last executing test programs: 18.403535404s ago: executing program 0 (id=10): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0) 17.78882039s ago: executing program 0 (id=12): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x80080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/225, 0xe1}], 0x1, 0x892, 0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpgrp(0x0) r7 = getpgrp(0xffffffffffffffff) tgkill(r6, r7, 0x1c) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r9 = fsmount(r8, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r9, 0x16, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) lseek(r10, 0x200, 0x1) 16.077446456s ago: executing program 0 (id=16): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x30, r0, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 14.185081785s ago: executing program 0 (id=22): setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) 12.690548398s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x1cef, 0x4) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r3, 0x0, 0x0, 0x2101, 0x0, 0x0) 11.704494488s ago: executing program 4 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r1, &(0x7f0000000f80)=""/212, 0xd4, 0x73) 11.577292595s ago: executing program 1 (id=37): bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0400000004000000040000000500010004080000", @ANYRES32, @ANYBLOB="00000000000000000000d8000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000002"], 0x50) 11.39231271s ago: executing program 3 (id=38): syz_open_dev$usbfs(0x0, 0x76, 0x80080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgrp(0x0) tgkill(r4, 0x0, 0x1c) 11.078632251s ago: executing program 1 (id=39): openat(0xffffffffffffffff, &(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x80) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) 11.076688517s ago: executing program 4 (id=40): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 10.784383214s ago: executing program 2 (id=41): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) 9.163631709s ago: executing program 4 (id=42): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x20008000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 8.823944818s ago: executing program 1 (id=43): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) lseek(r0, 0x2000, 0x0) 8.318932411s ago: executing program 3 (id=44): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x10, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x7, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 8.317485182s ago: executing program 4 (id=45): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x0, 0xa0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, [], [{{0x9, 0x5, 0x7, 0x3, 0x200, 0x3, 0x0, 0x5, {0x6, 0x25, 0x1, 0x2, "9ab5"}}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7, 0x8, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 7.891399201s ago: executing program 3 (id=46): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x9, 0x5, 0x7, 0x59, 0xa, 0x6, 0x9}, 0xc) 7.837823442s ago: executing program 2 (id=47): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x1, 0xf8, 0x3, 0x1, 0x0, 0x7, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.495159252s ago: executing program 3 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 7.201767008s ago: executing program 3 (id=49): socketpair(0x1, 0x100000005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(0xffffffffffffffff, r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0), 0x40, 0x0) preadv(r5, &(0x7f0000000900)=[{&(0x7f0000000800)=""/216, 0xd8}], 0x1, 0x1, 0x8) 6.929035069s ago: executing program 2 (id=50): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d010900040012"], 0x1a8}, 0x1, 0x0, 0x0, 0x15}, 0x20000000) 5.776704188s ago: executing program 3 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r2}) 5.502629455s ago: executing program 2 (id=52): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66, 0x0}}, 0x8) 5.132846372s ago: executing program 2 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000600)) socket(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000400)={0xe, 0x881, &(0x7f0000000040)="70f26d2975ac82bf4f807d809477e33a62825d7227b61872b603", &(0x7f0000000300)="0eb49d7021cdf042c8c690859a9035a1b6476d7181dc7bf8510cc134235ce4b85f704286a99cb72e5737f45c1d1f38538dc5428c7e323db46b8f18ad6f0e9b5e5ebcb045ad60df714b3005718f374014a8636f1168648185da6c88a818a7ed0b71b2a61de8dbf4c86706ce94255fcaf6f3bf88d5eeaeec2c5b975c81d71c72ecfc04dc34beb18abb597c225ab57f134f5966804ff8d194cb17a5bc81a714cb5516af28644e1b4267f5dbf76346a7ae840690f2db7799237c46ff3ef1d6dc70c4d23a384b7ebb", 0x1a, 0xc6}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @empty, 0x4}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10100, 0x8029}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) r6 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 3.657460491s ago: executing program 2 (id=54): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000010000000000000000080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x5bf}, {0x6, 0x0, 0x80, 0x7fff0000}]}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.627044645s ago: executing program 4 (id=55): syz_open_dev$usbfs(0x0, 0x76, 0x80080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgrp(0xffffffffffffffff) tgkill(0x0, r4, 0x1c) 3.5239414s ago: executing program 1 (id=56): r0 = socket$inet6(0xa, 0x80003, 0x6) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 3.415634899s ago: executing program 0 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}}, 0x4040004) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0x10}, {0x5, 0xffff}, {0x3, 0xfff2}}}, 0x24}}, 0x10) 2.070893364s ago: