last executing test programs: 27.671160286s ago: executing program 3 (id=15): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x104, 0x80000002, 0xfffff7f8, 0x8, 0x8f, "3f3c5e0000ff775cfffffffff903e7ffffff40", 0x8, 0x9}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0xd) r4 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xffffffc4}) sched_getaffinity(r4, 0x8, &(0x7f0000000080)) 27.260282565s ago: executing program 3 (id=18): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xe61e0cc134884a6d, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @remote}, @ib={0x1b, 0xffff, 0x1, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r4, 0x4b4b, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000080)=""/14, 0xe) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xe61e0cc134884a6d, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000), 0x111, 0x9}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @remote}, @ib={0x1b, 0xffff, 0x1, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) (async) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TIOCL_PASTESEL(r4, 0x4b4b, &(0x7f0000000000)) (async) read$dsp(r0, &(0x7f0000000080)=""/14, 0xe) (async) 26.195011809s ago: executing program 3 (id=22): clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x3f420f0000000000, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x1ff, 0x0, 0x3}) 25.730997875s ago: executing program 3 (id=24): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0xf5, r3, 0x1, 0x5}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000180)="d09b6d42fd81685544f46c3f0800", 0xe}, {&(0x7f0000000080)="4987", 0x2}, {&(0x7f00000000c0)="64dac7d54e547911fbd7556d3b5e63fce1cedfa868cd28604c408c3363ea1604388d00436db1d308c82c", 0x2a}], 0x3, 0x0, 0x0, 0x11000000}, 0x24008814) 25.358795331s ago: executing program 3 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000700)="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", 0x155}], 0x1}}], 0x1, 0x97ffffffffffffff) 23.907947687s ago: executing program 3 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 23.254839384s ago: executing program 32 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000100)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 12.125154737s ago: executing program 1 (id=68): r0 = memfd_create(&(0x7f00000002c0)='Foot\xc6\x8cT\xcb', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x12c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) r2 = semget(0x1, 0x2, 0x2c0) semop(r2, &(0x7f0000000140)=[{0x3, 0x7, 0x1800}], 0x1) socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000180)=""/121) (async) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000180)=""/121) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209000d0000000401a80016000ac3144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6.497309984s ago: executing program 0 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000fffffff50002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b02000000000200ff7f6b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.200862861s ago: executing program 0 (id=78): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40084) (fail_nth: 8) 5.389056034s ago: executing program 2 (id=79): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (fail_nth: 8) 4.97010396s ago: executing program 0 (id=80): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (fail_nth: 8) 4.825612056s ago: executing program 2 (id=81): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffe24, &(0x7f0000000680)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\x01\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x87\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xa5\xcd\x83\x85\x9b\x95\x86\xf5\x8d\xe1\xe0)\x96\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\x01\x01\x00\x00\x00\x00\x00\x00(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00') ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 4.263750758s ago: executing program 0 (id=82): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) (async) 4.085699374s ago: executing program 2 (id=83): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x50, 0x7, 0x1, 0x0, "8fbf8559d71a159344d3d7ff9bb0ed8fb3b1f93afa4a3f20cfb25cb7017d886c3bdcce82b43e27451967d6f3fe61dc3f148efc7e4fa63820b187988a5897380209c66cf576ee8044f6a33f6a"}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "d2e53a"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x328, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1bc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'lo\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xb0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x84, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4f4}, 0x1, 0x0, 0x0, 0x90}, 0x4001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = eventfd2(0x581, 0x801) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000180)={0x2, r4, 0x1}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5800, 0x56c4, @remote, 0x9}, 0x1c) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x31}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.917371854s ago: executing program 1 (id=84): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xe1ce, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xa6, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x8000000) 3.730928703s ago: executing program 1 (id=85): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000480), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x14, 0x2, 0x40, "b427ec06000000000000000000000000000000000000000a00", 0x3231564e}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x884}, 0x20000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) write$binfmt_misc(r6, &(0x7f00000003c0)="3aeaca6b7c1e0e4a", 0x8) setsockopt(r4, 0x80, 0x7f, &(0x7f0000000800)="1ab8dc35000000000000ae9c12be336397145277b11bbb96487e20d3f3a3c6fb42d32043739fd2c128a427d342f766ffbb7a2950ff017fdc3ddf78d902489c161aec7a4db3c09c0f4683204c38550a05c807f3f6e5ce525dcaa298f1acdff067475dd4151c7fbd", 0x67) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000003c0)={0x1}, 0x1) unshare(0x22020600) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x20363159, 0x4f565559, 0x9, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x6, 0x2b5}, {0x3, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x4, 0x400004}], 0x8, 0x8, 0x8, 0x0, 0x4}}) unshare(0x48000800) r8 = syz_open_dev$loop(&(0x7f0000008500), 0x7, 0x4902) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) write$rfkill(r3, &(0x7f00000001c0)={0x2, 0x8, 0x0, 0x1}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$BLKGETZONESZ(r8, 0x80041284, &(0x7f0000008540)=0x8) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000001380)=""/129, 0x81}, {&(0x7f0000000040)=""/47, 0x7f}, {&(0x7f0000000080)=""/16}, {&(0x7f00000000c0)=""/20}], 0x2, 0x8, 0x0, 0x25) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000000380)={0x0, 0xb3e7, 0x8, 0x1}) mount$binderfs(0x0, 0x0, 0x0, 0x4843, &(0x7f0000000200)=ANY=[@ANYBLOB="6d6178436a36ce2ec973a49f3d415f275dba52e3762a695688a89e9507e625e43ea35919e217c423be38dc"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 3.52114811s ago: executing program 0 (id=86): syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f526000500000013240305"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/254, 0xfe}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}], 0x3, 0x9, 0x80000001) socket$nl_route(0x10, 0x3, 0x0) 3.1367447s ago: executing program 2 (id=87): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) syz_usb_connect(0x3, 0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002c2bae310c00900023c5801029a620902090000060780ff"], 0xfffffffffffffffe) 3.136090517s ago: executing program 1 (id=88): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (fail_nth: 8) 2.68023843s ago: executing program 1 (id=89): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x6, 0xf, 0xc, 0x1000, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x400) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x6010, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}, {@noxattr}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'wlan0\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'wlan0\x00'}}, {@fowner_gt={'fowner>', r5}}, {@uid_eq={'uid', 0x3d, r6}}, {@flag='dirsync'}, {@fowner_gt={'fowner>', r7}}, {@dont_hash}]}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) r8 = dup3(r2, r2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, r0, 0x801, 0x400, 0x0, {{}, {@val={0xffffff7d, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x3c}}, 0x4044) 1.749183792s ago: executing program 0 (id=90): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) connect(r2, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, "ff733144431e7da48a7e5f007a1da6c04994c364e264d611143e343b1f83857efd30cc0428c7b81d320ff73cfa54c823d20b611e3d6db0e20d703854c397f8", 0x2e}, 0x80) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) landlock_restrict_self(r0, 