T5964] ================================================================== [ 82.210482][ T5997] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18'. [ 82.220111][ T5996] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18'. [ 82.278914][ T6000] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.18'. [ 82.375752][ T5964] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.382977][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 82.392343][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.402404][ T5964] Workqueue: usb_hub_wq hub_event [ 82.407430][ T5964] Call Trace: [ 82.410692][ T5964] [ 82.413650][ T5964] dump_stack_lvl+0x99/0x250 [ 82.418255][ T5964] ? __asan_memcpy+0x40/0x70 [ 82.422846][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.428026][ T5964] ? __pfx__printk+0x10/0x10 [ 82.432597][ T5964] vpanic+0x237/0x6d0 [ 82.436566][ T5964] ? __pfx_vpanic+0x10/0x10 [ 82.441073][ T5964] ? preempt_schedule+0xae/0xc0 [ 82.445963][ T5964] ? __pfx_preempt_schedule+0x10/0x10 [ 82.451316][ T5964] panic+0xb9/0xc0 [ 82.455017][ T5964] ? __pfx_panic+0x10/0x10 [ 82.459417][ T5964] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 82.465290][ T5964] ? media_devnode_unregister+0xe2/0xf0 [ 82.470814][ T5964] check_panic_on_warn+0x89/0xb0 [ 82.475732][ T5964] ? media_devnode_unregister+0xe2/0xf0 [ 82.481260][ T5964] end_report+0x78/0x160 [ 82.485502][ T5964] kasan_report+0x129/0x150 [ 82.489995][ T5964] ? media_devnode_unregister+0xe2/0xf0 [ 82.495527][ T5964] media_devnode_unregister+0xe2/0xf0 [ 82.500887][ T5964] media_device_unregister+0x37c/0x400 [ 82.506350][ T5964] ? em28xx_audio_fini+0x59/0x1b0 [ 82.511364][ T5964] em28xx_release_resources+0xac/0x240 [ 82.516808][ T5964] em28xx_usb_disconnect+0x19f/0x2f0 [ 82.522081][ T5964] usb_unbind_interface+0x26e/0x910 [ 82.527263][ T5964] ? __pfx_usb_unbind_interface+0x10/0x10 [ 82.532966][ T5964] device_release_driver_internal+0x4d6/0x800 [ 82.539034][ T5964] bus_remove_device+0x34d/0x410 [ 82.543964][ T5964] device_del+0x511/0x8e0 [ 82.548279][ T5964] ? __pfx_device_del+0x10/0x10 [ 82.553108][ T5964] ? kobject_put+0x446/0x480 [ 82.557686][ T5964] usb_disable_device+0x3e9/0x8a0 [ 82.562692][ T5964] usb_disconnect+0x330/0x950 [ 82.567356][ T5964] hub_event+0x1cf5/0x4a20 [ 82.571751][ T5964] ? sched_clock+0x3f/0x60 [ 82.576189][ T5964] ? do_raw_spin_lock+0x121/0x290 [ 82.581197][ T5964] ? register_lock_class+0x51/0x320 [ 82.586379][ T5964] ? __pfx_hub_event+0x10/0x10 [ 82.591124][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 82.596824][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.602003][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 82.607703][ T5964] ? process_scheduled_works+0x9ef/0x17b0 [ 82.613440][ T5964] process_scheduled_works+0xae1/0x17b0 [ 82.618978][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 82.624949][ T5964] worker_thread+0x8a0/0xda0 [ 82.629525][ T5964] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 82.635841][ T5964] ? __kthread_parkme+0x7b/0x200 [ 82.640770][ T5964] kthread+0x711/0x8a0 [ 82.644827][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 82.649925][ T5964] ? __pfx_kthread+0x10/0x10 [ 82.654497][ T5964] ? _raw_spin_unlock_irq+0x23/0x50 [ 82.659687][ T5964] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.664870][ T5964] ? __pfx_kthread+0x10/0x10 [ 82.669446][ T5964] ret_from_fork+0x47c/0x820 [ 82.674018][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 82.679113][ T5964] ? __switch_to_asm+0x39/0x70 [ 82.683856][ T5964] ? __switch_to_asm+0x33/0x70 [ 82.688615][ T5964] ? __pfx_kthread+0x10/0x10 [ 82.693196][ T5964] ret_from_fork_asm+0x1a/0x30 [ 82.697947][ T5964] [ 82.701174][ T5964] Kernel Offset: disabled [ 82.705477][ T5964] Rebooting in 86400 seconds..