last executing test programs: 3.97348771s ago: executing program 1 (id=2): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 3.930102552s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x30, 0xe, 0x5, 0x0, 0x3, 0xa, 0xa, 0x8, 0x80, 0x9, 0x2, 0xe, 0x0, 0xd, 0xff, 0x2, 0x5, 0x1, 0x5, '\x00', 0x6, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.729775032s ago: executing program 3 (id=4): fanotify_init(0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4008014) 3.631272659s ago: executing program 1 (id=8): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r2, 0x0], 0x3}) 3.528691608s ago: executing program 1 (id=9): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101"], 0x0) 3.502942618s ago: executing program 3 (id=10): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 3.401560083s ago: executing program 2 (id=11): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f88", 0xd}], 0x1}, 0x0) 3.379995166s ago: executing program 2 (id=12): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0x6, 0x7}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r4) 2.385384793s ago: executing program 3 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.104433815s ago: executing program 0 (id=17): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r2, 0x0], 0x3}) 1.83306723s ago: executing program 0 (id=18): fanotify_init(0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x4008014) 1.825147412s ago: executing program 3 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0x30, 0xe, 0x5, 0x0, 0x3, 0xa, 0xa, 0x8, 0x80, 0x9, 0x2, 0xe, 0x0, 0xd, 0xff, 0x2, 0x5, 0x1, 0x5, '\x00', 0x6, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.476147031s ago: executing program 0 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x100000011, @private=0xa010102, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 1.225511842s ago: executing program 0 (id=21): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 1.119582901s ago: executing program 2 (id=22): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffd, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x109140, 0x1) write$FUSE_INIT(r0, &(0x7f0000000480)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff223ca06, 0x1ab, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) creat(&(0x7f0000000240)='./file0/file0\x00', 0x4f) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xb0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 975.724515ms ago: executing program 3 (id=23): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 359.754774ms ago: executing program 0 (id=24): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x15, 0x7, 0x0, 0x180, 0x4, 0x4, 0xf1, 0x3, 0x400007ff, 0x5, 0x2, 0x9, 0xe7fe, 0x5, 0x0, 0xbdb], 0x1, 0x2cd280}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 160.58854ms ago: executing program 2 (id=25): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 20.125969ms ago: executing program 0 (id=26): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 18.884489ms ago: executing program 1 (id=27): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r1, r3, 0x0], 0x3}) 0s ago: executing program 2 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 68.875590][ T5849] cgroup: Unknown subsys name 'net' [ 69.008141][ T5849] cgroup: Unknown subsys name 'cpuset' [ 69.017024][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.501991][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.388518][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.394969][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.840703][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.855003][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.864930][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.885369][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.893162][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.989214][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.005251][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.012915][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.046309][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.055668][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.065190][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.085264][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.105518][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.113615][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.136825][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.149751][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.155092][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.165958][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.173329][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.225137][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.394485][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 