0x4) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0x1000, "6b3f6a5abb8a0bc3cf118f036a503976e1616a14eb075c70ebf8b34e5329e5ea1ee995b65b45039c55bae5feaae6db3d4c709cfb2498e17e852d029ec6adaf8209d788664ab670f5dbeeb4ec5824d97194449bb2b9c29181681a5daa81a39dd08684dc80b86e314dc8022b0d5111a0d305d8405504350b7235ba658ab1a33b7aee262f0b66a906733147dad5261b9b2c06c3ba4c4f82b974cd97e231457d111d3f67cb8d5e35c1d8b08a94fc3cd8417d7fa1f48ce4243f3cacdd44edf1709ed0fcb8b77179491891a966b83a44d2d74df57ef4616487ba7e0194b5bf98e22de39db52cf81aa034bcc3aa3b7f0a5b6f70adbd4448b594f928a12d4d08853d81953eb5cc81c4f744202e3ecdffa120cf5e307f0df6009ba07c9b4e4134957d8edaea9e23ef319f8ceb4bf3f6c1d5eaa940f999ffaf02ba8fbfb6b5b571e8d8301c034d4c0aa26ada3eba426784b9691cd8798a396bbf7ce508db15bd020a0be52b6f576f30c801f0756572fd701ab218622ed0bec55db9389592e2b3ea660dc1bfc89c5713a397e26a5e22feb701173b52e7fb2a345d5def7253a312dcfa082094851b088e51d654ad5fcbd3cb69af97089e87b6812fd782d582b3ea9a591df062f88bed054e1cc2aeec28066851e835573866f0e348b9e7e699185e501c27fb103b8eee4a3dea816a1fb94c7a5734eeab0a3bf9af6ce5856285372c0f1c48ad5bd05dcfd91b3d76a88f806ccf75e15bf7e5a21b81245ccc3b6ca984d2adbdcfc198c350c7071848b60d19283b193fd850667faa2dc1ad2eab2f9dd4e353c3b59db4e4712cb9359fff0ebd58f28b3df3cde8bbba70e11eb8ab0e21fd8194a4c28717e4e5f4f5cb40b51a6b1827524482c78dd96c5a382572dc6e19c05099ff9d364bc487190a60568e5077e15ed0424a0e3064987bac8416679861c0c464b199442a6f6275ebce53ca60088f6a01d379b4d921cec150e257bdc8bc75556e06801e8d7a086eef60244bd7aec13babfaf1f63a39e0f13a5a8ef76851b3b70c8c62247d6872568c4f2d192e74ed846cb75402d4f5db3eccf65f4f0102ea92f768522d13d6c857e42dbe35ed193369e85ec62cfcc5eab4fe5a792286d46e5d3f13b157af9d1395ca3ced75a125e3c8a5850ac53f8c25b44ec197494bc3d8c01e472276069277c4cef66af2556a1cdf3fc333625bf92d27c0b35d402d5cc5dd300cd23282b53d7e68253fe7eadc219ea16402f20724dae58f9648db045ba0ada5e01e6d65b0c99df9c511bdcf65da963b434096d04b7389d49a200c4305e9c936015e4e5b7c6e3ae686c2d1aaffe6792d818913cf63db22f2d1d62ee01e0a9a76e6ffe80c485197c34058bd2fc52c90078768afee4c40652828f6b72d8b9827486dbab993924d84891dc4ed1a6708b5ce47df4a1fa89ccfb37cc181bc4050e88c8c4cda1edd842c1420a4be1ad5cd54418f71f1b4c957f82e670240e9d7b48d86d9c0bfb8eaca39d0c009664b8d3cbf45746beabd9f805c4fb223868dff7500f0a09646542dd6629fd02bb602973d30f40cf22db1ff41e4a95359ef29827a3928ec1f04c02bd24965365cedc1992b3bbe8b03b8d49e3661db3460ab916eaece5b71259ab657ebe1fdd84c55f52c97b9ed7d3185ed0fde8a4a2870405aa4492e59f0e1f47b42772dbe73992fca9bf874062ace470915ed50599e32d1f2a7817a1df009a1f7b457d0ed3286f09af8465cdef8ad8cc278a28abc351dc6d6f016c690a4beb47375654bc67eb6462f0eea6969937bea1e2b0ef908a0845c4fda2b6d66688c0ab9821e889d064721894cab51bb064125fbec9ed40f6cdd6d7a8f2a3c5ac2adfe6cbc38475853b2daeeab135f8878cffaf999dc05935fb872b7ff44494ca899e9522ff60dab7dcb51fb7b84e1b745a36b3c2f6ca358fe202db9ed2a3599473a06037a562611688946085dec6297ef191cc9abdfd1a4de59e3c12ff76b4f70e2b355e834019ec8aa02d07437535366366427db0c3aa394219719ceecb6010ff4381765d4ac81b41ac6ab778388f18c533ceda96937e01cb4c68c8f792881d95c50fc4694557598861cad134522de20e211c6d299e767350e8a4c3aa6eb3dfd65133c8b159c4fcdf3ed2bb1865109d03b8effe6fe39e5e78bf94c18d7206ac8e1d6668d66f480cb712f5c355459eff07c5b6e94a410597435273f94e62138baee4d6d4d83621567290d33a72032c3c3719b4aac22606f4e0adf6687d35bcc4232628d461d6622574dd2d9c0b413902cf2b892eeffa9896cfe88924b63116e031fc148c05c80c3fdbd3a0386416bc50a38efcf5b72858d14a8731ebdeb723b57aed10694e4b091ad44a570feef3de0ba5aa053d64583b3c14f3802467528f4e9ad8a92fe3dab0bcf4b242f57fee1c2f33da53759497e00daa4444926b0ab7510901468c0f2ce6d3c0a7560b7ca38b4849131ef33a86f8ad643178a5ce2a19304ba9868b1b497bfb38b04b6e4f493696f8253231b1660c5c00e4d9174dfdf42ebc5b7d07614bdad7f175595448ddd4a380febec54ddbf93b29c64d6ddb07249f891730fc5659143e064cf1f85f1c41ae647b1c610d74097322e00fd496db0d78177e411b0f7e9de259539ee50f03cef482c508e9b402506a7b49cad052d1b7c1c36ac3bb0769cb0d08d88d43d9d1f17b0281baee6946beda16a38ca2ec29c2d7208a4ac07a2cbd93fee971f311c73eb0b52a76ae39a78104a1ffca4b4473be579a3add049e4f0007f134ab386282c6d9854eabafea196aa2bfc0411598c9728fdf9401f8e7f5be68a21ada13589479a8e2c5abf489197adc71fcba4572219a89638e6192334463734d9138cc2b03507ca68e17475ec572ce14ba4d2a39af5a35da79ab8f7c79715df87bac415fdd16c9528b3603aadf4da6145a3e40e6c0eb7a7890c3280aa535719cf49771c008f922c095746a9adcdc7516ab10ac6702fc27ffa843cdbac260e8b2059b1839a7781130f77cb0feaddd0691fe152c5705b05d01e93ddf58fc0f077d710d2025e1d0bf878a441dfc0d011e5f8cd1cba5ed6da05fd96683249aad216ae9ddfea6185609f0e5351ce671119e41f551ff28ce9b51d6de0ee8849bccf5d1cf9bc59c8d768d832369ccff36d5dff07a696179796308d5a9daa167f65936766008a53c551a260ecc99b92140d6f8ffd3f6a8ca8c49f496033efa4f82344f26c8fca949403d403378bbd5fa7e808876cdb5901eaa51fb555fbdfb121f82677057afbd1845de9e002dff30175c872b924d0e075c172e1fdaa907453091b31e4d7a65aaf46209348d8783fdaef342a9b315aa55abe94944dc57209fa416d8052552196fe59da9e44d31d9f533b72e61dd8b2ce9162dc6346cae0eddfcd975ce8beb425dfa3bb9314bb0be7bab423738ddcaeed8375a8159c6b886aa77104b076b517520d7f78bc21b6c4a63f72e1dd0017abe64d9b3807d8831f0348b84637af1d0da5102f7b32e26dfc7b2ead4f6483facafeea7444f49f856de6136ca33eeb87dbe33336ae4659a808833f816c06fd9f302f4df0f3c4aa0598d03d5ded4c5e261c70870093d0f2f1cb16891c086e64ee114411d07a7c78b007d5a14fa8671cd12061812e573d749f0ffa8048cb23237b17d38869ac5ae320226d735c5c529366c50569bd5c010e576ad806eab6e351b07cfd7dc9efb7cb2ef29c7420276903aebd1c5690c55efc2e39e8f5526d4fcbf628c530f4fd3746df8b1567eb51516dd79dc7cb62cf728bf92b1a9bd4a7f9a28ba3c392ee5a621d20ee8b910e0c3c43d654caed1308d41ff3b231187438551b27bfddc33c41f8b7a5f39f5366816cfd5ac92e81c51c4b174f4e2fed2689af569070d3166b344c51764bf10bef9ec73b94cdcd5c077f3c6c43c74da7e37d8937b8a396420910b444ef113bcde95483b59b7f1b90d35092d2fe5667384f77d16cb3460efd70b6b13ed2df535f46ec668b5eab6a0ce93853aeae4cd6c80faca76ec26837f9185ee5971149257ae5db328924066b98d90b0d47acbcb58180cceb50d3d052ae2e5ca56241460ed1292fa84fe17a1092809ef3ee57ec51435c28afd6de08bf06fbb07bb3f80deb09ee78e45546f2f9498edddd3a25d28c8b2f5d0a753eb712883e44cc1c1c6d7f23b7058cd048e5530ab381a23a9660c87bc638a76e9d7cae8881a7559991fcac7386f58bab3cbdbd379ddb86cbd44546dbc54d9e44af295a915e286316f73d2efd8583716e0bb65076d2ff48085c5d06a62e632ba3e9815042041d1ba8f5ae6fbeab93f33e4e0ab116bac6326b089550aeaec6559a6082ccb6c9da2915f2019f1f7f8626ef7959563d79a3981f3a4d0e01afaa7060555c95de50ddd7d91b955f436c4e972f4aa59b6ea75fb88da09589a7e6ecd9d2ba53545c8b9eb612df7dfa126fcd2a126c43575242fe4e962e58cf2bd998949761268be00dfc16a4f52d8da0ebc44481f6408aee5e38241ac3f28e33d4119c606d197a63f6e9c0fe5d9346e9e782f1713b4421cfe43f522387f4746ad99a573c4c46631df96a4dd12d32d5e9a32f3c562cbad23e4ee0a484d279f2fee0d5c181d301eeb134d5216557eaac322d17bb75e277f4bd60d1b35d4111d902a57e25fc12ce483ed1341c69f6e8ef14b26ba602f7b46f644ad93c0f5a27c7e3f701ae1bfe2cceed58b37dd85ea8e8b72f1ac4af648f0391d315f1796422efc5a92fdcb75f4d6fc172c5f40e6a2b59fda077e6042e22b99d5e8c4a1ba0683d43c0f58550d2e1e7a57f5ba3a79edc6273fc6aa17451d5e327ad1d71b46847b6498a4039de587b40c808f33c217682b715174023f242cb32751861abc5f1ccf59c4d923206e92e39a34d43d03664e96c740f079bc067d8b2536e03306dba1215c7b5d2d2c4418df24f2c8aa1946a95c59d9982ea38b65dd8e4bbed59a5bd7e75321152051b5febc1ceeec9939c92bd82e177c52b0773cd4b7c8f120f4738e375dc90378df92df50032022ceecfcbc0349008314f6ee266d9fcc0746fb2cabf63b64c5ad9447fa63df10ba072ce0c079a4dd982adebd8bc646cc8de7f521da584ae04cd5f73d8bf2162ba362be8b6921f75481a9de86db0c341c0bbce506c70d28761cc1bd0867f65bebb7a343fc90f27e9d7b433d45b84f7a26bb1c6ac3def8a113a510501f71e8bac02d63363b6076635cfb12fb337aeb9b96ba112776f848367c087a1784fd8aa8353f03ac65a510f61eae5c17dac849ce10205d171cced905360e8da5513bb343ef2251610eab5248494e0e43e0899e0354e7b21d0ec3ac09f362e1a4b5e423de6e1d1914fd24b1f60f656d4fc5be9d9200613e4578f20f157f213269821ed30416550106cda7fcd5c5e81a8c83e4ec5e572545075c43f2a0e2b5f6d9bb54583d3660d459ce4a0a807e588b005fe52e48cd1b0244547ff067b239b0481edc76e9841ea44d63ccad7b1c5c04342ebcd7c81336e946cfa8f94c4f36e17b0b6b6ee9576dd24c4385c8485f307cf1385f5e3af97f7898f6791f31feb86cf320029714f55e88a255426a7ba2cfe016991fab05fc2f34f9786a6cd1064ac688f01a6702b7f5faf7da2c88224dfa78bcf9b087608109d0bdb2f9894d0577036945e93291b3ca5ac704e2f618dbe015d2b2bf7e2e15b63d97f57a1feafc4cebe3cba4861e9288a9c9752a450d8e059215c1791b756478c96821bc7e76df3295dbd2a958c2764d7494840fc95005f8ed38d71d3419f4596bdcb7ef046832f3146ea56319df26f14e8bb0a8a"}, &(0x7f0000001600)=0x1008) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x10150) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001640)={r3, @in={{0x2, 0x4e20, @local}}, 0x1, 0x9, 0x8, 0xd85, 0x1, 0xd, 0x6a}, &(0x7f0000001700)=0x9c) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x14, 0x2c, {0x2c, 0xd, "e75bcf47a88a34d2dd23ee248c3610da0300000000000000697103bd4f114ece0513e8bec3cd466f0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0x80000000, 0xffffffff, 0x1, 0x6, 0x3, 0x6, 0x3}, {0x6, 0x4000004, 0x0, 0x8, 0x4aed, 0x1, 0x4}, {0x0, 0x3, 0x2, 0x80000000, 0x7ffffdff, 0x8005, 0x31}, {0x0, 0xe5f, 0x6, 0x8, 0xdf3, 0x6, 0xbb5f}, {0x80000000, 0x2ab, 0x2, 0xd, 0x3, 0x7fb, 0x400}, {0xc0000000, 0x1, 0x4, 0x7, 0x2, 0x40000005, 0xe0000}, {0xd, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000000c0)='/dev/vcsu\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.446635448s ago: executing program 2 (id=91): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000001080)) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4$alg(r5, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0xffffffffffffffff, 0x400000000000005e, 0x20000008, 0x3, 0x0, 0xfffffffd}) (async) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902240001040e10830904"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e0add17b072b30f0b817de96e12735017b507ee59111591c294d4b3fac06e3a64bd8206012c976d68e30485b6c22b57572509b35a3a70830f363f9aef1928a55f75a465ce4edd8893dadeb1a0b0dbe5b64b2c703f3b542666fd4f82a41b2e5a5ba69f16e5dfd23cf5928647c7be82613c0172811dc95c82f288e4ccdc14c049686a7ef0831e2a41c2e77c6a9872a1ad66c03f47be34cc33ca7ebd16fd734e29f59507e0cbdcee1b973dcba2854ee10556672163a98d7664b1c5c18cff9900ed8dbf0", @ANYRES16=r8, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f00"/86], 0x5c}, 0x1, 0x620b}, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbfe, 0x38, 0x8, 0x70, 0x6e}) (async) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8903, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async) ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0x56) 1.050963642s ago: executing program 2 (id=92): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7f, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb4, 0x8c, 0xfe}}}}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x28, {0x28, 0x5, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000180)={0x9, 0x6}) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(0xffffffffffffffff) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x10, "531fa01989efe8770d8aa4deff5ab9b1"}, 0x0}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x5}, {0x5c, 0xc9}}}}, 0x9) 0s ago: executing program 1 (id=93): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000540)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x6, 0x6]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000206010800000000000000000100004a1200030068617368002000802c706f72740000000500000000000000797a300000000024000780"], 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 91.997622][ T820] cfg80211: failed to load regulatory.db [ 92.107433][ T5593] cgroup: Unknown subsys name 'net' [ 92.408490][ T5593] cgroup: Unknown subsys name 'cpuset' [ 92.462664][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.433611][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.005912][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.010699][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.026160][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.035569][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.037568][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.149828][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.164610][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.176490][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.190622][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.191759][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.258993][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.288997][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.291247][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.311171][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.320327][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.425553][ T4922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.439811][ T4922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.444703][ T4922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.446328][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.451185][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.105138][ T4922] Bluetooth: hci0: command tx timeout [ 99.265768][ T4922] Bluetooth: hci1: command tx timeout [ 99.321538][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.334045][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.334374][ T5610] bridge_slave_0: entered allmulticast mode [ 99.338167][ T5610] bridge_slave_0: entered promiscuous mode [ 99.344470][ T4922] Bluetooth: hci2: command tx timeout [ 99.406936][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.407231][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.407431][ T5610] bridge_slave_1: entered allmulticast mode [ 99.409910][ T5610] bridge_slave_1: entered promiscuous mode [ 99.582325][ T4922] Bluetooth: hci3: command tx timeout [ 99.600516][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.625641][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.625873][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.626072][ T5613] bridge_slave_0: entered allmulticast mode [ 99.628493][ T5613] bridge_slave_0: entered promiscuous mode [ 99.668042][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.694333][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.695043][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.695254][ T5613] bridge_slave_1: entered allmulticast mode [ 99.697797][ T5613] bridge_slave_1: entered promiscuous mode [ 99.751675][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.751929][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.755219][ T5614] bridge_slave_0: entered allmulticast mode [ 99.770329][ T5614] bridge_slave_0: entered promiscuous mode [ 99.879637][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.880066][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.880349][ T5614] bridge_slave_1: entered allmulticast mode [ 99.887741][ T5614] bridge_slave_1: entered promiscuous mode [ 99.952649][ T5610] team0: Port device team_slave_0 added [ 99.980038][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.012226][ T5610] team0: Port device team_slave_1 added [ 100.037877][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.038327][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.038591][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.038787][ T5619] bridge_slave_0: entered allmulticast mode [ 100.041411][ T5619] bridge_slave_0: entered promiscuous mode [ 100.108103][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.133026][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.133282][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.135631][ T5619] bridge_slave_1: entered allmulticast mode [ 100.138117][ T5619] bridge_slave_1: entered promiscuous mode [ 100.185644][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.236274][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.236287][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.236308][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.292394][ T5613] team0: Port device team_slave_0 added [ 100.317412][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.317426][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.317446][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.375510][ T5613] team0: Port device team_slave_1 added [ 100.380614][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.410754][ T5614] team0: Port device team_slave_0 added [ 100.438610][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.450777][ T5614] team0: Port device team_slave_1 added [ 100.513376][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.513388][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.513408][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.602886][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.602899][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.602920][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.606641][ T5619] team0: Port device team_slave_0 added [ 100.669121][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.669133][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.669153][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.718423][ T5619] team0: Port device team_slave_1 added [ 100.733461][ T5610] hsr_slave_0: entered promiscuous mode [ 100.735352][ T5610] hsr_slave_1: entered promiscuous mode [ 100.739001][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.739014][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.739034][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.857762][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.857776][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.857796][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.929448][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.929461][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.929482][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.182195][ T4922] Bluetooth: hci0: command tx timeout [ 101.250684][ T5613] hsr_slave_0: entered promiscuous mode [ 101.253259][ T5613] hsr_slave_1: entered promiscuous mode [ 101.258665][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 101.258989][ T5613] Cannot create hsr debugfs directory [ 101.354721][ T4922] Bluetooth: hci1: command tx timeout [ 101.383713][ T5614] hsr_slave_0: entered promiscuous mode [ 101.386008][ T5614] hsr_slave_1: entered promiscuous mode [ 101.387292][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 101.387325][ T5614] Cannot create hsr debugfs directory [ 101.422780][ T4922] Bluetooth: hci2: command tx timeout [ 101.588251][ T5619] hsr_slave_0: entered promiscuous mode [ 101.590246][ T5619] hsr_slave_1: entered promiscuous mode [ 101.591547][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 101.591578][ T5619] Cannot create hsr debugfs directory [ 101.672608][ T4922] Bluetooth: hci3: command tx timeout [ 102.339832][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.405875][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.421339][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.457961][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.461272][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.499112][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.528418][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.547649][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.696632][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.737480][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.751617][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.802346][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.814424][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.858260][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.891815][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.937398][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.129101][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.160423][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.181173][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.219896][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.234974][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.263491][ T4922] Bluetooth: hci0: command tx timeout [ 103.282860][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.315066][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.356873][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.432987][ T4922] Bluetooth: hci1: command tx timeout [ 103.512636][ T4922] Bluetooth: hci2: command tx timeout [ 103.538348][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.569449][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.587984][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.616875][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.621697][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.668689][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.685127][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.726647][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.754819][ T4922] Bluetooth: hci3: command tx timeout [ 103.820650][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.951255][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.988512][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.033883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.034079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.113480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.113623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.198830][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.249892][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.250104][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.324506][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.324683][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.355763][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.502936][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.545256][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.626383][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.626640][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.698029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.698238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.819482][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.892825][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.897754][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.983488][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.984333][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.353561][ T4922] Bluetooth: hci0: command tx timeout [ 105.502476][ T4922] Bluetooth: hci1: command tx timeout [ 105.583421][ T4922] Bluetooth: hci2: command tx timeout [ 105.640898][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.829999][ T4922] Bluetooth: hci3: command tx timeout [ 105.979099][ T5610] veth0_vlan: entered promiscuous mode [ 106.115469][ T5610] veth1_vlan: entered promiscuous mode [ 106.202447][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.456181][ T5610] veth0_macvtap: entered promiscuous mode [ 106.528848][ T5610] veth1_macvtap: entered promiscuous mode [ 106.579205][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.637405][ T5614] veth0_vlan: entered promiscuous mode [ 106.695051][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.701466][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.735028][ T5614] veth1_vlan: entered promiscuous mode [ 106.760801][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.845614][ T1201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.865959][ T1201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.871174][ T1201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.908375][ T1201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.209983][ T5619] veth0_vlan: entered promiscuous mode [ 107.310320][ T5614] veth0_macvtap: entered promiscuous mode [ 107.384600][ T5614] veth1_macvtap: entered promiscuous mode [ 107.426744][ T5619] veth1_vlan: entered promiscuous mode [ 107.447301][ T5613] veth0_vlan: entered promiscuous mode [ 107.518188][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.518211][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.544253][ T5613] veth1_vlan: entered promiscuous mode [ 107.607246][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.672974][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.708541][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.708566][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.751270][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.768208][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.795405][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.808193][ T5619] veth0_macvtap: entered promiscuous mode [ 107.839699][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.865534][ T5619] veth1_macvtap: entered promiscuous mode [ 107.973224][ T5613] veth0_macvtap: entered promiscuous mode [ 108.130742][ T5613] veth1_macvtap: entered promiscuous mode [ 108.288760][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.367258][ T5753] ======================================================= [ 108.367258][ T5753] WARNING: The mand mount option has been deprecated and [ 108.367258][ T5753] and is ignored by this kernel. Remove the mand [ 108.367258][ T5753] option from the mount to silence this warning. [ 108.367258][ T5753] ======================================================= [ 108.494399][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.554257][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.554280][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.607416][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.623438][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.627978][ T1143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.658969][ T1143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.675670][ T1143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.680910][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.921161][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.935502][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.949723][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.011356][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.135442][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.135473][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.929637][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.929658][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.274902][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.274923][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.541351][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.541371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.879392][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.879414][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.513688][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.744670][ T5776] FAULT_INJECTION: forcing a failure. [ 111.744670][ T5776] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.744725][ T5776] CPU: 1 UID: 0 PID: 5776 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.744750][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.744773][ T5776] Call Trace: [ 111.744785][ T5776] [ 111.744795][ T5776] dump_stack_lvl+0xe8/0x150 [ 111.744832][ T5776] should_fail_ex+0x46b/0x600 [ 111.744871][ T5776] _copy_from_user+0x2d/0xb0 [ 111.744898][ T5776] snd_rawmidi_ioctl_status32+0xfb/0x410 [ 111.744927][ T5776] ? do_vfs_ioctl+0x117b/0x1540 [ 111.744958][ T5776] ? __pfx_snd_rawmidi_ioctl_status32+0x10/0x10 [ 111.745012][ T5776] snd_rawmidi_ioctl+0x44e/0xbb0 [ 111.745039][ T5776] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 111.745070][ T5776] ? __fget_files+0x2a/0x420 [ 111.745096][ T5776] ? __fget_files+0x2a/0x420 [ 111.745117][ T5776] ? __fget_files+0x3a6/0x420 [ 111.745139][ T5776] ? __fget_files+0x2a/0x420 [ 111.745164][ T5776] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.745200][ T5776] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 111.745226][ T5776] __se_sys_ioctl+0xff/0x170 [ 111.745259][ T5776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.745285][ T5776] do_syscall_64+0x174/0x580 [ 111.745315][ T5776] ? trace_irq_disable+0x3b/0x140 [ 111.745342][ T5776] ? clear_bhb_loop+0x40/0x90 [ 111.745369][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.745391][ T5776] RIP: 0033:0x7fbee051ce59 [ 111.745416][ T5776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.745434][ T5776] RSP: 002b:00007fbede76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.745457][ T5776] RAX: ffffffffffffffda RBX: 00007fbee0795fa0 RCX: 00007fbee051ce59 [ 111.745473][ T5776] RDX: 00002000000000c0 RSI: 00000000c0245720 RDI: 0000000000000003 [ 111.745488][ T5776] RBP: 00007fbede76e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.745502][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.745515][ T5776] R13: 00007fbee0796038 R14: 00007fbee0795fa0 R15: 00007fffbff23678 [ 111.745549][ T5776] [ 112.034470][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 112.213738][ T37] audit: type=1326 audit(1781404985.002:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.0.9" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fb9d8ce59 code=0x0 [ 112.280454][ T9] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 112.280489][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.280510][ T9] usb 4-1: Product: syz [ 112.280525][ T9] usb 4-1: Manufacturer: syz [ 112.280541][ T9] usb 4-1: SerialNumber: syz [ 112.355898][ T5777] tc_dump_action: action bad kind [ 112.769048][ T4922] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 112.769127][ T4922] CPU: 0 UID: 0 PID: 4922 