last executing test programs: 5.623297584s ago: executing program 0 (id=19): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) socket$kcm(0x10, 0x2, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = eventfd2(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0xffff, 0xeeee0000, 0x1, r2, 0x8}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (fail_nth: 1) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) 5.387258621s ago: executing program 0 (id=22): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad"], 0x8) 5.084875692s ago: executing program 0 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25010000000000000002410000000c0013", @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000802}, 0x4008000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.155143993s ago: executing program 0 (id=32): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket(0x1, 0x6, 0x7f) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffffffeffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r4, &(0x7f0000000000)=""/7, 0x7, 0x102, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) sendto$inet(r0, &(0x7f0000000180)="d63a4cbd17bd90943175dd36db73afe809d674", 0x13, 0x10048095, 0x0, 0x0) 3.328389866s ago: executing program 1 (id=38): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r4, 0x604) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 3.087388934s ago: executing program 0 (id=40): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r3 = gettid() poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x12) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "6afd6459e33382bfa67646680917424056a5fa8ee21ccc0837b45beb614dca6e576ab4a05c2d0fb4597207319b48f902b741643e606790fc9e944da833b647597bd755ace540601124cf54ceb8cf15f6d6634933de5b086aeb3b906382b381bc3726104a5f2a8bf7c39349d3debbd965e07a902a378b1d105cb77ec200f356"}}}, &(0x7f00000004c0)={0x44, &(0x7f00000006c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.733738095s ago: executing program 1 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) 2.563223522s ago: executing program 1 (id=44): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x5, 0x9, 0x2}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x244418cfd9184fed, 0x0, 0x7ff) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0xffffffffffffff07}, {&(0x7f00000001c0)=""/2, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x0, 0x3938700}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2.271034809s ago: executing program 1 (id=46): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="e2ae564646bf2a97415ccdf211da51cdd2d740e748f63f85e7b1f299f5b05def6228dabc9468127ad8a4c049250503ec265e154906062701dfaa69128f", 0x3d}], 0x1}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) 2.270946244s ago: executing program 3 (id=47): r0 = syz_usbip_server_init(0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f0000000280)) write$usbip_server(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="00000003000000"], 0x11d1) 2.270226238s ago: executing program 1 (id=48): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x1f1481, 0x0) write$proc_mixer(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="4c494e4520274c6931303030303030303030303030303030300a564f4c554d450a4c494e4520274c699f45bc11e32431cd1e2efc006e6520436170"], 0x8c) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) r3 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000700)={0x20, 0x9, 0x6, "a0b41ce04e4f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000340)={0x44, &(0x7f0000000880)={0x0, 0x14, 0x5c, "e44577fc7c886afe3ce4e893acfa63221144eba9fb0d7a76d5ee87d0021fb228ef12a2a28e0293423beb7e220d9a61d4ad21d8693849fd7e8e05a5deda398fa0baca408e35e31b796ccb84febdfb7a6c90c82eec29e66c6c4369a67a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.73132475s ago: executing program 3 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f81, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0a009958bbbbbbbbbbbbbbbbbbd8bbbb88f7"], 0x2e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 1.594325397s ago: executing program 3 (id=52): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) (async, rerun: 32) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0xfccc, 0x2) (async, rerun: 32) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x10, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x8, 0xd5, 0x5, 0x8, 0xc}}}, 0x14) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r4], &(0x7f0000000440)}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000240)={0x0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000280)={r6, r7, 0x5, 0x8000000000000, 0x1}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x2e, 0xa}, {0x9, 0x4, 0xff, 0x0, 0x81}}}}, 0x17) 1.532027248s ago: executing program 3 (id=53): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003800), 0x2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000003840)={0x15, 0x0, [{0x2, 0x25, 0x1, 0x1, 0xe9, 0x1, 0x5}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) 1.42349063s ago: executing program 3 (id=54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) write$sequencer(0xffffffffffffffff, &(0x7f0000000080)=[@l={0x92, 0x8, 0xb0, 0x16, 0xd, 0x7f, 0x81}, @t={0x4, 0x5, 0x6, 0x2}, @s={0x5, @generic=0x88, 0x1, 0x2}], 0x14) 1.403793926s ago: executing program 3 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x1, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) 367.057993ms ago: executing program 2 (id=64): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, {0xa, 0x4e23, 0x3, @remote, 0x7}, r5, 0x7}}, 0x48) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x4c, r2, 0x0, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x4, 0x3}}, 0x18, @val={0x8c, 0x10, {0x95c, "9263e899d608", @short="3eaa012a01acc3a8"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x40000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000300)=0x2f) 366.881365ms ago: executing program 2 (id=65): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x4000) 335.131619ms ago: executing program 2 (id=66): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="e2ae564646bf2a97415ccdf211da51cdd2d740e748f63f85e7b1f299f5b05def6228dabc9468127ad8a4c049250503ec265e154906062701dfaa69128f", 0x3d}], 0x1}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) 289.137313ms ago: executing program 2 (id=67): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 258.95315ms ago: executing program 2 (id=68): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000001c0)={0x500ddbce, "74db199c1e3f95451586ca4e818cb909b5ebd8dac26798c4a06310fc03f5e9c2"}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x247093}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000680)=[@code={0xa, 0x73, {"c481d55d7e00440f20c03505000000440f22c048b843480000000000000f23c00f21f835010006000f23f840870048b80f000000000000000f23c00f21f83501000d000f23f80f2168f30f09470f01cbb96d0800000f322666440f38809f2b49e1c8"}}, @wrmsr={0x1e, 0x1c, {0xce, 0x7}}, @wr_crn={0x46, 0x20, {0x0, 0xfffffffffffffffe}}, @wrmsr={0x1e, 0x20, {0x853, 0xe}}, @wrmsr={0x1e, 0x20, {0x22d, 0x8}}, @rdmsr={0x32, 0x18, {0x996}}, @rdmsr={0x32, 0x18, {0xbf5}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0x0, 0xfff}}, @wr_crn={0x46, 0x20, {0x4, 