73.604407][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.612618][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.620379][ T5858] bridge_slave_0: entered allmulticast mode [ 73.628143][ T5858] bridge_slave_0: entered promiscuous mode [ 73.659353][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.667031][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.674208][ T5858] bridge_slave_1: entered allmulticast mode [ 73.681634][ T5858] bridge_slave_1: entered promiscuous mode [ 73.812917][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.827678][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 73.842271][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.919888][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 73.932456][ T5858] team0: Port device team_slave_0 added [ 73.980599][ T5858] team0: Port device team_slave_1 added [ 74.090929][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.098268][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.124243][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.137095][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 74.152997][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.160324][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.167682][ T5867] bridge_slave_0: entered allmulticast mode [ 74.175260][ T5867] bridge_slave_0: entered promiscuous mode [ 74.183406][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.190427][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.216989][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.247266][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.254414][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.261805][ T5867] bridge_slave_1: entered allmulticast mode [ 74.270537][ T5867] bridge_slave_1: entered promiscuous mode [ 74.342096][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.386431][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.411062][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.418721][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.426262][ T5862] bridge_slave_0: entered allmulticast mode [ 74.433258][ T5862] bridge_slave_0: entered promiscuous mode [ 74.469321][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.476910][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.484069][ T5862] bridge_slave_1: entered allmulticast mode [ 74.491431][ T5862] bridge_slave_1: entered promiscuous mode [ 74.518994][ T5858] hsr_slave_0: entered promiscuous mode [ 74.525744][ T5858] hsr_slave_1: entered promiscuous mode [ 74.575678][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.586517][ T5867] team0: Port device team_slave_0 added [ 74.605871][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.613656][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.621200][ T5864] bridge_slave_0: entered allmulticast mode [ 74.628937][ T5864] bridge_slave_0: entered promiscuous mode [ 74.639371][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.650282][ T5867] team0: Port device team_slave_1 added [ 74.675548][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.682730][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.690124][ T5864] bridge_slave_1: entered allmulticast mode [ 74.698038][ T5864] bridge_slave_1: entered promiscuous mode [ 74.790582][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.797645][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.824032][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.848650][ T5862] team0: Port device team_slave_0 added [ 74.857501][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.875265][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.882225][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.909398][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.922515][ T5862] team0: Port device team_slave_1 added [ 74.931851][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.985954][ T5868] Bluetooth: hci0: command tx timeout [ 75.036844][ T5864] team0: Port device team_slave_0 added [ 75.051704][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.059099][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.085091][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.097953][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.105003][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.131017][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.155065][ T5864] team0: Port device team_slave_1 added [ 75.228876][ T5868] Bluetooth: hci2: command tx timeout [ 75.228883][ T5870] Bluetooth: hci1: command tx timeout [ 75.247637][ T5867] hsr_slave_0: entered promiscuous mode [ 75.253920][ T5867] hsr_slave_1: entered promiscuous mode [ 75.260207][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 75.266671][ T5867] Cannot create hsr debugfs directory [ 75.305753][ T5868] Bluetooth: hci3: command tx timeout [ 75.307319][ T5862] hsr_slave_0: entered promiscuous mode [ 75.318539][ T5862] hsr_slave_1: entered promiscuous mode [ 75.324560][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 75.330794][ T5862] Cannot create hsr debugfs directory [ 75.352521][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.359601][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.385891][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.427718][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.434684][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.461420][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.599089][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.641084][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.657509][ T5864] hsr_slave_0: entered promiscuous mode [ 75.663757][ T5864] hsr_slave_1: entered promiscuous mode [ 75.670353][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 75.676495][ T5864] Cannot create hsr debugfs directory [ 75.702090][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.712588][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.997962][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.011972][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.030658][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.041764][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.137604][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.151367][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.180843][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.191028][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.251320][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.272513][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.298485][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.310314][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.320936][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.355845][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.379383][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.386784][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.422901][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.430101][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.483934][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.559630][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.570200][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.601910][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.616893][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.624043][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.661910][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.669130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.740886][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.751495][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.784157][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.813508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.820739][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.863101][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.870388][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.886877][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.932868][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.940019][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.976462][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.983605][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.011192][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.065995][ T5868] Bluetooth: hci0: command tx timeout [ 77.232070][ T5858] veth0_vlan: entered promiscuous mode [ 77.276594][ T5858] veth1_vlan: entered promiscuous mode [ 77.306021][ T5868] Bluetooth: hci1: command tx timeout [ 77.308642][ T5870] Bluetooth: hci2: command tx timeout [ 77.344236][ T5858] veth0_macvtap: entered promiscuous mode [ 77.357074][ T5858] veth1_macvtap: entered promiscuous mode [ 77.385396][ T5870] Bluetooth: hci3: command tx timeout [ 