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.769154][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.769171][ T4922] Workqueue: hci3 hci_rx_work [ 112.769204][ T4922] Call Trace: [ 112.769212][ T4922] [ 112.769223][ T4922] dump_stack_lvl+0xe8/0x150 [ 112.769256][ T4922] sysfs_create_dir_ns+0x271/0x2a0 [ 112.769293][ T4922] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.769319][ T4922] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.769362][ T4922] ? rt_spin_unlock+0x160/0x200 [ 112.769388][ T4922] kobject_add_internal+0x631/0xd10 [ 112.769435][ T4922] kobject_add+0x163/0x240 [ 112.769476][ T4922] ? __pfx_kobject_add+0x10/0x10 [ 112.769520][ T4922] ? get_device_parent+0x370/0x3a0 [ 112.769554][ T4922] device_add+0x408/0xb90 [ 112.769585][ T4922] hci_conn_add_sysfs+0xd5/0x210 [ 112.769612][ T4922] le_conn_complete_evt+0x10e6/0x16b0 [ 112.769656][ T4922] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.769690][ T4922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.769720][ T4922] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.769752][ T4922] ? skb_pull_data+0xfb/0x200 [ 112.769790][ T4922] hci_le_conn_complete_evt+0x187/0x470 [ 112.769830][ T4922] hci_event_packet+0x659/0xef0 [ 112.769863][ T4922] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 112.769885][ T4922] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.769914][ T4922] ? __pfx_hci_event_packet+0x10/0x10 [ 112.769938][ T4922] ? rt_spin_unlock+0x14f/0x200 [ 112.769970][ T4922] ? hci_send_to_monitor+0xe2/0x590 [ 112.770007][ T4922] hci_rx_work+0x3ee/0x1040 [ 112.770043][ T4922] ? process_one_work+0x8be/0x1630 [ 112.770505][ T4922] process_one_work+0x98b/0x1630 [ 112.770573][ T4922] ? __pfx_process_one_work+0x10/0x10 [ 112.770608][ T4922] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.770656][ T4922] worker_thread+0xb49/0x1140 [ 112.770722][ T4922] kthread+0x388/0x470 [ 112.770749][ T4922] ? __pfx_worker_thread+0x10/0x10 [ 112.770783][ T4922] ? __pfx_kthread+0x10/0x10 [ 112.770811][ T4922] ret_from_fork+0x514/0xb70 [ 112.770843][ T4922] ? __pfx_ret_from_fork+0x10/0x10 [ 112.770870][ T4922] ? __switch_to+0xc79/0x1410 [ 112.770896][ T4922] ? __pfx_kthread+0x10/0x10 [ 112.770924][ T4922] ret_from_fork_asm+0x1a/0x30 [ 112.770969][ T4922] [ 112.771021][ T4922] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.771071][ T4922] Bluetooth: hci3: failed to register connection device [ 113.173251][ T9] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 113.173368][ T9] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 113.402234][ T9] usb 4-1: USB disconnect, device number 2 [ 114.322321][ T5795] XFS (nullb0): Invalid superblock magic number [ 114.482201][ T5339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.662701][ T5339] usb 3-1: Using ep0 maxpacket: 32 [ 114.677044][ T5339] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 114.677130][ T5339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.757841][ T5339] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 114.757885][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.757908][ T5339] usb 3-1: Product: syz [ 114.757923][ T5339] usb 3-1: Manufacturer: syz [ 114.757939][ T5339] usb 3-1: SerialNumber: syz [ 115.010150][ T5339] usb 3-1: config 0 descriptor?? [ 115.034371][ T5823] cgroup: none used incorrectly [ 115.036349][ T5823] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.118617][ T4922] Bluetooth: hci3: command 0x2016 tx timeout [ 115.164916][ T5339] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 115.259260][ T5825] fuse: Unknown parameter '' [ 115.283159][ T5825] 9p: Bad value for 'rfdno' [ 115.675511][ T5339] gspca_sunplus: reg_r err -110 [ 116.655732][ T5851] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 116.675127][ T5339] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 116.719683][ T5852] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 117.128242][ T5861] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 117.184412][ T60] Bluetooth: hci3: command 0x2016 tx timeout [ 117.193105][ T5339] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.363260][ T5339] usb 1-1: Using ep0 maxpacket: 32 [ 117.375846][ T5339] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.375875][ T5339] usb 1-1: config 0 has no interface number 0 [ 117.379677][ T5339] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.379712][ T5339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.379734][ T5339] usb 1-1: Product: syz [ 117.379750][ T5339] usb 1-1: Manufacturer: syz [ 117.379765][ T5339] usb 1-1: SerialNumber: syz [ 117.523063][ T5339] usb 1-1: config 0 descriptor?? [ 117.563009][ T5339] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.962821][ T5339] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.151159][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 118.183029][ T5858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.183662][ T5858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.230173][ T5750] usb 3-1: USB disconnect, device number 2 [ 118.260257][ T5339] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.549513][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.649647][ T5339] usb 1-1: USB disconnect, device number 2 [ 118.738236][ T5339] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.762553][ T5339] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.763604][ T5339] quatech2 1-1:0.51: device disconnected [ 119.051943][ T109] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.109572][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.140200][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.164316][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.191212][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.203858][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.286737][ T5869] input: syz0 as /devices/virtual/input/input5 [ 120.467984][ T109] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.666895][ T820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.822231][ T820] usb 2-1: Using ep0 maxpacket: 32 [ 120.830678][ T820] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.830709][ T820] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.830733][ T820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.883579][ T820] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 120.883611][ T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.883634][ T820] usb 2-1: Product: syz [ 120.883650][ T820] usb 2-1: Manufacturer: syz [ 120.883666][ T820] usb 2-1: SerialNumber: syz [ 120.935466][ T820] usb 2-1: config 0 descriptor?? [ 121.135637][ T109] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.388679][ T820] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 121.429022][ T60] Bluetooth: hci2: command tx timeout [ 121.978090][ T109] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.223237][ T820] usb 2-1: USB disconnect, device number 2 [ 123.503956][ T60] Bluetooth: hci2: command tx timeout [ 124.860115][ T109] bridge_slave_1: left allmulticast mode [ 124.918696][ T109] bridge_slave_1: left promiscuous mode [ 125.010464][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.241159][ T5596] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 125.269839][ T109] bridge_slave_0: left allmulticast mode [ 125.269866][ T109] bridge_slave_0: left promiscuous mode [ 125.270064][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.417134][ T5596] usb 1-1: config index 0 descriptor too short (expected 292, got 37) [ 125.417166][ T5596] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 125.417202][ T5596] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 220, using maximum allowed: 30 [ 125.417395][ T5596] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 220 [ 125.417422][ T5596] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.418785][ T5596] usb 1-1: config index 1 descriptor too short (expected 292, got 37) [ 125.418822][ T5596] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 125.418853][ T5596] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 220, using maximum allowed: 30 [ 125.418890][ T5596] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 220 [ 125.418918][ T5596] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.420123][ T5596] usb 1-1: config index 2 descriptor too short (expected 292, got 37) [ 125.420147][ T5596] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 125.420179][ T5596] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 220, using maximum allowed: 30 [ 125.420237][ T5596] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 220 [ 125.420266][ T5596] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.420300][ T5596] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 125.420326][ T5596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.519907][ T5596] usb 1-1: config 0 descriptor?? [ 125.581451][ T60] Bluetooth: hci2: command tx timeout [ 125.632328][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 126.665564][ T109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.754950][ T109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.775892][ T109] bond0 (unregistering): Released all slaves [ 127.474298][ T5972] 9pnet_fd: p9_fd_create_tcp (5972): problem connecting socket to 127.0.0.1 [ 127.621200][ T60] Bluetooth: hci2: command tx timeout [ 127.856916][ T5596] usb 1-1: USB disconnect, device number 3 [ 128.111113][ T5992] netlink: 'syz.0.66': attribute type 10 has an invalid length. [ 128.186793][ T5994] netlink: 14 bytes leftover after parsing attributes in process `syz.0.66'. [ 129.404103][ T5997] Zero length message leads to an empty skb [ 129.461271][ T6005] mmap: syz.0.66 (6005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.748476][ T5992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.807392][ T5992] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 129.901559][ T6016] FAULT_INJECTION: forcing a failure. [ 129.901559][ T6016] name failslab, interval 1, probability 0, space 0, times 0 [ 129.901610][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.2.69 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 129.901636][ T6016] Tainted: [L]=SOFTLOCKUP [ 129.901642][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.901653][ T6016] Call Trace: [ 129.901660][ T6016] [ 129.901667][ T6016] dump_stack_lvl+0xe8/0x150 [ 129.901693][ T6016] should_fail_ex+0x46b/0x600 [ 129.901725][ T6016] should_failslab+0xa8/0x100 [ 129.901752][ T6016] __kmalloc_node_track_caller_noprof+0xfe/0x820 [ 129.901774][ T6016] ? xfrm_add_sa+0x1c92/0x4200 [ 129.901801][ T6016] ? xfrm_add_sa+0x1c92/0x4200 [ 129.901833][ T6016] kmemdup_noprof+0x2b/0x70 [ 129.901861][ T6016] xfrm_add_sa+0x1c92/0x4200 [ 129.901897][ T6016] ? __pfx_xfrm_add_sa+0x10/0x10 [ 129.901923][ T6016] ? apparmor_capable+0x126/0x170 [ 129.901954][ T6016] ? __nla_parse+0x40/0x60 [ 129.901977][ T6016] xfrm_user_rcv_msg+0x7cb/0xfc0 [ 129.902010][ T6016] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 129.902065][ T6016] ? __lock_acquire+0x6b5/0x2d10 [ 129.902093][ T6016] ? netlink_deliver_tap+0x19c/0x1b0 [ 129.902118][ T6016] ? netlink_unicast+0x754/0x920 [ 129.902138][ T6016] ? netlink_sendmsg+0x813/0xb40 [ 129.902162][ T6016] ? sock_sendmsg_nosec+0x13a/0x180 [ 129.902194][ T6016] ? ____sys_sendmsg+0x55c/0x870 [ 129.902229][ T6016] ? ___sys_sendmsg+0x2a5/0x360 [ 129.902254][ T6016] ? __x64_sys_sendmsg+0x1b7/0x290 [ 129.902289][ T6016] netlink_rcv_skb+0x232/0x4b0 [ 129.902319][ T6016] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 129.902355][ T6016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.902393][ T6016] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.902423][ T6016] ? mutex_lock_nested+0x152/0x1d0 [ 129.902458][ T6016] ? xfrm_netlink_rcv+0x6a/0x90 [ 129.902495][ T6016] xfrm_netlink_rcv+0x79/0x90 [ 129.902529][ T6016] netlink_unicast+0x780/0x920 [ 129.902567][ T6016] netlink_sendmsg+0x813/0xb40 [ 129.902607][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.902640][ T6016] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 129.902675][ T6016] ? aa_sock_msg_perm+0x122/0x200 [ 129.902700][ T6016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.902730][ T6016] sock_sendmsg_nosec+0x13a/0x180 [ 129.902769][ T6016] ____sys_sendmsg+0x55c/0x870 [ 129.902804][ T6016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.902844][ T6016] ? import_iovec+0x73/0xa0 [ 129.902873][ T6016] ___sys_sendmsg+0x2a5/0x360 [ 129.902900][ T6016] ? __lock_acquire+0x6b5/0x2d10 [ 129.902936][ T6016] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.903004][ T6016] ? __fget_files+0x2a/0x420 [ 129.903027][ T6016] ? __fget_files+0x3a6/0x420 [ 129.903062][ T6016] __x64_sys_sendmsg+0x1b7/0x290 [ 129.903096][ T6016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.903145][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.903171][ T6016] do_syscall_64+0x174/0x580 [ 129.903210][ T6016] ? clear_bhb_loop+0x40/0x90 [ 129.903239][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.903262][ T6016] RIP: 0033:0x7fbee051ce59 [ 129.903292][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.903312][ T6016] RSP: 002b:00007fbede76e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.903345][ T6016] RAX: ffffffffffffffda RBX: 00007fbee0795fa0 RCX: 00007fbee051ce59 [ 129.903363][ T6016] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 129.903377][ T6016] RBP: 00007fbede76e090 R08: 0000000000000000 R09: 0000000000000000 [ 129.903392][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.903405][ T6016] R13: 00007fbee0796038 R14: 00007fbee0795fa0 R15: 00007fffbff23678 [ 129.903441][ T6016] [ 130.457859][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.527281][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.626902][ T5994] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 130.662357][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.768556][ T5994] bond0 (unregistering): Released all slaves [ 130.833945][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.833981][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.901038][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.974365][ T10] usb 3-1: config 0 descriptor?? [ 131.308367][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 131.953171][ T6037] FAULT_INJECTION: forcing a failure. [ 131.953171][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 131.953210][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.0.73 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 131.953240][ T6037] Tainted: [L]=SOFTLOCKUP [ 131.953248][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.953262][ T6037] Call Trace: [ 131.953270][ T6037] [ 131.953280][ T6037] dump_stack_lvl+0xe8/0x150 [ 131.953311][ T6037] should_fail_ex+0x46b/0x600 [ 131.953352][ T6037] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 131.953377][ T6037] should_failslab+0xa8/0x100 [ 131.953404][ T6037] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 131.953426][ T6037] kmem_cache_alloc_lru_noprof+0xa7/0x6b0 [ 131.953464][ T6037] ? shmem_alloc_inode+0x28/0x40 [ 131.953486][ T6037] ? shmem_alloc_inode+0x28/0x40 [ 131.953516][ T6037] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 131.953540][ T6037] shmem_alloc_inode+0x28/0x40 [ 131.953564][ T6037] alloc_inode+0x6a/0x1b0 [ 131.953600][ T6037] new_inode+0x22/0x170 [ 131.953627][ T6037] shmem_get_inode+0x3da/0xfb0 [ 131.953661][ T6037] ? __pfx_shmem_get_inode+0x10/0x10 [ 131.953687][ T6037] ? __d_add+0x5e4/0x960 [ 131.953715][ T6037] ? bpf_lsm_inode_permission+0x9/0x20 [ 131.953741][ T6037] shmem_mknod+0x191/0x360 [ 131.953765][ T6037] ? d_splice_alias_ops+0x11c/0x440 [ 131.953797][ T6037] ? __pfx_shmem_create+0x10/0x10 [ 131.953821][ T6037] path_openat+0x1339/0x37e0 [ 131.953887][ T6037] do_file_open+0x23e/0x4a0 [ 131.953915][ T6037] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.953949][ T6037] ? __pfx_do_file_open+0x10/0x10 [ 131.953975][ T6037] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 131.954021][ T6037] ? alloc_fd+0x679/0x6f0 [ 131.954056][ T6037] do_sys_openat2+0x115/0x200 [ 131.954082][ T6037] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.954105][ T6037] ? ksys_write+0x248/0x270 [ 131.954135][ T6037] ? __pfx_ksys_write+0x10/0x10 [ 131.954174][ T6037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.954198][ T6037] __x64_sys_creat+0x8f/0xc0 [ 131.954224][ T6037] do_syscall_64+0x174/0x580 [ 131.954252][ T6037] ? trace_irq_disable+0x3b/0x140 [ 131.954279][ T6037] ? clear_bhb_loop+0x40/0x90 [ 131.954307][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.954329][ T6037] RIP: 0033:0x7f1fb9d8ce59 [ 131.954350][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.954368][ T6037] RSP: 002b:00007f1fb7fbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 131.954392][ T6037] RAX: ffffffffffffffda RBX: 00007f1fba006090 RCX: 00007f1fb9d8ce59 [ 131.954409][ T6037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 131.954423][ T6037] RBP: 00007f1fb7fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 131.954437][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.954450][ T6037] R13: 00007f1fba006128 R14: 00007f1fba006090 R15: 00007fffebd1b4b8 [ 131.954486][ T6037] [ 132.311065][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.312146][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.312463][ T5871] bridge_slave_0: entered allmulticast mode [ 132.316585][ T5871] bridge_slave_0: entered promiscuous mode [ 132.500164][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 132.564334][ T109] hsr_slave_0: left promiscuous mode [ 132.607094][ T109] hsr_slave_1: left promiscuous mode [ 132.612463][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.612552][ T109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.654022][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.654046][ T109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.786557][ T109] veth1_macvtap: left promiscuous mode [ 132.786808][ T109] veth0_macvtap: left promiscuous mode [ 132.800891][ T109] veth1_vlan: left promiscuous mode [ 132.814291][ T109] veth0_vlan: left promiscuous mode [ 133.158208][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.166583][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.618536][ T10] usb 3-1: USB disconnect, device number 3 [ 134.005006][ T109] team0 (unregistering): Port device team_slave_1 removed [ 134.059892][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 134.080676][ T109] team0 (unregistering): Port device team_slave_0 removed [ 134.245800][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.245837][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.245869][ T10] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 134.245885][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.322116][ T10] usb 3-1: config 0 descriptor?? [ 134.407427][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.407857][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.408227][ T5871] bridge_slave_1: entered allmulticast mode [ 134.439534][ T5871] bridge_slave_1: entered promiscuous mode [ 134.566079][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 134.616735][ T6059] FAULT_INJECTION: forcing a failure. [ 134.616735][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 