0x401}}, @uexit={0x0, 0x18, 0x7f}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x40}, @cpuid={0x14, 0x18, {0x0, 0x66}}, @code={0xa, 0x60, {"362666f48f8978d67a5946f4c744240007000000c744240204000000c7442406000000000f011c2446d320c4e24107900bf3000066bad10466b80d0066efc401e056fdb9930a00000f32660f388207"}}, @wrmsr={0x1e, 0x20, {0xb6c, 0x80000008}}, @wrmsr={0x1e, 0x20, {0x40000090, 0x9}}, @uexit={0x0, 0x18, 0xc}, @cpuid={0x14, 0x18, {0x7, 0x8}}, @wrmsr={0x1e, 0x20, {0x83a, 0x83e5}}, @code={0xa, 0x6c, {"66440f79c966400f38805b09c441e1d9242f420f30c421d5f9d866baf80cb8a1328882ef66bafc0cb0f9eec4c299ac2866baf80cb879473f86ef66bafc0cb073ee67660f009cf700a0000066baf80cb85a91568cef66bafc0c66ed"}}], 0x34f}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 182.771965ms ago: executing program 1 (id=69): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000006c0)={{r0}, "c828a14e87039dbfd2597100ee545a93367d4ecc7cadced60a9eb9f92c4b92b96b0c6967c6d489e917da68d1a92e246a5d1bf8425d22ebb27f36554b0b90ab702f43d6346e95d1e47e69b1b0c8c83965601069a36da8d10588375c924624f603ceea7ba99abc103809d31410ca0a0043c4dc30d1d5e17519c05db1663829fcc48ed8c89720026070a1878ed96eea334e9baddefd7873428c10336a69753700d4f7dbabf5c1cb1ae2b10e8a12b75305e4120096ca05e48938250708201fef9da17847372413f18891feea65aa4b323f5bbc8bc0743e1b6d40239eb0256f7828d39e0a5e2626e5da657d87c55e3ea93ec1ed3baacaf4232fff324ea0b0fe2ca5d4fd1f67bd7e82089dd22f03379f05c6b703a459f462257abf656e894e4f16ff1bf2d78e8e7d8f0cfb9f90475d87082f2bbf1a59937a3f720b77bb8b64385d31695721254c0e9d5192557e67353daceb9c1f9ba0f9e4d5bf9996f518aaba5ed21ba6d71a617db284e0c1682987adf860dfe15425168efcb5a6ca4d12f03622822dcb5c80c23d079e17b02a1de4e88380f0f17a999de7e5615900790495fb085934406e8381573adcec0e535fd01b208361a7102ac3334978dd8c018163f3a53d67d0efccfd841222e2f1a968f592f0a88b9882785d1dee7119874c90cb3914a0a00a22dd7dbbd7dcdd029dfbb86678845fe0446cc54e1f9f54ce29e0e2b14c493c51abbdb28f4a0e2758bee814bae8c598581f5c311e4550e55add2c2bc15d8df4d8862fe52beffb84329c90a530a74d3a6e04f39c60505dec91fb618cd06e4c2d1af6942b49a429db77fdafd54b283b0338d97d9994268b6b15cb8656aba231b4c4c1ea28fd819591f207f607ff14f20998f4a3970f4c898f7f7a6156d23fb2ccec4bbbeceb18e5cc81321fbb1e5b8de048c39edde528b91e4e0676287594f3b034c8af0832b8cadfc2b22acc5e346eba44a912f12a283f65246be6a6f51123524b22b9c580448181b1a0124c6df4e8024300c1a1defa2be240a30fa01f8eb43764611a985f7e5f13a01626ffb56c633c4ee82056f1fd64ec106d0670ef664c7b3a8c392e9168025063593b9736b7305c3ce875c3971882332f61de0804578a3de090437023a7d74ecfbf87775e01b84a7f98fa6e01982f1e23e3c1001e597aeb44cc2a19823bb5da7356599f360e303a69c5c1884e79a35c2a18adad01f1fd3822a096fc1c9cc35d9a1902255b715a35581db54d4d7741fb007c55451dfe30e5e0268220261b47281fc6d8e95f026b72e745de362c5d235d880c9758194fc5e4016e10ad7a36bb0e9db53bb3d56130134cd5c193def25161d5db5de42b304f14915f0b8fa4af0900ce4df2949f56f105a6713948c135eb4ccfc390496ef022b35ec4c3ffa97d12dc0c5d88f8249f7ea6b2fdfe017ec1d75f8ca4ab21080fa0a3aad2697790ceea73406f3d229073c7f38b65506d7709468e52e5bd2f3c731e014c09e5fad5b9fb73dc975671f8ade323c059ed615e94c15e9b608ac08cffa2c26c5d16b646de7532bb1f9b2878a2b85b2fb19179392190840354390beb804b81e5277750d35ca1fc1a132d6796c68a56587fd2b5416c821d3bc745c482e86632bb8703e03d48fc7397902286ec6a389ee9d3c3e3718408d8248052a957ab3085687c7027da55399b5a37e1e2805552fdbd7f07a4d306a1d1da230be6560715f4d436fdbe1573834468cbe25cf91d3ae80935f71adb2d3e887b30a4c5d35122dd50625e2560a7016d7eef7faea4fbd06a77fda2a828629c60e28286fd8c174fb36e610631ba49a09912b6710a5677c9e54dbcc4949fd0330ede27163334b4c51316452ad0b2f98bf72f64312a24257562010dabc4f5019b3b16ec3876ffade44884dbf14cdfbda76174c160402cef3bf0ab8cb308b3aacb859fc28f8a8ec51ef3e869df22e23b72f3de3fec6fc21cdd876a5bea0e685590d05ef91b31bf20046be69beff65d18bb52ddc23fa4c53a33e5cbb6f605796d671f56599040df67567d6b14ec451e265e7c2f7e2089b888e69a4b2a04bfa17eb163b308e5e3d47d8e759e547c244196643ceadc486758b03c6d128a844b35566e83c0be11005b29021a0e8b561e3522555d4e541903c83ec309232e988a8283048a7a154798fe69e0d2d988aa1ddfe37139161e365b5fbc2b9b882ff4e4230caa76756f9b9c3aa68b5b44584b6843a8d1015cd1bbb58926b96c85508dec059d455bbabfad9f1b46d9d427c50d544207dda8999ee45c157e53964683dc700eb61d340620e36850cd93e5c3140344d69e1e0bf5dde41ffd56b8a95839d7572c28c9c4d89b6f29e2e11d29915055c0c763c96d67b56a14dfa344c5c4d4fd4e8b1e7756b36883cca367fd9f43e26c3ce3ee9f233ef18109e398c3862efd8d2667aeaa62d069890c0a030accc1c27ad81c427bcc76e0707baa5ed3e6f4700abd90c3b39f042fa0cb50bee3f8f5156bc19432ca0613e345fe6a94c8eceed26ec7a23dfb7adea1fd71aff9c42c85935673e0bc1e5fc15cf8c8ee51679e52e12c7d2381b44b5c22058d6374b0ffd286ee0a57a750124257cb94ba758e95903b72279581304c3100978e06ac0309cee375ed93070bc44a396e529aebb151d2c96e35b7de68c02b1f9c70746531c1f84cb597b9af502feb772a39df1ab2e0a288a9a21409adfd320b1119d3c36acfee83098950b81ff92909c5934e58431f373c154ac1639fe059a02b6ac2c3ecc8a1b521dc0c337fec1713a9b0bbde58a82bf6ea20e7af743fe5ce7c0fce018babef0d1f7061d9a288a1bcd84b28e78b7427acd1e32eac12d9c592122f9cafc9ba82e46767d64b15916243d3660583a4aeaeeb1be42efb52215fa4242466c1113300db178ded01ba2af8ff2ab6f995930f568a53f7f1921fd268a73fcc467cc605f2ce056d1488be9e28a4895d3e9fe2c28a57d12460c62a11d1545727bdbd909d20e659a84aebdf7ea14b035fcdcab52737666ef771989185da91d26dbb7abe8ad97ce74e1828177edf627bfc2c9f01baf1ed30d9a36325c59f861465e06b75f739eef0ec4be50b09cfedc09b3f8c2fef1f7c6f0f279613dab9d6a9e0da272d6be5449057529f0b387f3efc40e9155a324c7e252f922a67860cfa7bf97e4fc41cbd2f3bc0be05ba691dcaee7a6686abe3e5c6644c982b9e7b2411e5bb2d45101cc47d6c9846f819798e30a7f1d3e0758d8e7f33f2854da1c9f9e60f77ce0322e7901b28fed2ce1e9112e0ad07bd29473f308d017f3c98638a93820b35ba036155d2d1636f396d5e96b2d823ea2a1a63bb76fc8c9531c827c2cec86fda1c2198d8d8f51866562acd3df41652c2bb86a97e6f8fadfce64566be209fbcb25991f73bbb8dd94fb490f853e1d25ac0be2218116b06fa0acfcd7474a0e4efde70dd9fd440dff78880f476681d6b1acfda6e000632ab16866d7b323d0a667cc7474396fdd3946a0316325b5d14282844cc8b78ff3453794736ba6036571caf70a61bd7537e0115dfdee25a53fe37345b13303067a466d24fca6c03ed752fe3c13dd0569a67ee50b504b824c785e9a4341470654759d9c82efbe6d8731ab99a69b5bfa91643af5b3f250539b9dca296cb5626ab4ede7b3b0fae460e045f8ff07c0948d5374d50fe6359de2105476cce331c45788802a3b4911b4b462429c408bf99f4d4e69fdd6362e147598a05a22f755dc1d046c4f3d94761a84b2ce2183bb884ccbaa95a871c9bfda0705fbd4b55b548eca14dc60e85cbe1d36260fb209ea03d85280be070740e938e6c9c192a422e7e53a0292b1204584faa0548bc7492d88c6a0c21ec8c5460724dfad3880ec64991fc6acd63418bdb9ca8b735efe795e4be8b16527c1ba292704e383f98d318dc10a8d5c840afdab84303a7f9d9139d14c78928695594521d35d675d2db35ca234e6cbf7516d6fd774c1793dd9e2eca7f5b41dc4a8be9311acd071e58b216fa837f0ff1f59469dfee698d8b46b4579c141a1a42687d1a3cfa1569b02cce4d095703b42cbafeb29d978ef75a45172d28fb792c623d066f3cfb8935c5d454d0b5dba00e816365d2cfe8b0821053701419fd7880a96162ecf2ab1680395e0d9020f8e2cb0ceb375c065834612a04e1c88010b9a942731f297dbf383f6a15391e0bc9baa0409f086d06a5d6bb503a6489045f50162c781e44785a821ce8fa5e0e374d5f35e97bb19a893aa5d80b1a7344c11fdb8938255b3d90406c94fc980749a85407d79d82587626715fe4c2d92488b189b9b07c16a837375aacba6cc464f4e27883c78f5a156c1bc0986813803957fd1166e469930980da14a9a775a805c772970bd440109e053168d42d3d75756187a19e576370f6a948bdd0c4e0897ee8b3af454a82e6ce506906661856255bb20f4627594e93a94e67a14fb3bfdf2fbb613c6cde74bb17ce9d38e162a9e08eef3a6b9a4924c413c112f5ede93cecf507e06f2324