executing program 1 (id=58): r0 = openat(0xffffffffffffffff, 0x0, 0x135100, 0x16b) syz_clone3(0x0, 0x0) fdatasync(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f800800014000000008080003420040004008000240"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 24.262361ms ago: executing program 4 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) 0s ago: executing program 0 (id=60): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 90.328511][ T5582] cgroup: Unknown subsys name 'net' [ 90.581608][ T5582] cgroup: Unknown subsys name 'cpuset' [ 90.634428][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.772766][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.011568][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.037296][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.108019][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.111661][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.119873][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.133397][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.142426][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.155656][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.165447][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.165918][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.182304][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.190343][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.195062][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.205055][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.210123][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.212759][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.218552][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.234071][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.242766][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.245159][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.267070][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.271974][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.293925][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.409604][ T4909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.428710][ T4909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.521949][ T1000] cfg80211: failed to load regulatory.db [ 99.385968][ T5605] Bluetooth: hci2: command tx timeout [ 99.386278][ T4909] Bluetooth: hci1: command tx timeout [ 99.463765][ T4909] Bluetooth: hci3: command tx timeout [ 99.463773][ T5605] Bluetooth: hci0: command tx timeout [ 99.543807][ T4909] Bluetooth: hci4: command tx timeout [ 100.227954][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.229910][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.230454][ T5597] bridge_slave_0: entered allmulticast mode [ 100.239606][ T5597] bridge_slave_0: entered promiscuous mode [ 100.315903][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.317345][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.318892][ T5595] bridge_slave_0: entered allmulticast mode [ 100.328233][ T5595] bridge_slave_0: entered promiscuous mode [ 100.334185][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.334751][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.357137][ T5597] bridge_slave_1: entered allmulticast mode [ 100.365005][ T5597] bridge_slave_1: entered promiscuous mode [ 100.404665][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.404966][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.406460][ T5594] bridge_slave_0: entered allmulticast mode [ 100.413827][ T5594] bridge_slave_0: entered promiscuous mode [ 100.432157][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.432541][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.432996][ T5595] bridge_slave_1: entered allmulticast mode [ 100.459799][ T5595] bridge_slave_1: entered promiscuous mode [ 100.487075][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.487380][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.488766][ T5598] bridge_slave_0: entered allmulticast mode [ 100.506046][ T5598] bridge_slave_0: entered promiscuous mode [ 100.514415][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.517616][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.519311][ T5596] bridge_slave_0: entered allmulticast mode [ 100.530798][ T5596] bridge_slave_0: entered promiscuous mode [ 100.548997][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.549099][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.549548][ T5594] bridge_slave_1: entered allmulticast mode [ 100.551782][ T5594] bridge_slave_1: entered promiscuous mode [ 100.607450][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.614740][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.614899][ T5598] bridge_slave_1: entered allmulticast mode [ 100.617852][ T5598] bridge_slave_1: entered promiscuous mode [ 100.618961][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.619084][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.619219][ T5596] bridge_slave_1: entered allmulticast mode [ 100.621080][ T5596] bridge_slave_1: entered promiscuous mode [ 100.699542][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.766189][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.780305][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.836340][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.848154][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.878209][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.890752][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.911016][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.949906][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.961296][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.012329][ T5597] team0: Port device team_slave_0 added [ 101.070715][ T5595] team0: Port device team_slave_0 added [ 101.079090][ T5597] team0: Port device team_slave_1 added [ 101.116166][ T5594] team0: Port device team_slave_0 added [ 101.126423][ T5595] team0: Port device team_slave_1 added [ 101.148969][ T5598] team0: Port device team_slave_0 added [ 101.159767][ T5596] team0: Port device team_slave_0 added [ 101.167008][ T5594] team0: Port device team_slave_1 added [ 101.206598][ T5598] team0: Port device team_slave_1 added [ 101.213362][ T5596] team0: Port device team_slave_1 added [ 101.251982][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.252081][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.252109][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.349028][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.349111][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.349165][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.354938][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.354996][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.355065][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.459203][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.464179][ T4909] Bluetooth: hci2: command tx timeout [ 101.464274][ T4909] Bluetooth: hci1: command tx timeout [ 101.477174][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.477208][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.480239][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.480252][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.480272][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.545212][ T5605] Bluetooth: hci3: command tx timeout [ 101.545291][ T5605] Bluetooth: hci0: command tx timeout [ 101.577555][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.577635][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.577694][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.585375][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.585424][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.585497][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.609849][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.609910][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.609985][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.623877][ T5605] Bluetooth: hci4: command tx timeout [ 101.683202][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.683254][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.683329][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.760429][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.760489][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.760564][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.458332][ T5597] hsr_slave_0: entered promiscuous mode [ 102.463384][ T5597] hsr_slave_1: entered promiscuous mode [ 102.522392][ T5595] hsr_slave_0: entered promiscuous mode [ 102.527743][ T5595] hsr_slave_1: entered promiscuous mode [ 102.531044][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 102.540001][ T5595] Cannot create hsr debugfs directory [ 102.584997][ T5594] hsr_slave_0: entered promiscuous mode [ 102.591013][ T5594] hsr_slave_1: entered promiscuous mode [ 102.591714][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 102.591731][ T5594] Cannot create hsr debugfs directory [ 102.618621][ T5596] hsr_slave_0: entered promiscuous mode [ 102.622339][ T5596] hsr_slave_1: entered promiscuous mode [ 102.632980][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.633072][ T5596] Cannot create hsr debugfs directory [ 102.649392][ T5598] hsr_slave_0: entered promiscuous mode [ 102.653513][ T5598] hsr_slave_1: entered promiscuous mode [ 102.663888][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.663966][ T5598] Cannot create hsr debugfs directory [ 103.544023][ T5605] Bluetooth: hci1: command tx timeout [ 103.550873][ T4909] Bluetooth: hci2: command tx timeout [ 103.623994][ T4909] Bluetooth: hci3: command tx timeout [ 103.629719][ T5605] Bluetooth: hci0: command tx timeout [ 103.703988][ T5605] Bluetooth: hci4: command tx timeout [ 103.740945][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.798145][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.816385][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.857637][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.872040][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.900162][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.927425][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.960060][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.104835][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.147949][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.158088][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.207033][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.227606][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.257826][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.287424][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.317871][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.472211][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.508247][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.520420][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.550713][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.564536][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.603073][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.638166][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.678153][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.890710][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.930874][