77.395919][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.410408][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.474172][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.500760][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.540337][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.563612][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.629288][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.641040][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.675274][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.690175][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.716889][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.775153][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.783600][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.810113][ T5862] veth0_vlan: entered promiscuous mode [ 77.858205][ T5864] veth0_vlan: entered promiscuous mode [ 77.874188][ T5867] veth0_vlan: entered promiscuous mode [ 77.882528][ T5862] veth1_vlan: entered promiscuous mode [ 77.901201][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.921944][ T5867] veth1_vlan: entered promiscuous mode [ 77.966428][ T5864] veth1_vlan: entered promiscuous mode [ 78.033627][ T5862] veth0_macvtap: entered promiscuous mode [ 78.044643][ T5867] veth0_macvtap: entered promiscuous mode [ 78.058352][ T5862] veth1_macvtap: entered promiscuous mode [ 78.071723][ T5867] veth1_macvtap: entered promiscuous mode [ 78.101381][ T5864] veth0_macvtap: entered promiscuous mode [ 78.131947][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.142961][ T5864] veth1_macvtap: entered promiscuous mode [ 78.167576][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.193884][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.211156][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.224283][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.243101][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.262096][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.281465][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.292333][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.320163][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.380167][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.439628][ T1149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.450996][ T1149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.523895][ T1149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.599291][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.640513][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.677977][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.727421][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.753917][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.780852][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.832390][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.855169][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.954889][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.973150][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.039369][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.063986][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.080004][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.115967][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.146017][ T5870] Bluetooth: hci0: command tx timeout [ 79.233728][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.286332][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.301672][ T5956] tipc: Started in network mode [ 79.314357][ T5956] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.323026][ T5956] tipc: Enabled bearer , priority 10 [ 79.349985][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.386591][ T5870] Bluetooth: hci2: command tx timeout [ 79.386666][ T5868] Bluetooth: hci1: command tx timeout [ 79.467727][ T5868] Bluetooth: hci3: command tx timeout [ 79.598058][ T30] audit: type=1326 audit(1757627285.181:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5961 comm="syz.0.7" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0865b8eba9 code=0x0 [ 80.015314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 80.155483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.164263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.188263][ T5925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.358280][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 80.435943][ T43] tipc: Node number set to 2886997162 [ 80.482841][ T5925] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 80.495142][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.529503][ T5925] usb 2-1: config 0 has no interface number 0 [ 80.555227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.575511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.613240][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 80.631733][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.682009][ T5925] usb 2-1: Product: syz [ 80.696137][ T5925] usb 2-1: Manufacturer: syz [ 80.761416][ T5925] usb 2-1: SerialNumber: syz [ 