cf88dc9efba0f2248598eefe0c2a40b7035a3c35bf5f3755677270b0fc9c5532324417d3ba990a7e6393da41dea4be8f86df7c6ccfe7ed304556dd94fe6220205df06bf88bda03ce49ca1399c7bb1a19de4302ce3686da1537c865c8fa090c7cd7fe33e1087213cef5f7b9a6eae5d92fe37df2cc85b900cb80db0466b62fdd59daa828ac8f8605b2022839f7cd6ee28fe97be769cc8d0d933b9b8effa18f0ed0b2cdd4955c76bd60dd658f9bac31232126bc2c4097a1b60d6dd6488d3d9849741fa31fd1628bc178bdba9c1bfd7a386db4d87b216d9fdcdceb315b25d55db3e7ce6569a6c5b4b9e3915d0efa3bbc7d482900a548e86a3fffbb5bf68972ba7b8c3fb92ef2af7c827930f044921cfa8a668c4da218991109a35154e6f7550fde6c72010cd9cc4e56919b7e9f98ab76c9b86f38b354ce44ced053b864901c7fb33ff2ecb24c54806afd83b66bf79177e3ca81bfdd5da3a25b3d2d565a3491a9872705159f08276ae805191991e5d8b4b34ef0f628b1a041b17ee42e16c470a48619cfebeaf9725b755006e56408c6074509d2f8eca10712a2edac603771442ca3cc0a9a1670a3716518adaee04f1f7c1846f60e0b65d5c80bb9f9e5af37efb309c0a47f3353b1f78578e7915ffa17f648c68ac8db562c0e462d3d22ae7e938042c7c8c94496e10607ef5c248958363c421d7ad7e544bb6e5c2f8b972580914691bd59c705d6b1bd987d7530bc7e2a1111defc356276af80406203aed8f84162450c4d5b9d0c1f00295fc9ac06f53e7d682d001b4f747b1c011671cb3a00d418553e738606518cafa778b0e2a79efbb6c8d70406aec542426aa6ea78be4b67b59cb2525e5ed8fe96c7e0d61b55665ed2618a81414b5f685ec050788ac98e822ee7e59208c9e34aabbf1511be6ff4692e340df94c57bae05f8bbaa6e479636be627a2f93ef1787c0be1ebb8c0fafe2d5f4682100d684cf77e879ce11377db582bf8ef452aef13d7e99700b1b28c991dc8e3ed3e964cb80db2c30654ebf7162af450226fb3756bdd31c1485576197ced76102c43b0321024ee99438bea242ae8440df5ea4f6c42ba79cf39951a32d1b2b468b87a86079d7867cb0554bebef917748531811b07c40271f8fe1da0cad6727acff9e5c97c0aabfbdc149125d1dc53f164369269c2152835ff93747fc575bd52617e3e19cfefbcccaf62d3a76b1a597642089032f85e41c4bc9a962e0bdb45f11c2800f476f7ea073a1834bc12aa763d3fd38c8d1a17adbff05bcf17"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="4e8c741c6e27faab99ac3b4b5c0e7111db0adb4fb1a962d69c951ad7480e4212f48ca8b4874b98b01690b7e084a1b572f950900b79e9e56ddb905489677b2fc877fc3ea3e2b2d92990be138202caebb8f4bd1d6ffe221b5b547d7d801e6da98de85ea890431bc65a21d682890647f26c3a43a6008b"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7}}}}}]}}]}}, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x10) 95.662399ms ago: executing program 2 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=71): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mq_notify(r1, &(0x7f0000000200)={0x0, 0x1e, 0x0, @thr={&(0x7f00000000c0)="088358bd5c2a04e9a58e54ef78a193bd8734c8a0f1012786ba17a8a3479498f3f2fed609cf2b7e26db3784fcda371113ce23514c949022a1d0525de6826be0878315134c7b2bc854d0e9438a4277afe8f8348a2f8a4b5458f4b84609906acdfcdbebd9ea1aa313fc0bebc2e84b5dcc282b6ab90ad1176c69", &(0x7f0000000140)="39f4bf37ac469434530fa35bdac2b740f6902052d4e08f565c2eb450d6fbe3a260f8d74fba286e996af6d7d657ac9b2d354318ccefb834055321f92158497057cb12c1057aeb3ae1ecf1db2caf0ceb415207d28c44a403436990e5bc1f82a31379070884805116a208e8160f40734a06c690f4dba52040f4991ee0b444c382d47ed759c76028f571"}}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x280, 0x2d0, 0x3, @stepwise={{0x8001, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 67.890852][ T5851] cgroup: Unknown subsys name 'net' [ 67.980891][ T5851] cgroup: Unknown subsys name 'cpuset' [ 67.989559][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.467607][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.319335][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325846][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.872509][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.881401][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.888906][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.896804][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.904332][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.912523][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.921519][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.929365][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.953898][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.956470][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.962017][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.969446][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.987170][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.997455][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.007284][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.035866][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.048076][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.056898][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.068040][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.090404][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.480367][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 72.594384][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 72.678542][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 72.741478][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.749179][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.757047][ T5870] bridge_slave_0: entered allmulticast mode [ 72.764142][ T5870] bridge_slave_0: entered promiscuous mode [ 72.804193][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.811478][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.818687][ T5870] bridge_slave_1: entered allmulticast mode [ 72.826708][ T5870] bridge_slave_1: entered promiscuous mode [ 72.944852][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.960686][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 72.970993][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.978258][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.986185][ T5860] bridge_slave_0: entered allmulticast mode [ 72.993171][ T5860] bridge_slave_0: entered promiscuous mode [ 73.002498][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.030526][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.037859][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.045162][ T5860] bridge_slave_1: entered allmulticast mode [ 73.053506][ T5860] bridge_slave_1: entered promiscuous mode [ 73.139544][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.146805][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.153916][ T5865] bridge_slave_0: entered allmulticast mode [ 73.161443][ T5865] bridge_slave_0: entered promiscuous mode [ 73.186749][ T5870] team0: Port device team_slave_0 added [ 73.197397][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.206878][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.214555][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.221987][ T5865] bridge_slave_1: entered allmulticast mode [ 73.229508][ T5865] bridge_slave_1: entered promiscuous mode [ 73.243664][ T5870] team0: Port device team_slave_1 added [ 73.252511][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.336354][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.379544][ T5860] team0: Port device team_slave_0 added [ 73.388461][ T5860] team0: Port device team_slave_1 added [ 73.396739][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.418794][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.426373][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.433508][ T5873] bridge_slave_0: entered allmulticast mode [ 73.440724][ T5873] bridge_slave_0: entered promiscuous mode [ 73.449260][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.456667][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.482737][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.524452][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.531717][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.539231][ T5873] bridge_slave_1: entered allmulticast mode [ 73.546343][ T5873] bridge_slave_1: entered promiscuous mode [ 73.553393][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.561102][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.587073][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.612543][ T5865] team0: Port device team_slave_0 added [ 73.620160][ T5865] team0: Port device team_slave_1 added [ 73.649407][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.656501][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.682418][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.721303][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.731164][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.738404][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.764693][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.809523][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.837996][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.845190][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.871858][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.884796][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.892170][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.918481][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.956330][ T5864] Bluetooth: hci1: command tx timeout [ 73.980839][ T5870] hsr_slave_0: entered promiscuous mode [ 73.987459][ T5870] hsr_slave_1: entered promiscuous mode [ 74.007205][ T5873] team0: Port device team_slave_0 added [ 74.019312][ T5860] hsr_slave_0: entered promiscuous mode [ 74.025797][ T5860] hsr_slave_1: entered promiscuous mode [ 74.031848][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 74.037759][ T5864] Bluetooth: hci0: command tx timeout [ 74.038284][ T5860] Cannot create hsr debugfs directory [ 74.049150][ T5864] Bluetooth: hci2: command tx timeout [ 74.072481][ T5873] team0: Port device team_slave_1 added [ 74.118198][ T5864] Bluetooth: hci3: command tx timeout [ 74.126277][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.133229][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.160410][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.201698][ T5865] hsr_slave_0: entered promiscuous mode [ 74.208407][ T5865] hsr_slave_1: entered promiscuous mode [ 74.214398][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 74.220819][ T5865] Cannot create hsr debugfs directory [ 74.238613][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.246016][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.272262][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.451544][ T5873] hsr_slave_0: entered promiscuous mode [ 74.458462][ T5873] hsr_slave_1: entered promiscuous mode [ 74.464492][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 74.470304][ T5873] Cannot create hsr debugfs directory [ 74.807310][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.818945][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.831213][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.851924][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.900814][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.914518][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.929180][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.940915][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.018390][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.031087][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.041640][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.054768][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.168417][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.179565][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.190965][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.201686][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.327009][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.397069][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.421018][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.435835][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.443029][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.460884][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.479092][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.495897][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.503022][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.543874][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.560646][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.577560][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.594006][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.601186][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.622754][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.629936][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.642313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.649498][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.673509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.680732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.690966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.698068][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.727208][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.734320][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.840705][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.039965][ T5864] Bluetooth: hci1: command tx timeout [ 76.118865][ T5864] Bluetooth: hci2: command tx timeout [ 76.119057][ T5184] Bluetooth: hci0: command tx timeout [ 76.195512][ T5184] Bluetooth: hci3: command tx timeout [ 76.261923][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.349297][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.372086][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.422380][ T5870] veth0_vlan: entered promiscuous mode [ 76.454066][ T5870] veth1_vlan: entered promiscuous mode [ 76.502444][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.514264][ T5860] veth0_vlan: entered promiscuous mode [ 76.546214][ T5860] veth1_vlan: entered promiscuous mode [ 76.579541][ T5870] veth0_macvtap: entered promiscuous mode [ 76.611461][ T5865] veth0_vlan: entered promiscuous mode [ 76.619986][ T5870] veth1_macvtap: entered promiscuous mode [ 76.628500][ T5873] veth0_vlan: entered promiscuous mode [ 76.660380][ T5865] veth1_vlan: entered promiscuous mode [ 76.677775][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.687968][ T5860] veth0_macvtap: entered promiscuous mode [ 76.712534][ T5860] veth1_macvtap: entered promiscuous mode [ 76.722208][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.731396][ T5873] veth1_vlan: entered promiscuous mode [ 76.775104][ T3473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.802976][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.821725][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.831069][ T3473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.843214][ T3473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.864663][ T5865] veth0_macvtap: entered promiscuous mode [ 76.872513][ T3473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.897027][ T3473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.907567][ T3473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920018][ T5865] veth1_macvtap: entered promiscuous mode [ 76.930291][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.939251][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.948887][ T5873] veth0_macvtap: entered promiscuous mode [ 76.989895][ T5873] veth1_macvtap: entered promiscuous mode [ 77.020590][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.054081][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.064849][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.089364][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.124908][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.137916][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.146570][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.148129][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.164783][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175374][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.200425][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.228164][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.237672][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.269328][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.296658][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.317884][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.338651][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.349458][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.379253][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.390415][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.469849][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.489344][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.506853][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.607803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.623653][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.667816][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.683182][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.699842][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.887701][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.911317][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.046262][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.109949][ T5962] Zero length message leads to an empty skb [ 78.128450][ T5184] Bluetooth: hci1: command tx timeout [ 78.196448][ T5184] Bluetooth: hci2: command tx timeout [ 78.198687][ T5864] Bluetooth: hci0: command tx timeout [ 78.215099][ T5942] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.235517][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 78.263162][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.284046][ T5864] Bluetooth: hci3: command tx timeout [ 78.312965][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.351385][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.366234][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.384623][ T5926] usb 3-1: Product: syz [ 78.395085][ T5926] usb 3-1: Manufacturer: syz [ 78.396450][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 78.399700][ T5926] usb 3-1: SerialNumber: syz [ 78.436140][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.464421][ T5942] usb 2-1: config 1 interface 0 has no altsetting 0 [ 78.498767][ T5942] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 78.513916][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.538838][ T5942] usb 2-1: Product: syz [ 78.545034][ T5942] usb 2-1: Manufacturer: syz [ 78.545435][ T43] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 78.549645][ T5942] usb 2-1: SerialNumber: syz [ 78.661149][ T5926] usb 3-1: 0:2 : does not exist [ 78.672699][ T5926] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 78.733081][ T5926] usb 3-1: USB disconnect, device number 2 [ 78.748758][ T43] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 78.779994][ T43] usb 4-1: config 1 has no interface number 0 [ 78.783651][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 78.800160][ T43] usb 4-1: config 1 interface 105 has no altsetting 0 [ 78.829898][ T43] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 78.849194][ T5219] bcm5974 2-1:1.0: could not read from device [ 78.867051][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.876958][ T43] usb 4-1: Product: syz [ 78.882684][ T43] usb 4-1: Manufacturer: syz [ 78.890170][ T5219] bcm5974 2-1:1.0: could not read from device [ 78.901213][ T43] usb 4-1: SerialNumber: syz [ 78.908175][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.928207][ T5219] bcm5974 2-1:1.0: could not read from device [ 78.947899][ T5942] usb 2-1: USB disconnect, device number 2 [ 78.962973][ T5219] bcm5974 2-1:1.0: could not read from device [ 79.508164][ T5977] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 79.725701][ T43] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 79.758903][ T43] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 79.787579][ T43] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 79.797965][ T5987] syzkaller1: entered promiscuous mode [ 79.804261][ T5987] syzkaller1: entered allmulticast mode [ 79.841879][ T43] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 79.883049][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'. [ 80.122357][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 80.195428][ T5864] Bluetooth: hci1: command tx timeout [ 80.275582][ T5864] Bluetooth: hci0: command tx timeout [ 80.328714][ T6006] 9pnet_fd: Insufficient options for proto=fd [ 80.356430][ T5864] Bluetooth: hci3: command tx timeout [ 80.493640][ T6015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.640162][ T6021] netlink: 10 bytes leftover after parsing attributes in process `syz.2.21'. [ 80.662580][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.168770][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -71 [ 81.178015][ T43] usb 4-1: USB disconnect, device number 2 [ 81.202548][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 81.222077][ T43] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 81.230258][ T6037] 9pnet_fd: Insufficient options for proto=fd [ 81.245200][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 81.253384][ T5529] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 81.286580][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 81.294905][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 81.310626][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 81.319472][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 81.365923][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 81.374623][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 81.387013][ T6044] FAULT_INJECTION: forcing a failure. [ 81.387013][ T6044] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.406244][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 