last executing test programs: 2.828616342s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x2000) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) 2.546549359s ago: executing program 0 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.133800533s ago: executing program 0 (id=17): r0 = socket$netlink(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) 1.293774687s ago: executing program 1 (id=27): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) 1.210489382s ago: executing program 2 (id=28): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) 1.144855306s ago: executing program 1 (id=29): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e24, 0x2, @local, 0x80000000}, r1, 0xfffffe4d}}, 0x48) 1.109661312s ago: executing program 3 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.020899449s ago: executing program 2 (id=31): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000580)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 928.211954ms ago: executing program 1 (id=32): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="560003000000", 0x6) 866.534071ms ago: executing program 3 (id=33): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000000)=""/247, 0xf7}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000100)=""/147, 0x93}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) 824.944831ms ago: executing program 2 (id=34): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) 696.435716ms ago: executing program 1 (id=35): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 690.106247ms ago: executing program 3 (id=36): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, r0, 0x2) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x46) 613.248194ms ago: executing program 0 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) 586.706016ms ago: executing program 2 (id=38): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0xa9, 0x1, 0x9, 0x200, 0x1a, "3eccd2000500"}) 477.96008ms ago: executing program 3 (id=39): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x2, r1, 0xaa, 0x8, 0x3, 0x8000, 0xa}) 378.20427ms ago: executing program 2 (id=40): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth1_virt_wifi\x00', 0x4}, 0x18) 370.970345ms ago: executing program 0 (id=41): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0x12, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x9, 0x5, 0x128c, 0x1, 'syz0\x00', 0x1}) 359.02118ms ago: executing program 1 (id=42): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) 180.615452ms ago: executing program 3 (id=43): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40044}}], 0x1, 0x5) 74.207129ms ago: executing program 0 (id=44): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 74.055421ms ago: executing program 1 (id=45): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 46.081909ms ago: executing program 2 (id=46): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r0, 0x1) 0s ago: executing program 3 (id=47): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 84.575749][ T5850] cgroup: Unknown subsys name 'net' [ 84.732504][ T5850] cgroup: Unknown subsys name 'cpuset' [ 84.743084][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.499438][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.129984][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.143035][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.152635][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.166534][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.189385][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.199367][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.218918][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.228795][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.249090][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.260980][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.270216][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.270377][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.285596][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.288892][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.295168][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.307973][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.317528][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.334138][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.353941][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.363369][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.886896][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 89.949821][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 90.182192][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 90.195079][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 90.273241][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.281593][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.292522][ T5859] bridge_slave_0: entered allmulticast mode [ 90.302089][ T5859] bridge_slave_0: entered promiscuous mode [ 90.316029][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.324150][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.332097][ T5859] bridge_slave_1: entered allmulticast mode [ 90.341004][ T5859] bridge_slave_1: entered promiscuous mode [ 90.394720][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.402920][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.415561][ T5865] bridge_slave_0: entered allmulticast mode [ 90.424880][ T5865] bridge_slave_0: entered promiscuous mode [ 90.435945][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.445556][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.454849][ T5865] bridge_slave_1: entered allmulticast mode [ 90.463022][ T5865] bridge_slave_1: entered promiscuous mode [ 90.565375][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.580828][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.659797][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.673725][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.759535][ T5859] team0: Port device team_slave_0 added [ 90.816207][ T5859] team0: Port device team_slave_1 added [ 90.827021][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.835585][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.843058][ T5866] bridge_slave_0: entered allmulticast mode [ 90.851973][ T5866] bridge_slave_0: entered promiscuous mode [ 90.860831][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.868638][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.877298][ T5864] bridge_slave_0: entered allmulticast mode [ 90.886005][ T5864] bridge_slave_0: entered promiscuous mode [ 90.896437][ T5865] team0: Port device team_slave_0 added [ 90.935719][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.943708][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.951923][ T5866] bridge_slave_1: entered allmulticast mode [ 90.960027][ T5866] bridge_slave_1: entered promiscuous mode [ 90.967021][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.974504][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.981887][ T5864] bridge_slave_1: entered allmulticast mode [ 90.990051][ T5864] bridge_slave_1: entered promiscuous mode [ 90.998946][ T5865] team0: Port device team_slave_1 added [ 91.006418][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.014283][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.041247][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.054987][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.062063][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.088270][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.199132][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.206143][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.233410][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.247053][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.254834][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.280935][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.294823][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.309609][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.322335][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.332698][ T5867] Bluetooth: hci1: command tx timeout [ 91.336875][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.408734][ T5862] Bluetooth: hci2: command tx timeout [ 91.414800][ T5862] Bluetooth: hci0: command tx timeout [ 91.419881][ T5867] Bluetooth: hci3: command tx timeout [ 91.464871][ T5864] team0: Port device team_slave_0 added [ 91.507229][ T5865] hsr_slave_0: entered promiscuous mode [ 91.514558][ T5865] hsr_slave_1: entered promiscuous mode [ 91.524546][ T5866] team0: Port device team_slave_0 added [ 91.534658][ T5866] team0: Port device team_slave_1 added [ 91.543109][ T5864] team0: Port device team_slave_1 added [ 91.572484][ T5859] hsr_slave_0: entered promiscuous mode [ 91.579405][ T5859] hsr_slave_1: entered promiscuous mode [ 91.586193][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 91.592343][ T5859] Cannot create hsr debugfs directory [ 91.689935][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.696983][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.725765][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.780493][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.787503][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.817599][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.830451][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.837631][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.864419][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.900443][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.907807][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.941070][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.113519][ T5864] hsr_slave_0: entered promiscuous mode [ 92.121270][ T5864] hsr_slave_1: entered promiscuous mode [ 92.127673][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 92.134798][ T5864] Cannot create hsr debugfs directory [ 92.171410][ T5866] hsr_slave_0: entered promiscuous mode [ 92.177941][ T5866] hsr_slave_1: entered promiscuous mode [ 92.184548][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 92.191178][ T5866] Cannot create hsr debugfs directory [ 92.704078][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.717000][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.731267][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.754156][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.820927][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.833126][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.852361][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.864771][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.964298][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.985146][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.005249][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.026080][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.168605][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.186352][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.208356][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.222288][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.335140][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.403079][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.411357][ T5867] Bluetooth: hci1: command tx timeout [ 93.444655][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.452234][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.474297][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.488695][ T5867] Bluetooth: hci0: command tx timeout [ 93.488768][ T5862] Bluetooth: hci3: command tx timeout [ 93.494464][ T5867] Bluetooth: hci2: command tx timeout [ 93.539981][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.547444][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.583230][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.640173][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.673689][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.700926][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.708502][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.737052][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.744343][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.757319][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.776324][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.783702][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.800603][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.820173][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.827663][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.857862][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.865644][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.916256][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.923585][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.480487][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.566957][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.624914][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.695521][ T5865] veth0_vlan: entered promiscuous mode [ 94.713825][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.749662][ T5865] veth1_vlan: entered promiscuous mode [ 94.791816][ T5859] veth0_vlan: entered promiscuous mode [ 94.812764][ T5864] veth0_vlan: entered promiscuous mode [ 94.855446][ T5859] veth1_vlan: entered promiscuous mode [ 94.865042][ T5865] veth0_macvtap: entered promiscuous mode [ 94.888016][ T5864] veth1_vlan: entered promiscuous mode [ 94.900373][ T5865] veth1_macvtap: entered promiscuous mode [ 94.937838][ T5866] veth0_vlan: entered promiscuous mode [ 94.955431][ T5866] veth1_vlan: entered promiscuous mode [ 94.983759][ T5864] veth0_macvtap: entered promiscuous mode [ 95.013138][ T5859] veth0_macvtap: entered promiscuous mode [ 95.025649][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.034878][ T5864] veth1_macvtap: entered promiscuous mode [ 95.057887][ T5859] veth1_macvtap: entered promiscuous mode [ 95.072819][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.114431][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.126953][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.145349][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.155900][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.167540][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.197730][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.214056][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.230509][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.239962][ T5866] veth0_macvtap: entered promiscuous mode [ 95.270460][ T5866] veth1_macvtap: entered promiscuous mode [ 95.282680][ T3485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.293021][ T3485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.320819][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.333732][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.354590][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383269][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392897][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.435857][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.452123][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.474075][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.483600][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.492457][ T5867] Bluetooth: hci1: command tx timeout [ 95.523092][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.557101][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.566579][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.576222][ T5867] Bluetooth: hci3: command tx timeout [ 95.576274][ T5867] Bluetooth: hci0: command tx timeout [ 95.580499][ T5867] Bluetooth: hci2: command tx timeout [ 95.621050][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.630346][ T1336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.648974][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.662287][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.719716][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.740134][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.796875][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.815396][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.819258][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.867569][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.896500][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.141517][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.151288][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.205322][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.227435][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.383791][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432224][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.886059][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.340347][ T10] cfg80211: failed to load regulatory.db [ 97.569882][ T5867] Bluetooth: hci1: command tx timeout [ 97.646515][ T5995] tipc: Started in network mode [ 97.658443][ T5995] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 97.658451][ T5867] Bluetooth: hci2: command tx timeout [ 97.658495][ T5862] Bluetooth: hci0: command tx timeout [ 97.667504][ T5867] Bluetooth: hci3: command tx timeout [ 97.673794][ T5861] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.709102][ T5995] tipc: Enabling of bearer rejected, failed to enable media [ 97.818874][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 97.849090][ T5861] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 97.878377][ T5861] usb 1-1: config 4 has no interface number 0 [ 97.896781][ T5861] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 97.914368][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.932300][ T5861] usb 1-1: Product: syz [ 97.939811][ T5861] usb 1-1: Manufacturer: syz [ 97.944475][ T5861] usb 1-1: SerialNumber: syz [ 98.003573][ T5861] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 98.205141][ T5861] vp7045: USB control message 'out' went wrong. [ 98.225986][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.260235][ T5861] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 98.299102][ T5861] usb 1-1: media controller created [ 98.328369][ T5861] vp7045: USB control message 'out' went wrong. [ 98.336031][ T5861] dvb-usb: MAC address reading failed. [ 98.421247][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.509819][ T5861] vp7045: USB control message 'out' went wrong. [ 98.517597][ T5861] vp7045: USB control message 'out' went wrong. [ 98.560720][ T5861] vp7045: USB control message 'out' went wrong. [ 98.567561][ T5861] usb 1-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 98.594119][ T5861] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 98.705851][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 98.918302][ T5861] rc_core: IR keymap rc-twinhan1027 not found [ 98.924455][ T5861] Registered IR keymap rc-empty [ 98.945896][ T5861] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 98.999384][ T5861] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 99.035841][ T5861] dvb-usb: schedule remote query interval to 400 msecs. [ 