80.766796][ T5996] tipc: Enabling of bearer rejected, already enabled [ 80.817149][ T5925] usb 2-1: config 0 descriptor?? [ 80.835109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.880465][ T5925] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 80.896515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.907905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.971554][ T5925] usb 2-1: No streaming interface found for terminal 6. [ 81.043687][ T6000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.225812][ T5868] Bluetooth: hci0: command tx timeout [ 81.465276][ T5868] Bluetooth: hci1: command tx timeout [ 81.477131][ T5868] Bluetooth: hci2: command tx timeout [ 81.545271][ T5868] Bluetooth: hci3: command tx timeout [ 81.805338][ T9] IPVS: starting estimator thread 0... [ 81.945339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.964914][ T6016] IPVS: using max 47 ests per chain, 112800 per kthread [ 82.016878][ T30] audit: type=1326 audit(1757627287.601:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.0.21" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0865b8eba9 code=0x0 [ 83.085126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.197636][ T5906] usb 2-1: USB disconnect, device number 2 [ 83.233815][ T5906] ================================================================== [ 83.241922][ T5906] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 83.250293][ T5906] Read of size 4 at addr ffff888143ad44f0 by task kworker/0:5/5906 [ 83.258194][ T5906] [ 83.260543][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 83.260569][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.260583][ T5906] Workqueue: usb_hub_wq hub_event [ 83.260617][ T5906] Call Trace: [ 83.260626][ T5906] [ 83.260633][ T5906] dump_stack_lvl+0x189/0x250 [ 83.260655][ T5906] ? __virt_addr_valid+0x1c8/0x5c0 [ 83.260684][ T5906] ? rcu_is_watching+0x15/0xb0 [ 83.260708][ T5906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.260726][ T5906] ? rcu_is_watching+0x15/0xb0 [ 83.260749][ T5906] ? lock_release+0x4b/0x3e0 [ 83.260769][ T5906] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 83.260804][ T5906] ? __virt_addr_valid+0x1c8/0x5c0 [ 83.260833][ T5906] ? __virt_addr_valid+0x4a5/0x5c0 [ 83.260863][ T5906] print_report+0xca/0x240 [ 83.260882][ T5906] ? media_devnode_unregister+0xe2/0xf0 [ 83.260907][ T5906] kasan_report+0x118/0x150 [ 83.260931][ T5906] ? media_devnode_unregister+0xe2/0xf0 [ 83.260961][ T5906] media_devnode_unregister+0xe2/0xf0 [ 83.260986][ T5906] media_device_unregister+0x37c/0x400 [ 83.261015][ T5906] uvc_disconnect+0xa1/0x140 [ 83.261034][ T5906] usb_unbind_interface+0x26e/0x910 [ 83.261061][ T5906] ? __pfx_usb_unbind_interface+0x10/0x10 [ 83.261084][ T5906] device_release_driver_internal+0x4d9/0x800 [ 83.261114][ T5906] bus_remove_device+0x34d/0x410 [ 83.261135][ T5906] device_del+0x511/0x8e0 [ 83.261158][ T5906] ? __pm_runtime_barrier+0x212/0x460 [ 83.261184][ T5906] ? __pfx_device_del+0x10/0x10 [ 83.261206][ T5906] ? __pfx___mutex_lock+0x10/0x10 [ 83.261228][ T5906] usb_disable_device+0x3e9/0x8a0 [ 83.261252][ T5906] usb_disconnect+0x330/0x950 [ 83.261285][ T5906] hub_event+0x1cf5/0x4a20 [ 83.261304][ T5906] ? kasan_save_track+0x3e/0x80 [ 83.261323][ T5906] ? __kasan_save_free_info+0x46/0x50 [ 83.261349][ T5906] ? __kasan_slab_free+0x5b/0x80 [ 83.261381][ T5906] ? do_raw_spin_lock+0x121/0x290 [ 83.261410][ T5906] ? register_lock_class+0x51/0x320 [ 83.261437][ T5906] ? __pfx_hub_event+0x10/0x10 [ 83.261457][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 83.261483][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.261509][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 83.261532][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 83.261556][ T5906] process_scheduled_works+0xae1/0x17b0 [ 83.261592][ T5906] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.261623][ T5906] worker_thread+0x8a0/0xda0 [ 83.261648][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.261680][ T5906] ? __kthread_parkme+0x7b/0x200 [ 83.261709][ T5906] kthread+0x711/0x8a0 [ 83.261738][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 83.261762][ T5906] ? __pfx_kthread+0x10/0x10 [ 83.261795][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.261822][ T5906] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.261850][ T5906] ? __pfx_kthread+0x10/0x10 [ 83.261878][ T5906] ret_from_fork+0x47c/0x820 [ 83.261902][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 83.261928][ T5906] ? __switch_to_asm+0x39/0x70 [ 83.261948][ T5906] ? __switch_to_asm+0x33/0x70 [ 83.261968][ T5906] ? __pfx_kthread+0x10/0x10 [ 83.261996][ T5906] ret_from_fork_asm+0x1a/0x30 [ 83.262023][ T5906] [ 