81.406267][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.406282][ T6044] Call Trace: [ 81.406288][ T6044] [ 81.406294][ T6044] dump_stack_lvl+0x189/0x250 [ 81.406318][ T6044] ? __pfx____ratelimit+0x10/0x10 [ 81.406340][ T6044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.406354][ T6044] ? __pfx__printk+0x10/0x10 [ 81.406374][ T6044] ? __might_fault+0xb0/0x130 [ 81.406397][ T6044] should_fail_ex+0x414/0x560 [ 81.406417][ T6044] _copy_from_user+0x2d/0xb0 [ 81.406432][ T6044] ___sys_recvmsg+0x12e/0x510 [ 81.406453][ T6044] ? __pfx____sys_recvmsg+0x10/0x10 [ 81.406488][ T6044] ? __fget_files+0x3a0/0x420 [ 81.406519][ T6044] do_recvmmsg+0x307/0x770 [ 81.406545][ T6044] ? __pfx_do_recvmmsg+0x10/0x10 [ 81.406578][ T6044] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.406606][ T6044] __x64_sys_recvmmsg+0x190/0x240 [ 81.406627][ T6044] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 81.406646][ T6044] ? do_syscall_64+0xbe/0xfa0 [ 81.406673][ T6044] do_syscall_64+0xfa/0xfa0 [ 81.406697][ T6044] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.406723][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.406740][ T6044] ? clear_bhb_loop+0x60/0xb0 [ 81.406763][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.406781][ T6044] RIP: 0033:0x7f8ebf38eba9 [ 81.406803][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.406819][ T6044] RSP: 002b:00007f8ec02a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 81.406840][ T6044] RAX: ffffffffffffffda RBX: 00007f8ebf5d5fa0 RCX: 00007f8ebf38eba9 [ 81.406855][ T6044] RDX: 0000000000000001 RSI: 0000200000002080 RDI: 0000000000000004 [ 81.406867][ T6044] RBP: 00007f8ec02a7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.406877][ T6044] R10: 0000000000000122 R11: 0000000000000246 R12: 0000000000000001 [ 81.406889][ T6044] R13: 00007f8ebf5d6038 R14: 00007f8ebf5d5fa0 R15: 00007ffc4cf90bb8 [ 81.406921][ T6044] [ 81.620075][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.756219][ T43] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 81.764354][ T43] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 81.794665][ T43] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 81.815531][ T43] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 82.021391][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 82.061820][ T43] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 82.100334][ T43] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 82.141607][ T43] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 82.225560][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.400679][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.422110][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.434558][ T5926] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 82.449413][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.461117][ T5926] usb 3-1: config 0 descriptor?? [ 82.658611][ T6082] 9pnet_fd: Insufficient options for proto=fd [ 82.831618][ T6086] loop6: detected capacity change from 0 to 2560 [ 82.859363][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.905196][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 82.931164][ T5926] elo 0003:04E7:0030.0001: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 82.954117][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.032406][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.070812][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.089202][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.099986][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.110213][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.119864][ T6086] ldm_validate_partition_table(): Disk read failed. [ 83.139061][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.163560][ T6086] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.179146][ T982] IPVS: starting estimator thread 0... [ 83.181159][ T6086] Dev loop6: unable to read RDB block 0 [ 83.195834][ T6086] loop6: unable to read partition table [ 83.202759][ T6086] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 83.240916][ T43] usb 3-1: USB disconnect, device number 3 [ 83.265472][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.317627][ T6098] IPVS: using max 34 ests per chain, 81600 per kthread [ 83.403133][ T982] IPVS: starting estimator thread 0... [ 83.445120][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 83.459614][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 83.498798][ T6106] warning: `syz.1.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.499099][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.521336][ T6104] IPVS: using max 35 ests per chain, 84000 per kthread [ 83.534187][ T5926] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 83.547988][ T6108] comedi comedi3: comedi_config --init_data is deprecated [ 83.556256][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.564277][ T5926] usb 1-1: Product: syz [ 83.569012][ T5926] usb 1-1: Manufacturer: syz [ 83.573630][ T5926] usb 1-1: SerialNumber: syz [ 83.585743][ T5926] usb 1-1: config 0 descriptor?? [ 83.598534][ T5926] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 83.620063][ T5926] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 83.674441][ T6110] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 83.681122][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.692328][ T6114] 9pnet_fd: Insufficient options for proto=fd [ 83.704413][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 83.715891][ T6111] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 83.724406][ T50] vhci_hcd: stop threads [ 83.729528][ T50] vhci_hcd: release socket [ 83.734838][ T50] vhci_hcd: disconnect device [ 84.025329][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.187038][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 84.195525][ T9] usb 2-1: config 1 has no interface number 0 [ 84.201641][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 84.209486][ T5926] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 84.211881][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 84.220360][ T5926] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 84.224566][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.243562][ T9] usb 2-1: Product: syz [ 84.251131][ T9] usb 2-1: Manufacturer: syz [ 84.256190][ T9] usb 2-1: SerialNumber: syz [ 84.291150][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.302171][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.335428][ T5926] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 84.344144][ T5926] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 84.351547][ T5926] em28xx 1-1:0.0: No AC97 audio processor [ 84.816996][ T30] audit: type=1326 audit(1757643137.252:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.3.