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.943574][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.967968][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.983979][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.040937][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.072734][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.098609][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.131927][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.290594][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.327178][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.341158][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.367976][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.376964][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.389460][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.427780][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.442720][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.469657][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.508508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.517542][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.571150][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.579404][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.604947][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.624365][ T5605] Bluetooth: hci1: command tx timeout [ 105.624393][ T4909] Bluetooth: hci2: command tx timeout [ 105.704750][ T5605] Bluetooth: hci0: command tx timeout [ 105.704762][ T4909] Bluetooth: hci3: command tx timeout [ 105.759129][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.783800][ T5605] Bluetooth: hci4: command tx timeout [ 105.811911][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.812427][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.827660][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.883573][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.884303][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.985112][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.095195][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.095598][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.121322][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.229440][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.232996][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.357274][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.409236][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.409766][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.443076][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.510101][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.529142][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.708141][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.785853][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.788962][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.865946][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.876145][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.289954][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.744256][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.891186][ T5597] veth0_vlan: entered promiscuous mode [ 108.004539][ T5597] veth1_vlan: entered promiscuous mode [ 108.372794][ T5597] veth0_macvtap: entered promiscuous mode [ 108.441127][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.451017][ T5597] veth1_macvtap: entered promiscuous mode [ 108.580443][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.637340][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.683401][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.799974][ T5595] veth0_vlan: entered promiscuous mode [ 108.830618][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.018525][ T5595] veth1_vlan: entered promiscuous mode [ 109.026223][ T5596] veth0_vlan: entered promiscuous mode [ 109.258078][ T5596] veth1_vlan: entered promiscuous mode [ 109.270154][ T5598] veth0_vlan: entered promiscuous mode [ 109.380261][ T5598] veth1_vlan: entered promiscuous mode [ 109.442511][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.452235][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.498379][ T5595] veth0_macvtap: entered promiscuous mode [ 109.601255][ T5594] veth0_vlan: entered promiscuous mode [ 109.610914][ T5595] veth1_macvtap: entered promiscuous mode [ 109.621960][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.621984][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.720710][ T5596] veth0_macvtap: entered promiscuous mode [ 109.761570][ T5594] veth1_vlan: entered promiscuous mode [ 109.787552][ T5596] veth1_macvtap: entered promiscuous mode [ 109.804387][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.833138][ T5598] veth0_macvtap: entered promiscuous mode [ 109.843043][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.876346][ T5598] veth1_macvtap: entered promiscuous mode [ 109.935062][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.015516][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.127053][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.260261][ T5594] veth0_macvtap: entered promiscuous mode [ 110.319471][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.429395][ T5594] veth1_macvtap: entered promiscuous mode [ 110.821254][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.821338][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.057780][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.286636][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.460989][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.468526][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.649100][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.649178][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.895325][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.905794][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.271605][ T37] audit: type=1326 audit(1788313115.756:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5792 comm="syz.0.8" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2fde159 code=0x7ffc0000 [ 112.318582][ T37] audit: type=1326 audit(1788313115.796:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5792 comm="syz.0.8" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fb3f2fde159 code=0x7ffc0000 [ 112.319041][ T37] audit: type=1326 audit(1788313115.796:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5792 comm="syz.0.8" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2fde159 code=0x7ffc0000 [ 112.319196][ T37] audit: type=1326 audit(1788313115.796:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5792 comm="syz.0.8" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f2fde159 code=0x7ffc0000 [ 112.349704][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.349773][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.700841][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.708850][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.775841][ T1308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.987577][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.056368][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.056450][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.155025][ T5800] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.636845][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.644537][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.666127][ T1511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.834139][ T1511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.836555][ T1511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.836866][ T1511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.837334][ T1511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.949512][ T1018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.252672][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.262028][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.355672][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.369496][ T1511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.552168][ T1424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.319489][ T5820] zero sized request [ 116.356288][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.518684][ T1018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.574902][ T1018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.575735][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.665546][ T1018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.674593][ T1018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.674807][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.951709][ T5843] Zero length message leads to an empty skb [ 118.832553][ T5859] bridge0: port 3(syz_tun) entered blocking state [ 118.833445][ T5859] bridge0: port 3(syz_tun) entered disabled state [ 118.845948][ T5859] syz_tun: entered allmulticast mode [ 118.851996][ T5859] syz_tun: entered promiscuous mode [ 118.992763][ T5859] bridge0: port 3(syz_tun) entered blocking state [ 119.020306][ T5859] bridge0: port 3(syz_tun) entered forwarding state [ 124.087171][ T5584] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.125394][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.303877][ T5584] usb 5-1: Using ep0 maxpacket: 8 [ 124.317969][ T5584] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.391129][ T5584] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 124.484669][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 124.527694][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.527776][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.527795][ T5584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.527805][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.527819][ T5584] usb 5-1: Product: syz [ 124.527835][ T5584] usb 5-1: Manufacturer: syz [ 124.527839][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.527852][ T5584] usb 5-1: SerialNumber: syz [ 125.642964][ T10] usb 2-1: config 0 descriptor?? [ 126.023734][ T5584] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.043797][ T5584] usb 5-1: MIDIStreaming interface descriptor not found [ 126.123847][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 126.154046][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 126.495699][ T10] usb 2-1: USB disconnect, device number 2 [ 126.762013][ T5926] syz_tun: entered promiscuous mode [ 126.783066][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 126.783154][ T5926] syz_tun: left promiscuous mode [ 127.918812][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 127.964347][ T5584] usb 5-1: USB disconnect, device number 2 [ 128.140098][ T5934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'. [ 128.253798][ T5851] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 129.408167][ T5851] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 129.412565][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.412641][ T5851] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.412666][ T5851] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.466272][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.474522][ T5851] usb 3-1: Product: syz [ 129.474544][ T5851] usb 3-1: Manufacturer: syz [ 129.474561][ T5851] usb 3-1: SerialNumber: syz [ 134.840943][ C0] usb 3-1: received EP1 urb->status = -2 [ 134.843193][ T5851] usb 3-1: unable to init card! (ret=-110) [ 134.845239][ T5851] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 134.868096][ C0] ================================================================== [ 134.868114][ C0] BUG: KASAN: slab-use-after-free in usb_free_urb+0x24/0x120 [ 134.868158][ C0] Write of size 4 at addr ffff88803f7f9050 by task ktimers/0/16 [ 134.868178][ C0] [ 134.868199][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.868225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.868248][ C0] Call Trace: [ 134.868257][ C0] [ 134.868267][ C0] dump_stack_lvl+0xe8/0x150 [ 134.868302][ C0] print_address_description+0x55/0x1e0 [ 134.868347][ C0] ? usb_free_urb+0x24/0x120 [ 134.868368][ C0] print_report+0x58/0x70 [ 134.868398][ C0] kasan_report+0x117/0x150 [ 134.868433][ C0] ? usb_free_urb+0x24/0x120 [ 134.868460][ C0] kasan_check_range+0x264/0x2c0 [ 134.868496][ C0] usb_free_urb+0x24/0x120 [ 134.868520][ C0] dummy_timer+0xaac/0x4d50 [ 134.868564][ C0] ? __lock_acquire+0x6df/0x2e40 [ 134.868594][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 134.868644][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.868670][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 134.868700][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 134.868736][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.868761][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 134.868798][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 134.868835][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 134.868865][ C0] handle_softirqs+0x1da/0x6d0 [ 134.868903][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 134.868938][ C0] run_ktimerd+0x6a/0x100 [ 134.868972][ C0] smpboot_thread_fn+0x565/0xa70 [ 134.869008][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 134.869045][ C0] kthread+0x38b/0x470 [ 134.869067][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 134.869098][ C0] ? __pfx_kthread+0x10/0x10 [ 134.869119][ C0] ret_from_fork+0x514/0xb70 [ 134.869146][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 134.869169][ C0] ? __switch_to+0xc89/0x1420 [ 134.869205][ C0] ? __pfx_kthread+0x10/0x10 [ 134.869228][ C0] ret_from_fork_asm+0x1a/0x30 [ 134.869260][ C0] [ 134.869269][ C0] [ 134.869275][ C0] Allocated by task 5851: [ 134.869287][ C0] kasan_save_track+0x3e/0x80 [ 134.869315][ C0] __kasan_kmalloc+0x93/0xb0 [ 134.869352][ C0] __kmalloc_noprof+0x41d/0x790 [ 134.869381][ C0] snd_card_new+0x7b/0x110 [ 134.869414][ C0] snd_probe+0x236/0x1af0 [ 134.869444][ C0] usb_probe_interface+0x788/0xe50 [ 134.869476][ C0] really_probe+0x254/0xae0 [ 134.869506][ C0] __driver_probe_device+0x1e8/0x360 [ 134.869534][ C0] driver_probe_device+0x4f/0x240 [ 134.869562][ C0] __device_attach_driver+0x270/0x410 [ 134.869590][ C0] bus_for_each_drv+0x25b/0x2f0 [ 134.869610][ C0] __device_attach+0x2c7/0x450 [ 134.869635][ C0] device_initial_probe+0xa1/0xd0 [ 134.869662][ C0] bus_probe_device+0x12d/0x220 [ 134.869681][ C0] device_add+0x7d7/0xb80 [ 134.869704][ C0] usb_set_configuration+0x1ad8/0x2180 [ 134.869733][ C0] usb_generic_driver_probe+0x8d/0x150 [ 134.869761][ C0] usb_probe_device+0x1c3/0x3b0 [ 134.869790][ C0] really_probe+0x254/0xae0 [ 134.869819][ C0] __driver_probe_device+0x1e8/0x360 [ 134.869845][ C0] driver_probe_device+0x4f/0x240 [ 134.869868][ C0] __device_attach_driver+0x270/0x410 [ 134.869892][ C0] bus_for_each_drv+0x25b/0x2f0 [ 134.869912][ C0] __device_attach+0x2c7/0x450 [ 134.869938][ C0] device_initial_probe+0xa1/0xd0 [ 134.869965][ C0] bus_probe_device+0x12d/0x220 [ 134.869985][ C0] device_add+0x7d7/0xb80 [ 134.870008][ C0] usb_new_device+0x99a/0x1680 [ 134.870031][ C0] hub_event+0x28cf/0x4cf0 [ 134.870057][ C0] process_scheduled_works+0xc3d/0x1630 [ 134.870087][ C0] worker_thread+0xa47/0xfb0 [ 134.870122][ C0] kthread+0x38b/0x470 [ 134.870141][ C0] ret_from_fork+0x514/0xb70 [ 134.870160][ C0] ret_from_fork_asm+0x1a/0x30 [ 134.870180][ C0] [ 134.870185][ C0] Freed by task 5851: [ 134.870200][ C0] kasan_save_track+0x3e/0x80 [ 134.870228][ C0] kasan_save_free_info+0x40/0x50 [ 134.870251][ C0] __kasan_slab_free+0x5c/0x80 [ 134.870279][ C0] kfree+0x1c5/0x6d0 [ 134.870312][ C0] device_release+0xc4/0x1f0 [ 134.870373][ C0] kobject_put+0x222/0x550 [ 134.870401][ C0] snd_card_free+0x138/0x1d0 [ 134.870420][ C0] snd_probe+0x162b/0x1af0 [ 134.870448][ C0] usb_probe_interface+0x788/0xe50 [ 134.870479][ C0] really_probe+0x254/0xae0 [ 134.870512][ C0] __driver_probe_device+0x1e8/0x360 [ 134.870544][ C0] driver_probe_device+0x4f/0x240 [ 134.870573][ C0] __device_attach_driver+0x270/0x410 [ 134.870606][ C0] bus_for_each_drv+0x25b/0x2f0 [ 134.870629][ C0] __device_attach+0x2c7/0x450 [ 134.870656][ C0] device_initial_probe+0xa1/0xd0 [ 134.870682][ C0] bus_probe_device+0x12d/0x220 [ 134.870702][ C0] device_add+0x7d7/0xb80 [ 134.870725][ C0] usb_set_configuration+0x1ad8/0x2180 [ 134.870758][ C0] usb_generic_driver_probe+0x8d/0x150 [ 134.870790][ C0] usb_probe_device+0x1c3/0x3b0 [ 134.870824][ C0] really_probe+0x254/0xae0 [ 134.870849][ C0] __driver_probe_device+0x1e8/0x360 [ 134.870988][ C0] driver_probe_device+0x4f/0x240 [ 134.871019][ C0] __device_attach_driver+0x270/0x410 [ 134.871057][ C0] bus_for_each_drv+0x25b/0x2f0 [ 134.871076][ C0] __device_attach+0x2c7/0x450 [ 134.871103][ C0] device_initial_probe+0xa1/0xd0 [ 134.871129][ C0] bus_probe_device+0x12d/0x220 [ 134.871149][ C0] device_add+0x7d7/0xb80 [ 134.871172][ C0] usb_new_device+0x99a/0x1680 [ 134.871195][ C0] hub_event+0x28cf/0x4cf0 [ 134.871221][ C0] process_scheduled_works+0xc3d/0x1630 [ 134.871255][ C0] worker_thread+0xa47/0xfb0 [ 134.871285][ C0] kthread+0x38b/0x470 [ 134.871305][ C0] ret_from_fork+0x514/0xb70 [ 134.871325][ C0] ret_from_fork_asm+0x1a/0x30 [ 134.871345][ C0] [ 134.871351][ C0] The buggy address belongs to the object at ffff88803f7f8000 [ 134.871351][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 134.871372][ C0] The buggy address is located 4176 bytes inside of [ 134.871372][ C0] freed 8192-byte region [ffff88803f7f8000, ffff88803f7fa000) [ 134.871397][ C0] [ 134.871403][ C0] The buggy address belongs to the physical page: [ 134.871425][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3f7f8 [ 134.871447][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.871467][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 134.871495][ C0] page_type: f5(slab) [ 134.871516][ C0] raw: 0080000000000040 ffff88813ff00280 dead000000000100 dead000000000122 [ 134.871537][ C0] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 134.871559][ C0] head: 0080000000000040 ffff88813ff00280 dead000000000100 dead000000000122 [ 134.871579][ C0] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 134.871601][ C0] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 134.871621][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 134.871633][ C0] page dumped because: kasan: bad access detected [ 134.871649][ C0] page_owner tracks the page as allocated [ 134.871657][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5327, tgid 5327 (rcS), ts 68823462016 [ 134.871694][ C0] post_alloc_hook+0x1f9/0x250 [ 134.871720][ C0] get_page_from_freelist+0x2591/0x2600 [ 134.871751][ C0] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 134.871781][ C0] allocate_slab+0x7d/0x620 [ 134.871802][ C0] refill_objects+0x2d8/0x350 [ 134.871823][ C0] __pcs_replace_empty_main+0x339/0x690 [ 134.871865][ C0] __kmalloc_cache_noprof+0x46f/0x680 [ 134.871894][ C0] tomoyo_init_log+0x112f/0x1fa0 [ 134.871922][ C0] tomoyo_supervisor+0x35f/0x1560 [ 134.871948][ C0] tomoyo_env_perm+0x151/0x1f0 [ 134.871979][ C0] tomoyo_find_next_domain+0x1334/0x1a90 [ 134.872013][ C0] tomoyo_bprm_check_security+0x11c/0x180 [ 134.872043][ C0] security_bprm_check+0x85/0x240 [ 134.872071][ C0] bprm_execve+0x881/0x1590 [ 134.872094][ C0] do_execveat_common+0x4f4/0x670 [ 134.872119][ C0] __x64_sys_execve+0x97/0xc0 [ 134.872141][ C0] page last free pid 5318 tgid 5318 ts 68491579849 stack trace: [ 134.872156][ C0] __free_frozen_pages+0xf8e/0x1070 [ 134.872181][ C0] __slab_free+0x250/0x2a0 [ 134.872208][ C0] qlist_free_all+0x99/0x100 [ 134.872232][ C0] kasan_quarantine_reduce+0x148/0x160 [ 134.872257][ C0] __kasan_slab_alloc+0x22/0x80 [ 134.872286][ C0] __kmalloc_noprof+0x3b9/0x790 [ 134.872311][ C0] tomoyo_realpath_from_path+0xef/0x640 [ 134.872338][ C0] tomoyo_path_perm+0x283/0x560 [ 134.872358][ C0] security_inode_getattr+0x12b/0x310 [ 134.872391][ C0] __x64_sys_newfstat+0x133/0x270 [ 134.872422][ C0] do_syscall_64+0x166/0x520 [ 134.872446][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.872469][ C0] [ 134.872475][ C0] Memory state around the buggy address: [ 134.872489][ C0] ffff88803f7f8f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.872506][ C0] ffff88803f7f8f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.872522][ C0] >ffff88803f7f9000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.872534][ C0] ^ [ 134.872547][ C0] ffff88803f7f9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.872562][ C0] ffff88803f7f9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.872574][ C0] ================================================================== [ 134.872599][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.825070][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.834665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.844776][ C0] Call Trace: [ 135.848091][ C0] [ 135.851054][ C0] vpanic+0x56d/0xa60 [ 135.855115][ C0] ? __pfx_vpanic+0x10/0x10 [ 135.859673][ C0] panic+0xc5/0xd0 [ 135.863436][ C0] ? __pfx_panic+0x10/0x10 [ 135.867893][ C0] ? usb_free_urb+0x24/0x120 [ 135.872537][ C0] ? usb_free_urb+0x24/0x120 [ 135.877169][ C0] check_panic_on_warn+0x89/0xb0 [ 135.882149][ C0] ? usb_free_urb+0x24/0x120 [ 135.886814][ C0] end_report+0x73/0x170 [ 135.891140][ C0] ? usb_free_urb+0x24/0x120 [ 135.895772][ C0] kasan_report+0x128/0x150 [ 135.900324][ C0] ? usb_free_urb+0x24/0x120 [ 135.904993][ C0] kasan_check_range+0x264/0x2c0 [ 135.909992][ C0] usb_free_urb+0x24/0x120 [ 135.914461][ C0] dummy_timer+0xaac/0x4d50 [ 135.919028][ C0] ? __lock_acquire+0x6df/0x2e40 [ 135.924038][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 135.929666][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 135.935098][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 135.940382][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 135.945390][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.951274][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 135.956269][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 135.961519][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 135.966684][ C0] handle_softirqs+0x1da/0x6d0 [ 135.971509][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 135.976592][ C0] run_ktimerd+0x6a/0x100 [ 135.980966][ C0] smpboot_thread_fn+0x565/0xa70 [ 135.985941][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 135.991055][ C0] kthread+0x38b/0x470 [ 135.995179][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 136.000683][ C0] ? __pfx_kthread+0x10/0x10 [ 136.005315][ C0] ret_from_fork+0x514/0xb70 [ 136.009956][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 136.015108][ C0] ? __switch_to+0xc89/0x1420 [ 136.019842][ C0] ? __pfx_kthread+0x10/0x10 [ 136.024479][ C0] ret_from_fork_asm+0x1a/0x30 [ 136.029289][ C0] [ 136.032938][ C0] Kernel Offset: disabled [ 136.037291][ C0] Rebooting in 86400 seconds..