83.262030][ T5906] [ 83.569349][ T5906] Allocated by task 5925: [ 83.573671][ T5906] kasan_save_track+0x3e/0x80 [ 83.578352][ T5906] __kasan_kmalloc+0x93/0xb0 [ 83.582937][ T5906] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 83.588297][ T5906] __media_device_register+0x58/0x280 [ 83.593660][ T5906] uvc_probe+0x9fad/0xaaf0 [ 83.598067][ T5906] usb_probe_interface+0x665/0xc30 [ 83.603168][ T5906] really_probe+0x26d/0x9e0 [ 83.607982][ T5906] __driver_probe_device+0x18c/0x2f0 [ 83.613267][ T5906] driver_probe_device+0x4f/0x430 [ 83.618280][ T5906] __device_attach_driver+0x2ce/0x530 [ 83.623641][ T5906] bus_for_each_drv+0x24e/0x2e0 [ 83.628494][ T5906] __device_attach+0x2b8/0x400 [ 83.633262][ T5906] bus_probe_device+0x185/0x260 [ 83.638124][ T5906] device_add+0x7b6/0xb50 [ 83.643142][ T5906] usb_set_configuration+0x1a87/0x20e0 [ 83.648615][ T5906] usb_generic_driver_probe+0x8d/0x150 [ 83.654067][ T5906] usb_probe_device+0x1c1/0x390 [ 83.658922][ T5906] really_probe+0x26d/0x9e0 [ 83.663430][ T5906] __driver_probe_device+0x18c/0x2f0 [ 83.668711][ T5906] driver_probe_device+0x4f/0x430 [ 83.673729][ T5906] __device_attach_driver+0x2ce/0x530 [ 83.679090][ T5906] bus_for_each_drv+0x24e/0x2e0 [ 83.683936][ T5906] __device_attach+0x2b8/0x400 [ 83.688687][ T5906] bus_probe_device+0x185/0x260 [ 83.693528][ T5906] device_add+0x7b6/0xb50 [ 83.697846][ T5906] usb_new_device+0xa39/0x16f0 [ 83.702606][ T5906] hub_event+0x2958/0x4a20 [ 83.707018][ T5906] process_scheduled_works+0xae1/0x17b0 [ 83.712573][ T5906] worker_thread+0x8a0/0xda0 [ 83.717154][ T5906] kthread+0x711/0x8a0 [ 83.721217][ T5906] ret_from_fork+0x47c/0x820 [ 83.725795][ T5906] ret_from_fork_asm+0x1a/0x30 [ 83.730546][ T5906] [ 83.732855][ T5906] Freed by task 5906: [ 83.736816][ T5906] kasan_save_track+0x3e/0x80 [ 83.741479][ T5906] __kasan_save_free_info+0x46/0x50 [ 83.746666][ T5906] __kasan_slab_free+0x5b/0x80 [ 83.751419][ T5906] kfree+0x199/0x6d0 [ 83.755298][ T5906] media_devnode_release+0x61/0xa0 [ 83.760401][ T5906] device_release+0x99/0x1c0 [ 83.764984][ T5906] kobject_put+0x228/0x480 [ 83.769385][ T5906] media_devnode_unregister+0x6d/0xf0 [ 83.774746][ T5906] media_device_unregister+0x37c/0x400 [ 83.780193][ T5906] uvc_disconnect+0xa1/0x140 [ 83.784766][ T5906] usb_unbind_interface+0x26e/0x910 [ 83.789970][ T5906] device_release_driver_internal+0x4d9/0x800 [ 83.796036][ T5906] bus_remove_device+0x34d/0x410 [ 83.800964][ T5906] device_del+0x511/0x8e0 [ 83.805281][ T5906] usb_disable_device+0x3e9/0x8a0 [ 83.810292][ T5906] usb_disconnect+0x330/0x950 [ 83.814959][ T5906] hub_event+0x1cf5/0x4a20 [ 83.819359][ T5906] process_scheduled_works+0xae1/0x17b0 [ 83.824890][ T5906] worker_thread+0x8a0/0xda0 [ 83.829467][ T5906] kthread+0x711/0x8a0 [ 83.833524][ T5906] ret_from_fork+0x47c/0x820 [ 83.838109][ T5906] ret_from_fork_asm+0x1a/0x30 [ 83.842862][ T5906] [ 83.845170][ T5906] The buggy address belongs to the object at ffff888143ad4000 [ 83.845170][ T5906] which belongs to the cache kmalloc-2k of size 2048 [ 83.859210][ T5906] The buggy address is located 1264 bytes inside of [ 83.859210][ T5906] freed 2048-byte region [ffff888143ad4000, ffff888143ad4800) [ 83.873171][ T5906] [ 83.875484][ T5906] The buggy address belongs to the physical page: [ 83.881897][ T5906] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143ad0 [ 83.890731][ T5906] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.899211][ T5906] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 83.906828][ T5906] page_type: f5(slab) [ 83.910800][ T5906] raw: 057ff00000000040 ffff88801a842000 ffffea00050eb600 dead000000000002 [ 83.919370][ T5906] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 83.927946][ T5906] head: 057ff00000000040 ffff88801a842000 ffffea00050eb600 dead000000000002 [ 83.936605][ T5906] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 83.945263][ T5906] head: 057ff00000000003 ffffea00050eb401 00000000ffffffff 00000000ffffffff [ 83.953918][ T5906] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 83.962569][ T5906] page dumped because: kasan: bad access detected [ 83.968978][ T5906] page_owner tracks the page as allocated [ 83.974678][ T5906] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2826819746, free_ts 0 [ 83.994291][ T5906] post_alloc_hook+0x240/0x2a0 [ 83.999044][ T5906] get_page_from_freelist+0x21e4/0x22c0 [ 84.004578][ T5906] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.010370][ T5906] alloc_pages_mpol+0x232/0x4a0 [ 84.015208][ T5906] allocate_slab+0x8a/0x330 [ 84.019706][ T5906] ___slab_alloc+0xbd1/0x13f0 [ 84.024369][ T5906] __slab_alloc+0x55/0xa0 [ 84.028691][ T5906] __kmalloc_cache_noprof+0x411/0x6f0 [ 84.034061][ T5906] acpi_ds_create_walk_state+0xd9/0x270 [ 84.039603][ T5906] acpi_ds_execute_arguments+0x1f6/0x2c0 [ 84.045229][ T5906] acpi_ns_init_one_object+0x1c1/0x3f0 [ 84.050682][ T5906] acpi_ns_walk_namespace+0x26b/0x690 [ 84.056035][ T5906] acpi_walk_namespace+0xe8/0x130 [ 84.061046][ T5906] acpi_ns_initialize_objects+0xae/0x130 [ 84.066671][ T5906] acpi_load_tables+0x5b/0xb0 [ 84.071339][ T5906] acpi_bus_init+0x8e/0x550 [ 84.075827][ T5906] page_owner free stack trace missing [ 84.081175][ T5906] [ 84.083482][ T5906] Memory state around the buggy address: [ 84.089091][ T5906] ffff888143ad4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.097137][ T5906] ffff888143ad4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.105180][ T5906] >ffff888143ad4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.113262][ T5906] ^ [ 84.120962][ T5906] ffff888143ad4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.129012][ T5906] ffff888143ad4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.137052][ T5906] ================================================================== [ 84.267897][ T6036] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.311037][ T5906] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.318297][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 84.327682][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.337745][ T5906] Workqueue: usb_hub_wq hub_event [ 84.342767][ T5906] Call Trace: [ 84.346037][ T5906] [ 84.348976][ T5906] dump_stack_lvl+0x99/0x250 [ 84.353576][ T5906] ? __asan_memcpy+0x40/0x70 [ 84.358177][ T5906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.363368][ T5906] ? __pfx__printk+0x10/0x10 [ 84.367959][ T5906] vpanic+0x237/0x6d0 [ 84.371933][ T5906] ? __pfx_vpanic+0x10/0x10 [ 84.376422][ T5906] ? preempt_schedule+0xae/0xc0 [ 84.381260][ T5906] ? __pfx_preempt_schedule+0x10/0x10 [ 84.386627][ T5906] panic+0xb9/0xc0 [ 84.390353][ T5906] ? __pfx_panic+0x10/0x10 [ 84.394761][ T5906] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 84.400759][ T5906] ? is_module_address+0x17/0xf0 [ 84.405998][ T5906] ? media_devnode_unregister+0xe2/0xf0 [ 84.411553][ T5906] check_panic_on_warn+0x89/0xb0 [ 84.416474][ T5906] ? media_devnode_unregister+0xe2/0xf0 [ 84.422011][ T5906] end_report+0x78/0x160 [ 84.426249][ T5906] kasan_report+0x129/0x150 [ 84.430742][ T5906] ? media_devnode_unregister+0xe2/0xf0 [ 84.436277][ T5906] media_devnode_unregister+0xe2/0xf0 [ 84.441637][ T5906] media_device_unregister+0x37c/0x400 [ 84.447092][ T5906] uvc_disconnect+0xa1/0x140 [ 84.451672][ T5906] usb_unbind_interface+0x26e/0x910 [ 84.456869][ T5906] ? __pfx_usb_unbind_interface+0x10/0x10 [ 84.462586][ T5906] device_release_driver_internal+0x4d9/0x800 [ 84.468644][ T5906] bus_remove_device+0x34d/0x410 [ 84.473574][ T5906] device_del+0x511/0x8e0 [ 84.477914][ T5906] ? __pm_runtime_barrier+0x212/0x460 [ 84.483279][ T5906] ? __pfx_device_del+0x10/0x10 [ 84.488117][ T5906] ? __pfx___mutex_lock+0x10/0x10 [ 84.493126][ T5906] usb_disable_device+0x3e9/0x8a0 [ 84.498162][ T5906] usb_disconnect+0x330/0x950 [ 84.502827][ T5906] hub_event+0x1cf5/0x4a20 [ 84.507231][ T5906] ? kasan_save_track+0x3e/0x80 [ 84.512082][ T5906] ? __kasan_save_free_info+0x46/0x50 [ 84.517465][ T5906] ? __kasan_slab_free+0x5b/0x80 [ 84.522404][ T5906] ? do_raw_spin_lock+0x121/0x290 [ 84.527441][ T5906] ? register_lock_class+0x51/0x320 [ 84.532625][ T5906] ? __pfx_hub_event+0x10/0x10 [ 84.537371][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 84.543081][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.548267][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 84.553970][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 84.559679][ T5906] process_scheduled_works+0xae1/0x17b0 [ 84.565217][ T5906] ? __pfx_process_scheduled_works+0x10/0x10 [ 84.571183][ T5906] worker_thread+0x8a0/0xda0 [ 84.575759][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 84.582078][ T5906] ? __kthread_parkme+0x7b/0x200 [ 84.587021][ T5906] kthread+0x711/0x8a0 [ 84.591101][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 84.596196][ T5906] ? __pfx_kthread+0x10/0x10 [ 84.600779][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.606395][ T5906] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.611577][ T5906] ? __pfx_kthread+0x10/0x10 [ 84.616153][ T5906] ret_from_fork+0x47c/0x820 [ 84.620731][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 84.625829][ T5906] ? __switch_to_asm+0x39/0x70 [ 84.630578][ T5906] ? __switch_to_asm+0x33/0x70 [ 84.635325][ T5906] ? __pfx_kthread+0x10/0x10 [ 84.639903][ T5906] ret_from_fork_asm+0x1a/0x30 [ 84.644662][ T5906] [ 84.648202][ T5906] Kernel Offset: disabled [ 84.652531][ T5906] Rebooting in 86400 seconds..