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aa0b8eba9 code=0x0 [ 84.848640][ T6143] 9pnet_fd: Insufficient options for proto=fd [ 84.963468][ T6149] futex_wake_op: syz.2.59 tries to shift op by 144; fix this program [ 85.081420][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 85.208158][ T5942] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 85.305108][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.332116][ T9] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 85.354497][ T9] usb 2-1: USB disconnect, device number 3 [ 85.367311][ T9] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 85.381114][ T5942] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 85.395060][ T5942] usb 4-1: config 0 has no interface number 0 [ 85.411947][ T5942] usb 4-1: config 0 interface 41 has no altsetting 0 [ 85.426334][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 85.437962][ T5942] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 85.447480][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 85.457593][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.466027][ T5942] usb 4-1: Product: syz [ 85.470346][ T9] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 85.480650][ T5942] usb 4-1: Manufacturer: syz [ 85.485364][ T5942] usb 4-1: SerialNumber: syz [ 85.501172][ T5942] usb 4-1: config 0 descriptor?? [ 85.524905][ T5942] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 85.712719][ T6168] 9pnet_fd: Insufficient options for proto=fd [ 86.012362][ T982] usb 1-1: USB disconnect, device number 2 [ 86.021578][ T982] em28xx 1-1:0.0: Disconnecting em28xx [ 86.032007][ T982] ================================================================== [ 86.040091][ T982] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 86.048434][ T982] Read of size 4 at addr ffff88807d3014f0 by task kworker/1:2/982 [ 86.056243][ T982] [ 86.058570][ T982] CPU: 1 UID: 0 PID: 982 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 86.058595][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.058609][ T982] Workqueue: usb_hub_wq hub_event [ 86.058635][ T982] Call Trace: [ 86.058644][ T982] [ 86.058652][ T982] dump_stack_lvl+0x189/0x250 [ 86.058673][ T982] ? rcu_is_watching+0x15/0xb0 [ 86.058697][ T982] ? __kasan_check_byte+0x12/0x40 [ 86.058721][ T982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.058739][ T982] ? rcu_is_watching+0x15/0xb0 [ 86.058763][ T982] ? lock_release+0x4b/0x3e0 [ 86.058786][ T982] ? __virt_addr_valid+0x1c8/0x5c0 [ 86.058816][ T982] ? __virt_addr_valid+0x4a5/0x5c0 [ 86.058846][ T982] print_report+0xca/0x240 [ 86.058866][ T982] ? media_devnode_unregister+0xe2/0xf0 [ 86.058893][ T982] kasan_report+0x118/0x150 [ 86.058917][ T982] ? media_devnode_unregister+0xe2/0xf0 [ 86.058954][ T982] media_devnode_unregister+0xe2/0xf0 [ 86.058981][ T982] media_device_unregister+0x37c/0x400 [ 86.059007][ T982] ? em28xx_audio_fini+0x59/0x1b0 [ 86.059032][ T982] em28xx_release_resources+0xac/0x240 [ 86.059064][ T982] em28xx_usb_disconnect+0x19f/0x2f0 [ 86.059094][ T982] usb_unbind_interface+0x26e/0x910 [ 86.059121][ T982] ? __pfx_usb_unbind_interface+0x10/0x10 [ 86.059145][ T982] device_release_driver_internal+0x4d9/0x800 [ 86.059175][ T982] bus_remove_device+0x34d/0x410 [ 86.059196][ T982] device_del+0x511/0x8e0 [ 86.059222][ T982] ? __pfx_device_del+0x10/0x10 [ 86.059244][ T982] ? kobject_put+0x446/0x480 [ 86.059267][ T982] usb_disable_device+0x3e9/0x8a0 [ 86.059292][ T982] usb_disconnect+0x330/0x950 [ 86.059325][ T982] hub_event+0x1cf5/0x4a20 [ 86.059358][ T982] ? do_raw_spin_lock+0x121/0x290 [ 86.059387][ T982] ? register_lock_class+0x51/0x320 [ 86.059416][ T982] ? __pfx_hub_event+0x10/0x10 [ 86.059436][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 86.059463][ T982] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.059489][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 86.059511][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 86.059535][ T982] process_scheduled_works+0xae1/0x17b0 [ 86.059571][ T982] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.059603][ T982] worker_thread+0x8a0/0xda0 [ 86.059628][ T982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 86.059659][ T982] ? __kthread_parkme+0x7b/0x200 [ 86.059688][ T982] kthread+0x711/0x8a0 [ 86.059718][ T982] ? __pfx_worker_thread+0x10/0x10 [ 86.059741][ T982] ? __pfx_kthread+0x10/0x10 [ 86.059769][ T982] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.059795][ T982] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.059823][ T982] ? __pfx_kthread+0x10/0x10 [ 86.059851][ T982] ret_from_fork+0x47c/0x820 [ 86.059874][ T982] ? __pfx_ret_from_fork+0x10/0x10 [ 86.059900][ T982] ? __switch_to_asm+0x39/0x70 [ 86.059921][ T982] ? __switch_to_asm+0x33/0x70 [ 86.059945][ T982] ? __pfx_kthread+0x10/0x10 [ 86.059973][ T982] ret_from_fork_asm+0x1a/0x30 [ 86.060003][ T982] [ 86.060010][ T982] [ 86.352699][ T982] Allocated by task 5926: [ 86.357016][ T982] kasan_save_track+0x3e/0x80 [ 86.361690][ T982] __kasan_kmalloc+0x93/0xb0 [ 86.366269][ T982] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 86.371640][ T982] __media_device_register+0x58/0x280 [ 86.377004][ T982] em28xx_usb_probe+0x1764/0x2a20 [ 86.382059][ T982] usb_probe_interface+0x665/0xc30 [ 86.387256][ T982] really_probe+0x26d/0x9e0 [ 86.391759][ T982] __driver_probe_device+0x18c/0x2f0 [ 86.397044][ T982] driver_probe_device+0x4f/0x430 [ 86.402072][ T982] __device_attach_driver+0x2ce/0x530 [ 86.407438][ T982] bus_for_each_drv+0x24e/0x2e0 [ 86.412296][ T982] __device_attach+0x2b8/0x400 [ 86.417065][ T982] bus_probe_device+0x185/0x260 [ 86.421915][ T982] device_add+0x7b6/0xb50 [ 86.426237][ T982] usb_set_configuration+0x1a87/0x20e0 [ 86.431693][ T982] usb_generic_driver_probe+0x8d/0x150 [ 86.437149][ T982] usb_probe_device+0x1c1/0x390 [ 86.442003][ T982] really_probe+0x26d/0x9e0 [ 86.446502][ T982] __driver_probe_device+0x18c/0x2f0 [ 86.451789][ T982] driver_probe_device+0x4f/0x430 [ 86.456831][ T982] __device_attach_driver+0x2ce/0x530 [ 86.462208][ T982] bus_for_each_drv+0x24e/0x2e0 [ 86.467056][ T982] __device_attach+0x2b8/0x400 [ 86.471819][ T982] bus_probe_device+0x185/0x260 [ 86.476659][ T982] device_add+0x7b6/0xb50 [ 86.480997][ T982] usb_new_device+0xa39/0x16f0 [ 86.485755][ T982] hub_event+0x2958/0x4a20 [ 86.490163][ T982] process_scheduled_works+0xae1/0x17b0 [ 86.495698][ T982] worker_thread+0x8a0/0xda0 [ 86.500277][ T982] kthread+0x711/0x8a0 [ 86.504335][ T982] ret_from_fork+0x47c/0x820 [ 86.508916][ T982] ret_from_fork_asm+0x1a/0x30 [ 86.513668][ T982] [ 86.515975][ T982] Freed by task 982: [ 86.519850][ T982] kasan_save_track+0x3e/0x80 [ 86.524519][ T982] __kasan_save_free_info+0x46/0x50 [ 86.529710][ T982] __kasan_slab_free+0x5b/0x80 [ 86.534463][ T982] kfree+0x199/0x6d0 [ 86.538341][ T982] media_devnode_release+0x61/0xa0 [ 86.543446][ T982] device_release+0x99/0x1c0 [ 86.548027][ T982] kobject_put+0x228/0x480 [ 86.552430][ T982] media_devnode_unregister+0x6d/0xf0 [ 86.557789][ T982] media_device_unregister+0x37c/0x400 [ 86.563240][ T982] em28xx_release_resources+0xac/0x240 [ 86.568692][ T982] em28xx_usb_disconnect+0x19f/0x2f0 [ 86.573968][ T982] usb_unbind_interface+0x26e/0x910 [ 86.579153][ T982] device_release_driver_internal+0x4d9/0x800 [ 86.585208][ T982] bus_remove_device+0x34d/0x410 [ 86.590143][ T982] device_del+0x511/0x8e0 [ 86.594478][ T982] usb_disable_device+0x3e9/0x8a0 [ 86.599499][ T982] usb_disconnect+0x330/0x950 [ 86.604263][ T982] hub_event+0x1cf5/0x4a20 [ 86.608674][ T982] process_scheduled_works+0xae1/0x17b0 [ 86.614207][ T982] worker_thread+0x8a0/0xda0 [ 86.618788][ T982] kthread+0x711/0x8a0 [ 86.622851][ T982] ret_from_fork+0x47c/0x820 [ 86.627433][ T982] ret_from_fork_asm+0x1a/0x30 [ 86.632186][ T982] [ 86.634492][ T982] The buggy address belongs to the object at ffff88807d301000 [ 86.634492][ T982] which belongs to the cache kmalloc-2k of size 2048 [ 86.648533][ T982] The buggy address is located 1264 bytes inside of [ 86.648533][ T982] freed 2048-byte region [ffff88807d301000, ffff88807d301800) [ 86.662489][ T982] [ 86.664818][ T982] The buggy address belongs to the physical page: [ 86.671225][ T982] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d300 [ 86.679969][ T982] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.688456][ T982] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 86.696424][ T982] page_type: f5(slab) [ 86.700409][ T982] raw: 00fff00000000040 ffff88801a842000 0000000000000000 0000000000000001 [ 86.708974][ T982] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 86.717542][ T982] head: 00fff00000000040 ffff88801a842000 0000000000000000 0000000000000001 [ 86.726288][ T982] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 86.734947][ T982] head: 00fff00000000003 ffffea0001f4c001 00000000ffffffff 00000000ffffffff [ 86.743615][ T982] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 86.752269][ T982] page dumped because: kasan: bad access detected [ 86.758668][ T982] page_owner tracks the page as allocated [ 86.764363][ T982] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5870, tgid 5870 (syz-executor), ts 76230497173, free_ts 76218031539 [ 86.785712][ T982] post_alloc_hook+0x240/0x2a0 [ 86.790469][ T982] get_page_from_freelist+0x21e4/0x22c0 [ 86.796006][ T982] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.801802][ T982] alloc_pages_mpol+0x232/0x4a0 [ 86.806638][ T982] allocate_slab+0x8a/0x330 [ 86.811134][ T982] ___slab_alloc+0xbd1/0x13f0 [ 86.815800][ T982] __slab_alloc+0x55/0xa0 [ 86.820117][ T982] __kmalloc_cache_noprof+0x411/0x6f0 [ 86.825479][ T982] rtnl_newlink+0xed/0x1c70 [ 86.829982][ T982] rtnetlink_rcv_msg+0x7cc/0xb70 [ 86.834916][ T982] netlink_rcv_skb+0x205/0x470 [ 86.839677][ T982] netlink_unicast+0x82f/0x9e0 [ 86.844531][ T982] netlink_sendmsg+0x805/0xb30 [ 86.849278][ T982] __sock_sendmsg+0x219/0x270 [ 86.853953][ T982] __sys_sendto+0x3bd/0x520 [ 86.858451][ T982] __x64_sys_sendto+0xde/0x100 [ 86.863228][ T982] page last free pid 5939 tgid 5939 stack trace: [ 86.869539][ T982] __free_frozen_pages+0xbc4/0xd30 [ 86.874640][ T982] __put_partials+0x146/0x170 [ 86.879306][ T982] put_cpu_partial+0x17c/0x250 [ 86.884062][ T982] __slab_free+0x2b9/0x390 [ 86.888473][ T982] qlist_free_all+0x97/0x140 [ 86.893050][ T982] kasan_quarantine_reduce+0x148/0x160 [ 86.898499][ T982] __kasan_slab_alloc+0x22/0x80 [ 86.903334][ T982] __kmalloc_noprof+0x3c3/0x7f0 [ 86.908174][ T982] tomoyo_realpath_from_path+0xe3/0x5d0 [ 86.913719][ T982] tomoyo_path_perm+0x213/0x4b0 [ 86.918555][ T982] security_inode_getattr+0x12f/0x330 [ 86.923913][ T982] __x64_sys_newfstat+0xfc/0x200 [ 86.928843][ T982] do_syscall_64+0xfa/0xfa0 [ 86.933342][ T982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.939228][ T982] [ 86.941542][ T982] Memory state around the buggy address: [ 86.947155][ T982] ffff88807d301380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.955211][ T982] ffff88807d301400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.963258][ T982] >ffff88807d301480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.971301][ T982] ^ [ 86.978997][ T982] ffff88807d301500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.987045][ T982] ffff88807d301580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.995095][ T982] ================================================================== [ 87.003303][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.023737][ T980] cfg80211: failed to load regulatory.db [ 87.057969][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.71'. [ 87.070235][ T982] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.077455][ T982] CPU: 1 UID: 0 PID: 982 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 87.086732][ T982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.096779][ T982] Workqueue: usb_hub_wq hub_event [ 87.101804][ T982] Call Trace: [ 87.105080][ T982] [ 87.108000][ T982] dump_stack_lvl+0x99/0x250 [ 87.112580][ T982] ? __asan_memcpy+0x40/0x70 [ 87.117177][ T982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.122373][ T982] ? __pfx__printk+0x10/0x10 [ 87.126971][ T982] vpanic+0x237/0x6d0 [ 87.130959][ T982] ? __pfx_vpanic+0x10/0x10 [ 87.135458][ T982] ? preempt_schedule+0xae/0xc0 [ 87.140324][ T982] ? __pfx_preempt_schedule+0x10/0x10 [ 87.145698][ T982] panic+0xb9/0xc0 [ 87.149413][ T982] ? __pfx_panic+0x10/0x10 [ 87.153827][ T982] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 87.159717][ T982] ? media_devnode_unregister+0xe2/0xf0 [ 87.165257][ T982] check_panic_on_warn+0x89/0xb0 [ 87.170184][ T982] ? media_devnode_unregister+0xe2/0xf0 [ 87.175726][ T982] end_report+0x78/0x160 [ 87.179964][ T982] kasan_report+0x129/0x150 [ 87.184472][ T982] ? media_devnode_unregister+0xe2/0xf0 [ 87.190014][ T982] media_devnode_unregister+0xe2/0xf0 [ 87.195379][ T982] media_device_unregister+0x37c/0x400 [ 87.200840][ T982] ? em28xx_audio_fini+0x59/0x1b0 [ 87.205854][ T982] em28xx_release_resources+0xac/0x240 [ 87.211317][ T982] em28xx_usb_disconnect+0x19f/0x2f0 [ 87.216602][ T982] usb_unbind_interface+0x26e/0x910 [ 87.221803][ T982] ? __pfx_usb_unbind_interface+0x10/0x10 [ 87.227517][ T982] device_release_driver_internal+0x4d9/0x800 [ 87.233579][ T982] bus_remove_device+0x34d/0x410 [ 87.238508][ T982] device_del+0x511/0x8e0 [ 87.242831][ T982] ? __pfx_device_del+0x10/0x10 [ 87.247670][ T982] ? kobject_put+0x446/0x480 [ 87.252269][ T982] usb_disable_device+0x3e9/0x8a0 [ 87.257292][ T982] usb_disconnect+0x330/0x950 [ 87.261970][ T982] hub_event+0x1cf5/0x4a20 [ 87.266385][ T982] ? do_raw_spin_lock+0x121/0x290 [ 87.271407][ T982] ? register_lock_class+0x51/0x320 [ 87.276603][ T982] ? __pfx_hub_event+0x10/0x10 [ 87.281362][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 87.287074][ T982] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.292275][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 87.297985][ T982] ? process_scheduled_works+0x9ef/0x17b0 [ 87.303697][ T982] process_scheduled_works+0xae1/0x17b0 [ 87.309245][ T982] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.315219][ T982] worker_thread+0x8a0/0xda0 [ 87.319802][ T982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.326132][ T982] ? __kthread_parkme+0x7b/0x200 [ 87.331086][ T982] kthread+0x711/0x8a0 [ 87.335167][ T982] ? __pfx_worker_thread+0x10/0x10 [ 87.340282][ T982] ? __pfx_kthread+0x10/0x10 [ 87.344869][ T982] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.350066][ T982] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.355264][ T982] ? __pfx_kthread+0x10/0x10 [ 87.359862][ T982] ret_from_fork+0x47c/0x820 [ 87.364463][ T982] ? __pfx_ret_from_fork+0x10/0x10 [ 87.369588][ T982] ? __switch_to_asm+0x39/0x70 [ 87.374360][ T982] ? __switch_to_asm+0x33/0x70 [ 87.379122][ T982] ? __pfx_kthread+0x10/0x10 [ 87.383724][ T982] ret_from_fork_asm+0x1a/0x30 [ 87.388491][ T982] [ 87.391791][ T982] Kernel Offset: disabled [ 87.396104][ T982] Rebooting in 86400 seconds..