99.059250][ T5861] vp7045: USB control message 'out' went wrong. [ 99.074410][ T5861] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 99.160954][ T5861] usb 1-1: USB disconnect, device number 2 [ 99.181731][ T6041] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 99.189690][ T6040] IPVS: stopping backup sync thread 6041 ... [ 99.460701][ T6048] block nbd0: not configured, cannot reconfigure [ 99.496083][ T5861] ================================================================== [ 99.504269][ T5861] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 99.512876][ T5861] Read of size 4 at addr ffff88807cbcd4f0 by task kworker/0:3/5861 [ 99.520929][ T5861] [ 99.523317][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 99.523347][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.523363][ T5861] Workqueue: usb_hub_wq hub_event [ 99.523402][ T5861] Call Trace: [ 99.523412][ T5861] [ 99.523422][ T5861] dump_stack_lvl+0x189/0x250 [ 99.523444][ T5861] ? rcu_is_watching+0x15/0xb0 [ 99.523470][ T5861] ? __kasan_check_byte+0x12/0x40 [ 99.523496][ T5861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.523515][ T5861] ? rcu_is_watching+0x15/0xb0 [ 99.523542][ T5861] ? lock_release+0x4b/0x3e0 [ 99.523568][ T5861] ? __virt_addr_valid+0x1c8/0x5c0 [ 99.523602][ T5861] ? __virt_addr_valid+0x4a5/0x5c0 [ 99.523637][ T5861] print_report+0xca/0x240 [ 99.523658][ T5861] ? media_devnode_unregister+0xe2/0xf0 [ 99.523688][ T5861] kasan_report+0x118/0x150 [ 99.523723][ T5861] ? media_devnode_unregister+0xe2/0xf0 [ 99.523758][ T5861] media_devnode_unregister+0xe2/0xf0 [ 99.523788][ T5861] media_device_unregister+0x37c/0x400 [ 99.523817][ T5861] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 99.523841][ T5861] dvb_usb_adapter_exit+0x8b/0x240 [ 99.523862][ T5861] dvb_usb_device_exit+0x1b6/0x350 [ 99.523882][ T5861] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.523916][ T5861] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 99.523934][ T5861] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 99.523967][ T5861] ? usb_disable_interface+0x31d/0x350 [ 99.523995][ T5861] usb_unbind_interface+0x26e/0x910 [ 99.524025][ T5861] ? __pfx_usb_unbind_interface+0x10/0x10 [ 99.524052][ T5861] device_release_driver_internal+0x4d9/0x800 [ 99.524085][ T5861] bus_remove_device+0x34d/0x410 [ 99.524108][ T5861] device_del+0x511/0x8e0 [ 99.524135][ T5861] ? __pm_runtime_barrier+0x212/0x460 [ 99.524163][ T5861] ? __pfx_device_del+0x10/0x10 [ 99.524187][ T5861] ? __pfx___mutex_lock+0x10/0x10 [ 99.524211][ T5861] usb_disable_device+0x3e9/0x8a0 [ 99.524238][ T5861] usb_disconnect+0x330/0x950 [ 99.524275][ T5861] hub_event+0x1cf5/0x4a20 [ 99.524312][ T5861] ? do_raw_spin_lock+0x121/0x290 [ 99.524345][ T5861] ? register_lock_class+0x51/0x320 [ 99.524376][ T5861] ? __pfx_hub_event+0x10/0x10 [ 99.524398][ T5861] ? process_scheduled_works+0x9ef/0x17b0 [ 99.524428][ T5861] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.524458][ T5861] ? process_scheduled_works+0x9ef/0x17b0 [ 99.524483][ T5861] ? process_scheduled_works+0x9ef/0x17b0 [ 99.524510][ T5861] process_scheduled_works+0xae1/0x17b0 [ 99.524553][ T5861] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.524588][ T5861] worker_thread+0x8a0/0xda0 [ 99.524617][ T5861] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.524654][ T5861] ? __kthread_parkme+0x7b/0x200 [ 99.524688][ T5861] kthread+0x711/0x8a0 [ 99.524732][ T5861] ? __pfx_worker_thread+0x10/0x10 [ 99.524760][ T5861] ? __pfx_kthread+0x10/0x10 [ 99.524796][ T5861] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.524826][ T5861] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.524859][ T5861] ? __pfx_kthread+0x10/0x10 [ 99.524893][ T5861] ret_from_fork+0x47c/0x820 [ 99.524921][ T5861] ? __pfx_ret_from_fork+0x10/0x10 [ 99.524951][ T5861] ? __switch_to_asm+0x39/0x70 [ 99.524973][ T5861] ? __switch_to_asm+0x33/0x70 [ 99.524996][ T5861] ? __pfx_kthread+0x10/0x10 [ 99.525028][ T5861] ret_from_fork_asm+0x1a/0x30 [ 99.525061][ T5861] [ 99.525070][ T5861] [ 99.851515][ T5861] Allocated by task 5861: [ 99.855857][ T5861] kasan_save_track+0x3e/0x80 [ 99.860574][ T5861] __kasan_kmalloc+0x93/0xb0 [ 99.865180][ T5861] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 99.870571][ T5861] __media_device_register+0x58/0x280 [ 99.875958][ T5861] dvb_usb_device_init+0x1bed/0x2580 [ 99.881246][ T5861] usb_probe_interface+0x665/0xc30 [ 99.886396][ T5861] really_probe+0x26d/0x9e0 [ 99.890923][ T5861] __driver_probe_device+0x18c/0x2f0 [ 99.896236][ T5861] driver_probe_device+0x4f/0x430 [ 99.901285][ T5861] __device_attach_driver+0x2ce/0x530 [ 99.906691][ T5861] bus_for_each_drv+0x24e/0x2e0 [ 99.911670][ T5861] __device_attach+0x2b8/0x400 [ 99.916456][ T5861] bus_probe_device+0x185/0x260 [ 99.921402][ T5861] device_add+0x7b6/0xb50 [ 99.925750][ T5861] usb_set_configuration+0x1a87/0x20e0 [ 99.931221][ T5861] usb_generic_driver_probe+0x8d/0x150 [ 99.936798][ T5861] usb_probe_device+0x1c1/0x390 [ 99.941676][ T5861] really_probe+0x26d/0x9e0 [ 99.946198][ T5861] __driver_probe_device+0x18c/0x2f0 [ 99.951503][ T5861] driver_probe_device+0x4f/0x430 [ 99.956643][ T5861] __device_attach_driver+0x2ce/0x530 [ 99.962134][ T5861] bus_for_each_drv+0x24e/0x2e0 [ 99.967210][ T5861] __device_attach+0x2b8/0x400 [ 99.972003][ T5861] bus_probe_device+0x185/0x260 [ 99.976886][ T5861] device_add+0x7b6/0xb50 [ 99.981233][ T5861] usb_new_device+0xa39/0x16f0 [ 99.986102][ T5861] hub_event+0x2958/0x4a20 [ 99.990526][ T5861] process_scheduled_works+0xae1/0x17b0 [ 99.996082][ T5861] worker_thread+0x8a0/0xda0 [ 100.000690][ T5861] kthread+0x711/0x8a0 [ 100.004793][ T5861] ret_from_fork+0x47c/0x820 [ 100.009392][ T5861] ret_from_fork_asm+0x1a/0x30 [ 100.014178][ T5861] [ 100.016508][ T5861] Freed by task 5861: [ 100.020541][ T5861] kasan_save_track+0x3e/0x80 [ 100.025270][ T5861] __kasan_save_free_info+0x46/0x50 [ 100.030516][ T5861] __kasan_slab_free+0x5b/0x80 [ 100.035291][ T5861] kfree+0x199/0x6d0 [ 100.039202][ T5861] media_devnode_release+0x61/0xa0 [ 100.044423][ T5861] device_release+0x99/0x1c0 [ 100.049208][ T5861] kobject_put+0x228/0x480 [ 100.053727][ T5861] media_devnode_unregister+0x6d/0xf0 [ 100.059133][ T5861] media_device_unregister+0x37c/0x400 [ 100.064629][ T5861] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 100.070113][ T5861] dvb_usb_adapter_exit+0x8b/0x240 [ 100.075244][ T5861] dvb_usb_device_exit+0x1b6/0x350 [ 100.080360][ T5861] usb_unbind_interface+0x26e/0x910 [ 100.085570][ T5861] device_release_driver_internal+0x4d9/0x800 [ 100.091660][ T5861] bus_remove_device+0x34d/0x410 [ 100.096610][ T5861] device_del+0x511/0x8e0 [ 100.100960][ T5861] usb_disable_device+0x3e9/0x8a0 [ 100.106086][ T5861] usb_disconnect+0x330/0x950 [ 100.110966][ T5861] hub_event+0x1cf5/0x4a20 [ 100.115401][ T5861] process_scheduled_works+0xae1/0x17b0 [ 100.120970][ T5861] worker_thread+0x8a0/0xda0 [ 100.125592][ T5861] kthread+0x711/0x8a0 [ 100.129700][ T5861] ret_from_fork+0x47c/0x820 [ 100.134326][ T5861] ret_from_fork_asm+0x1a/0x30 [ 100.139122][ T5861] [ 100.141503][ T5861] The buggy address belongs to the object at ffff88807cbcd000 [ 100.141503][ T5861] which belongs to the cache kmalloc-2k of size 2048 [ 100.155571][ T5861] The buggy address is located 1264 bytes inside of [ 100.155571][ T5861] freed 2048-byte region [ffff88807cbcd000, ffff88807cbcd800) [ 100.169742][ T5861] [ 100.172090][ T5861] The buggy address belongs to the physical page: [ 100.178523][ T5861] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cbc8 [ 100.187298][ T5861] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.195844][ T5861] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.203409][ T5861] page_type: f5(slab) [ 100.207500][ T5861] raw: 00fff00000000040 ffff88801a842000 dead000000000122 0000000000000000 [ 100.216120][ T5861] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 100.224720][ T5861] head: 00fff00000000040 ffff88801a842000 dead000000000122 0000000000000000 [ 100.233671][ T5861] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 100.242355][ T5861] head: 00fff00000000003 ffffea0001f2f201 00000000ffffffff 00000000ffffffff [ 100.251050][ T5861] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 100.259745][ T5861] page dumped because: kasan: bad access detected [ 100.266192][ T5861] page_owner tracks the page as allocated [ 100.271924][ T5861] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 98609551269, free_ts 98608075237 [ 100.292878][ T5861] post_alloc_hook+0x240/0x2a0 [ 100.297690][ T5861] get_page_from_freelist+0x21e4/0x22c0 [ 100.303289][ T5861] __alloc_frozen_pages_noprof+0x181/0x370 [ 100.309142][ T5861] alloc_pages_mpol+0x232/0x4a0 [ 100.314032][ T5861] allocate_slab+0x8a/0x330 [ 100.318574][ T5861] ___slab_alloc+0xbd1/0x13f0 [ 100.323345][ T5861] __slab_alloc+0x55/0xa0 [ 100.327705][ T5861] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 100.334144][ T5861] kmalloc_reserve+0x136/0x290 [ 100.338943][ T5861] __alloc_skb+0x142/0x2d0 [ 100.343397][ T5861] mld_newpack+0x13c/0xc40 [ 100.347853][ T5861] add_grhead+0x5a/0x2a0 [ 100.352120][ T5861] add_grec+0x1452/0x1740 [ 100.356555][ T5861] mld_send_initial_cr+0x288/0x550 [ 100.361786][ T5861] mld_dad_work+0x46/0x490 [ 100.366224][ T5861] process_scheduled_works+0xae1/0x17b0 [ 100.371790][ T5861] page last free pid 5232 tgid 5232 stack trace: [ 100.378138][ T5861] __free_frozen_pages+0xbc4/0xd30 [ 100.383277][ T5861] __put_partials+0x146/0x170 [ 100.388062][ T5861] put_cpu_partial+0x17c/0x250 [ 100.392845][ T5861] __slab_free+0x2b9/0x390 [ 100.397287][ T5861] qlist_free_all+0x97/0x140 [ 100.401898][ T5861] kasan_quarantine_reduce+0x148/0x160 [ 100.407386][ T5861] __kasan_slab_alloc+0x22/0x80 [ 100.412260][ T5861] __kmalloc_noprof+0x3c3/0x7f0 [ 100.417309][ T5861] tomoyo_realpath_from_path+0xe3/0x5d0 [ 100.422885][ T5861] tomoyo_path_perm+0x213/0x4b0 [ 100.427751][ T5861] security_inode_getattr+0x12f/0x330 [ 100.433133][ T5861] __x64_sys_newfstat+0xfc/0x200 [ 100.438087][ T5861] do_syscall_64+0xfa/0xfa0 [ 100.442616][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.448525][ T5861] [ 100.450865][ T5861] Memory state around the buggy address: [ 100.456510][ T5861] ffff88807cbcd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.464770][ T5861] ffff88807cbcd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.472870][ T5861] >ffff88807cbcd480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.481039][ T5861] ^ [ 100.488843][ T5861] ffff88807cbcd500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.496931][ T5861] ffff88807cbcd580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.505269][ T5861] ================================================================== [ 100.613605][ T5861] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.620910][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 100.630314][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.640405][ T5861] Workqueue: usb_hub_wq hub_event [ 100.645479][ T5861] Call Trace: [ 100.648789][ T5861] [ 100.651777][ T5861] dump_stack_lvl+0x99/0x250 [ 100.656580][ T5861] ? __asan_memcpy+0x40/0x70 [ 100.661238][ T5861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.666569][ T5861] ? __pfx__printk+0x10/0x10 [ 100.671327][ T5861] vpanic+0x237/0x6d0 [ 100.675358][ T5861] ? __pfx_vpanic+0x10/0x10 [ 100.679910][ T5861] ? preempt_schedule+0xae/0xc0 [ 100.685047][ T5861] ? __pfx_preempt_schedule+0x10/0x10 [ 100.691035][ T5861] panic+0xb9/0xc0 [ 100.694806][ T5861] ? __pfx_panic+0x10/0x10 [ 100.699277][ T5861] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 100.705270][ T5861] ? media_devnode_unregister+0xe2/0xf0 [ 100.710869][ T5861] check_panic_on_warn+0x89/0xb0 [ 100.715953][ T5861] ? media_devnode_unregister+0xe2/0xf0 [ 100.721643][ T5861] end_report+0x78/0x160 [ 100.725941][ T5861] kasan_report+0x129/0x150 [ 100.730524][ T5861] ? media_devnode_unregister+0xe2/0xf0 [ 100.736225][ T5861] media_devnode_unregister+0xe2/0xf0 [ 100.741661][ T5861] media_device_unregister+0x37c/0x400 [ 100.747182][ T5861] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 100.752721][ T5861] dvb_usb_adapter_exit+0x8b/0x240 [ 100.757980][ T5861] dvb_usb_device_exit+0x1b6/0x350 [ 100.763318][ T5861] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.768669][ T5861] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 100.774353][ T5861] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 100.780394][ T5861] ? usb_disable_interface+0x31d/0x350 [ 100.786009][ T5861] usb_unbind_interface+0x26e/0x910 [ 100.791269][ T5861] ? __pfx_usb_unbind_interface+0x10/0x10 [ 100.797048][ T5861] device_release_driver_internal+0x4d9/0x800 [ 100.803267][ T5861] bus_remove_device+0x34d/0x410 [ 100.808251][ T5861] device_del+0x511/0x8e0 [ 100.812680][ T5861] ? __pm_runtime_barrier+0x212/0x460 [ 100.818108][ T5861] ? __pfx_device_del+0x10/0x10 [ 100.823142][ T5861] ? __pfx___mutex_lock+0x10/0x10 [ 100.828209][ T5861] usb_disable_device+0x3e9/0x8a0 [ 100.833278][ T5861] usb_disconnect+0x330/0x950 [ 100.838012][ T5861] hub_event+0x1cf5/0x4a20 [ 100.842483][ T5861] ? do_raw_spin_lock+0x121/0x290 [ 100.847563][ T5861] ? register_lock_class+0x51/0x320 [ 100.852821][ T5861] ? __pfx_hub_event+0x10/0x10 [ 100.857649][ T5861] ? process_scheduled_works+0x9ef/0x17b0 [ 100.863439][ T5861] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.868783][ T5861] ? process_scheduled_works+0x9ef/0x17b0 [ 100.874611][ T5861] ? process_scheduled_works+0x9ef/0x17b0 [ 100.880377][ T5861] process_scheduled_works+0xae1/0x17b0 [ 100.885963][ T5861] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.891968][ T5861] worker_thread+0x8a0/0xda0 [ 100.896579][ T5861] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.902941][ T5861] ? __kthread_parkme+0x7b/0x200 [ 100.907898][ T5861] kthread+0x711/0x8a0 [ 100.911991][ T5861] ? __pfx_worker_thread+0x10/0x10 [ 100.917120][ T5861] ? __pfx_kthread+0x10/0x10 [ 100.921896][ T5861] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.927124][ T5861] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.932344][ T5861] ? __pfx_kthread+0x10/0x10 [ 100.936958][ T5861] ret_from_fork+0x47c/0x820 [ 100.941569][ T5861] ? __pfx_ret_from_fork+0x10/0x10 [ 100.946702][ T5861] ? __switch_to_asm+0x39/0x70 [ 100.951482][ T5861] ? __switch_to_asm+0x33/0x70 [ 100.956343][ T5861] ? __pfx_kthread+0x10/0x10 [ 100.960957][ T5861] ret_from_fork_asm+0x1a/0x30 [ 100.965765][ T5861] [ 100.969376][ T5861] Kernel Offset: disabled [ 100.973723][ T5861] Rebooting in 86400 seconds..