134.616774][ T6059] CPU: 0 UID: 0 PID: 6059 Comm: syz.0.76 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 134.616804][ T6059] Tainted: [L]=SOFTLOCKUP [ 134.616812][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.616830][ T6059] Call Trace: [ 134.616838][ T6059] [ 134.616847][ T6059] dump_stack_lvl+0xe8/0x150 [ 134.616878][ T6059] should_fail_ex+0x46b/0x600 [ 134.616916][ T6059] should_failslab+0xa8/0x100 [ 134.616944][ T6059] __kmalloc_noprof+0xfe/0x7e0 [ 134.616966][ T6059] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 134.616990][ T6059] ? tomoyo_encode+0x28b/0x550 [ 134.617012][ T6059] ? tomoyo_encode+0x28b/0x550 [ 134.617044][ T6059] tomoyo_encode+0x28b/0x550 [ 134.617075][ T6059] tomoyo_mount_permission+0x3a2/0x9d0 [ 134.617102][ T6059] ? stack_depot_save_flags+0x33/0x810 [ 134.617134][ T6059] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 134.617157][ T6059] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 134.617239][ T6059] security_sb_mount+0xe4/0x320 [ 134.617268][ T6059] path_mount+0xbc/0x10e0 [ 134.617290][ T6059] ? user_path_at+0xd4/0x160 [ 134.617330][ T6059] ? user_path_at+0xd4/0x160 [ 134.617358][ T6059] __se_sys_mount+0x31d/0x420 [ 134.617387][ T6059] ? __pfx___se_sys_mount+0x10/0x10 [ 134.617416][ T6059] ? __x64_sys_mount+0x20/0xc0 [ 134.617438][ T6059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.617463][ T6059] do_syscall_64+0x174/0x580 [ 134.617493][ T6059] ? clear_bhb_loop+0x40/0x90 [ 134.617521][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.617544][ T6059] RIP: 0033:0x7f1fb9d8ce59 [ 134.617565][ T6059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.617583][ T6059] RSP: 002b:00007f1fb7fde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.617606][ T6059] RAX: ffffffffffffffda RBX: 00007f1fba005fa0 RCX: 00007f1fb9d8ce59 [ 134.617623][ T6059] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 134.617638][ T6059] RBP: 00007f1fb7fde090 R08: 0000200000000100 R09: 0000000000000000 [ 134.617653][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.617666][ T6059] R13: 00007f1fba006038 R14: 00007f1fba005fa0 R15: 00007fffebd1b4b8 [ 134.617702][ T6059] [ 134.909491][ T10] belkin 0003:050D:3201.0001: unknown global tag 0xe [ 134.909527][ T10] belkin 0003:050D:3201.0001: item 0 1 1 14 parsing failed [ 134.912707][ T10] belkin 0003:050D:3201.0001: parse failed [ 134.912825][ T10] belkin 0003:050D:3201.0001: probe with driver belkin failed with error -22 [ 135.013780][ T5596] usb 3-1: USB disconnect, device number 4 [ 135.085490][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.108877][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.131253][ T6061] xt_l2tp: unknown flags: ff [ 135.340748][ T5871] team0: Port device team_slave_0 added [ 135.400197][ T5871] team0: Port device team_slave_1 added [ 135.447355][ T6064] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 135.515899][ T6064] macvlan1: entered promiscuous mode [ 135.515928][ T6064] macvlan1: entered allmulticast mode [ 135.515960][ T6064] FAULT_INJECTION: forcing a failure. [ 135.515960][ T6064] name failslab, interval 1, probability 0, space 0, times 0 [ 135.515992][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.0.78 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 135.516020][ T6064] Tainted: [L]=SOFTLOCKUP [ 135.516027][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.516041][ T6064] Call Trace: [ 135.516049][ T6064] [ 135.516058][ T6064] dump_stack_lvl+0xe8/0x150 [ 135.516089][ T6064] should_fail_ex+0x46b/0x600 [ 135.516124][ T6064] should_failslab+0xa8/0x100 [ 135.516150][ T6064] kmem_cache_alloc_node_noprof+0xae/0x710 [ 135.516187][ T6064] ? __alloc_skb+0x1d0/0x7d0 [ 135.516209][ T6064] ? __alloc_skb+0x1d0/0x7d0 [ 135.516240][ T6064] __alloc_skb+0x1d0/0x7d0 [ 135.516269][ T6064] rtmsg_ifinfo_build_skb+0x84/0x260 [ 135.516315][ T6064] rtmsg_ifinfo+0x8c/0x1a0 [ 135.516357][ T6064] __dev_notify_flags+0xf2/0x310 [ 135.516387][ T6064] ? __pfx___dev_notify_flags+0x10/0x10 [ 135.516410][ T6064] ? __dev_change_flags+0x5fe/0x7e0 [ 135.516448][ T6064] ? __pfx___dev_change_flags+0x10/0x10 [ 135.516476][ T6064] ? __lock_acquire+0x6b5/0x2d10 [ 135.516509][ T6064] ? trace_sched_exit_tp+0x3a/0x130 [ 135.516547][ T6064] netif_change_flags+0xe8/0x1a0 [ 135.516580][ T6064] do_setlink+0xfa5/0x45a0 [ 135.516605][ T6064] ? __wake_up_klogd+0xe6/0x120 [ 135.516652][ T6064] ? __pfx_do_setlink+0x10/0x10 [ 135.516681][ T6064] ? do_raw_spin_unlock+0xf5/0x210 [ 135.516711][ T6064] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 135.516754][ T6064] ? rt_mutex_slowlock_block+0x51e/0x670 [ 135.516788][ T6064] ? rt_mutex_slowlock_block+0x569/0x670 [ 135.516835][ T6064] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.516863][ T6064] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.516894][ T6064] ? rt_mutex_slowlock+0x420/0x780 [ 135.516917][ T6064] ? rt_mutex_slowlock+0x1fd/0x780 [ 135.516940][ T6064] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 135.516974][ T6064] ? rtnl_newlink+0x883/0x1bb0 [ 135.517003][ T6064] ? rtnl_newlink+0x883/0x1bb0 [ 135.517035][ T6064] ? mutex_lock_nested+0x168/0x1d0 [ 135.517074][ T6064] rtnl_newlink+0x15ad/0x1bb0 [ 135.517113][ T6064] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.517137][ T6064] ? __lock_acquire+0x6b5/0x2d10 [ 135.517173][ T6064] ? __lock_acquire+0x6b5/0x2d10 [ 135.517205][ T6064] ? __lock_acquire+0x6b5/0x2d10 [ 135.517233][ T6064] ? sock_sendmsg_nosec+0x13a/0x180 [ 135.517270][ T6064] ? pointer+0x6fa/0xe50 [ 135.517298][ T6064] ? __pfx_pointer+0x10/0x10 [ 135.517335][ T6064] ? vsnprintf+0xe42/0xef0 [ 135.517368][ T6064] ? __lock_acquire+0x6b5/0x2d10 [ 135.517400][ T6064] ? sock_sendmsg_nosec+0x13a/0x180 [ 135.517437][ T6064] ? __pfx_snprintf+0x10/0x10 [ 135.517461][ T6064] ? unwind_get_return_address+0x4d/0x90 [ 135.517493][ T6064] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.517532][ T6064] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 135.517574][ T6064] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.517598][ T6064] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 135.517627][ T6064] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 135.517660][ T6064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.517683][ T6064] ? ref_tracker_free+0x673/0x820 [ 135.517725][ T6064] ? __netlink_deliver_tap+0x636/0x8b0 [ 135.517753][ T6064] ? netlink_deliver_tap+0x19c/0x1b0 [ 135.517780][ T6064] ? netlink_unicast+0x754/0x920 [ 135.517801][ T6064] ? netlink_sendmsg+0x813/0xb40 [ 135.517828][ T6064] ? sock_sendmsg_nosec+0x13a/0x180 [ 135.517860][ T6064] ? ____sys_sendmsg+0x55c/0x870 [ 135.517886][ T6064] ? ___sys_sendmsg+0x2a5/0x360 [ 135.517912][ T6064] ? __x64_sys_sendmsg+0x1b7/0x290 [ 135.517938][ T6064] ? do_syscall_64+0x174/0x580 [ 135.517965][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.517999][ T6064] netlink_rcv_skb+0x232/0x4b0 [ 135.518028][ T6064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.518055][ T6064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.518098][ T6064] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.518126][ T6064] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.518161][ T6064] netlink_unicast+0x780/0x920 [ 135.518196][ T6064] netlink_sendmsg+0x813/0xb40 [ 135.518236][ T6064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.518267][ T6064] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 135.518301][ T6064] ? aa_sock_msg_perm+0x122/0x200 [ 135.518327][ T6064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.518355][ T6064] sock_sendmsg_nosec+0x13a/0x180 [ 135.518392][ T6064] ____sys_sendmsg+0x55c/0x870 [ 135.518427][ T6064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.518466][ T6064] ? import_iovec+0x73/0xa0 [ 135.518496][ T6064] ___sys_sendmsg+0x2a5/0x360 [ 135.518524][ T6064] ? __lock_acquire+0x6b5/0x2d10 [ 135.518557][ T6064] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.518624][ T6064] ? __fget_files+0x2a/0x420 [ 135.518656][ T6064] ? __fget_files+0x3a6/0x420 [ 135.518690][ T6064] __x64_sys_sendmsg+0x1b7/0x290 [ 135.518723][ T6064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.518771][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.518797][ T6064] do_syscall_64+0x174/0x580 [ 135.518824][ T6064] ? trace_irq_disable+0x3b/0x140 [ 135.518851][ T6064] ? clear_bhb_loop+0x40/0x90 [ 135.518879][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.518901][ T6064] RIP: 0033:0x7f1fb9d8ce59 [ 135.518921][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.518939][ T6064] RSP: 002b:00007f1fb7fde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.518963][ T6064] RAX: ffffffffffffffda RBX: 00007f1fba005fa0 RCX: 00007f1fb9d8ce59 [ 135.518978][ T6064] RDX: 0000000000040084 RSI: 0000200000000600 RDI: 0000000000000003 [ 135.518993][ T6064] RBP: 00007f1fb7fde090 R08: 0000000000000000 R09: 0000000000000000 [ 135.519006][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.519019][ T6064] R13: 00007f1fba006038 R14: 00007f1fba005fa0 R15: 00007fffebd1b4b8 [ 135.519053][ T6064] [ 136.260363][ T6071] FAULT_INJECTION: forcing a failure. [ 136.260363][ T6071] name failslab, interval 1, probability 0, space 0, times 0 [ 136.260420][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.2.79 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 136.260452][ T6071] Tainted: [L]=SOFTLOCKUP [ 136.260460][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.260473][ T6071] Call Trace: [ 136.260482][ T6071] [ 136.260491][ T6071] dump_stack_lvl+0xe8/0x150 [ 136.260525][ T6071] should_fail_ex+0x46b/0x600 [ 136.260563][ T6071] should_failslab+0xa8/0x100 [ 136.260602][ T6071] __kmalloc_cache_noprof+0xa0/0x6d0 [ 136.260626][ T6071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 136.260653][ T6071] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 136.260689][ T6071] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 136.260731][ T6071] vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 136.260767][ T6071] drm_atomic_get_crtc_state+0x1e5/0x680 [ 136.260800][ T6071] ? drm_property_change_valid_get+0x243/0x700 [ 136.260833][ T6071] drm_atomic_set_property+0x17b/0x3fb0 [ 136.260867][ T6071] ? lockdep_hardirqs_on+0x7a/0x110 [ 136.260898][ T6071] ? rt_mutex_slowunlock+0x1cb/0x300 [ 136.260926][ T6071] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 136.260970][ T6071] ? __might_fault+0xaf/0x130 [ 136.261017][ T6071] drm_mode_atomic_ioctl+0x7be/0xdd0 [ 136.261076][ T6071] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 136.261136][ T6071] ? rt_spin_unlock+0x14f/0x200 [ 136.261162][ T6071] ? rt_spin_unlock+0x160/0x200 [ 136.261187][ T6071] ? drm_is_current_master+0x1a2/0x210 [ 136.261212][ T6071] drm_ioctl_kernel+0x2e2/0x3b0 [ 136.261244][ T6071] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 136.261279][ T6071] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 136.261318][ T6071] drm_ioctl+0x6c0/0xb80 [ 136.261353][ T6071] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 136.261393][ T6071] ? __pfx_drm_ioctl+0x10/0x10 [ 136.261436][ T6071] ? __fget_files+0x2a/0x420 [ 136.261464][ T6071] ? bpf_lsm_file_ioctl+0x9/0x20 [ 136.261491][ T6071] ? __pfx_drm_ioctl+0x10/0x10 [ 136.261521][ T6071] __se_sys_ioctl+0xff/0x170 [ 136.261551][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.261575][ T6071] do_syscall_64+0x174/0x580 [ 136.261604][ T6071] ? trace_irq_disable+0x3b/0x140 [ 136.261632][ T6071] ? clear_bhb_loop+0x40/0x90 [ 136.261659][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.261681][ T6071] RIP: 0033:0x7fbee051ce59 [ 136.261702][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.261721][ T6071] RSP: 002b:00007fbede76e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.261745][ T6071] RAX: ffffffffffffffda RBX: 00007fbee0795fa0 RCX: 00007fbee051ce59 [ 136.261761][ T6071] RDX: 0000200000000580 RSI: 00000000c03864bc RDI: 0000000000000003 [ 136.261776][ T6071] RBP: 00007fbede76e090 R08: 0000000000000000 R09: 0000000000000000 [ 136.261790][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.261803][ T6071] R13: 00007fbee0796038 R14: 00007fbee0795fa0 R15: 00007fffbff23678 [ 136.261838][ T6071] [ 136.751937][ T6076] FAULT_INJECTION: forcing a failure. [ 136.751937][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 136.751979][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.0.80 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 136.752011][ T6076] Tainted: [L]=SOFTLOCKUP [ 136.752019][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.752032][ T6076] Call Trace: [ 136.752040][ T6076] [ 136.752050][ T6076] dump_stack_lvl+0xe8/0x150 [ 136.752094][ T6076] should_fail_ex+0x46b/0x600 [ 136.752139][ T6076] should_failslab+0xa8/0x100 [ 136.752185][ T6076] __kmalloc_cache_noprof+0xa0/0x6d0 [ 136.752214][ T6076] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 136.752272][ T6076] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 136.752317][ T6076] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 136.752360][ T6076] vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 136.752429][ T6076] drm_atomic_get_crtc_state+0x1e5/0x680 [ 136.752507][ T6076] ? drm_property_change_valid_get+0x243/0x700 [ 136.752558][ T6076] drm_atomic_set_property+0x17b/0x3fb0 [ 136.752602][ T6076] ? lockdep_hardirqs_on+0x7a/0x110 [ 136.752632][ T6076] ? rt_mutex_slowunlock+0x1cb/0x300 [ 136.752661][ T6076] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 136.752697][ T6076] ? __might_fault+0xaf/0x130 [ 136.752742][ T6076] drm_mode_atomic_ioctl+0x7be/0xdd0 [ 136.752799][ T6076] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 136.752853][ T6076] ? rt_spin_unlock+0x14f/0x200 [ 136.752877][ T6076] ? rt_spin_unlock+0x160/0x200 [ 136.752900][ T6076] ? drm_is_current_master+0x1a2/0x210 [ 136.752925][ T6076] drm_ioctl_kernel+0x2e2/0x3b0 [ 136.752957][ T6076] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 136.752991][ T6076] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 136.753033][ T6076] drm_ioctl+0x6c0/0xb80 [ 136.753068][ T6076] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 136.753109][ T6076] ? __pfx_drm_ioctl+0x10/0x10 [ 136.753153][ T6076] ? __fget_files+0x2a/0x420 [ 136.753189][ T6076] ? bpf_lsm_file_ioctl+0x9/0x20 [ 136.753216][ T6076] ? __pfx_drm_ioctl+0x10/0x10 [ 136.753245][ T6076] __se_sys_ioctl+0xff/0x170 [ 136.753275][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.753301][ T6076] do_syscall_64+0x174/0x580 [ 136.753329][ T6076] ? trace_irq_disable+0x3b/0x140 [ 136.753357][ T6076] ? clear_bhb_loop+0x40/0x90 [ 136.753385][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.753408][ T6076] RIP: 0033:0x7f1fb9d8ce59 [ 136.753429][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.753447][ T6076] RSP: 002b:00007f1fb7fde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.753470][ T6076] RAX: ffffffffffffffda RBX: 00007f1fba005fa0 RCX: 00007f1fb9d8ce59 [ 136.753487][ T6076] RDX: 0000200000000580 RSI: 00000000c03864bc RDI: 0000000000000003 [ 136.753502][ T6076] RBP: 00007f1fb7fde090 R08: 0000000000000000 R09: 0000000000000000 [ 136.753516][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.753529][ T6076] R13: 00007f1fba006038 R14: 00007f1fba005fa0 R15: 00007fffebd1b4b8 [ 136.753565][ T6076] [ 137.038722][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.038766][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.038874][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.157055][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.157073][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.157102][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.550693][ T5871] hsr_slave_0: entered promiscuous mode [ 137.554800][ T5871] hsr_slave_1: entered promiscuous mode [ 137.583425][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 137.583453][ T5871] Cannot create hsr debugfs directory [ 137.675232][ T6091] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 138.207509][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 138.371059][ T5702] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.564015][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.574899][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.574929][ T5702] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.615121][ T5702] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 138.615154][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.615172][ T5702] usb 1-1: Product: syz [ 138.615184][ T5702] usb 1-1: Manufacturer: syz [ 138.615196][ T5702] usb 1-1: SerialNumber: syz [ 138.946074][ T5596] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.109248][ T5596] usb 3-1: Using ep0 maxpacket: 16 [ 139.110321][ T5596] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 139.112294][ T5596] usb 3-1: config 6 has no interfaces? [ 139.114007][ T5596] usb 3-1: config 6 has no interfaces? [ 139.145555][ T5702] usb 1-1: selecting invalid altsetting 1 [ 139.145995][ T5596] usb 3-1: config 6 has no interfaces? [ 139.184509][ T5596] usb 3-1: config 6 has no interfaces? [ 139.207351][ T5596] usb 3-1: config 6 has no interfaces? [ 139.220885][ T5596] usb 3-1: config 6 has no interfaces? [ 139.236789][ T5596] usb 3-1: config 6 has no interfaces? [ 139.253345][ T5596] usb 3-1: config 6 has no interfaces? [ 139.295737][ T5596] usb 3-1: string descriptor 0 read error: -71 [ 139.296010][ T5596] usb 3-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 139.296049][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 139.297680][ T5702] usb 1-1: unit 0 not found! [ 139.402791][ T5596] usb 3-1: rejected 8 configurations due to insufficient available bus power [ 139.402821][ T5596] usb 3-1: no configuration chosen from 8 choices [ 139.443960][ T5596] usb 3-1: USB disconnect, device number 5 [ 140.586279][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 140.658845][ T5702] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.676275][ T5702] usb 1-1: USB disconnect, device number 4 [ 140.779621][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.834732][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.873557][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.888179][ T5596] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.894885][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.947089][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.039529][ T5702] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.097921][ T5596] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 141.097959][ T5596] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.097997][ T5596] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 141.098014][ T5596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.101649][ T5596] usb 3-1: config 0 descriptor?? [ 141.245552][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 141.248186][ T5702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.248238][ T5702] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 141.248265][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.267595][ T5702] usb 1-1: config 0 descriptor?? [ 141.326566][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.641328][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.657492][ T5596] playstation 0003:054C:0BA0.0002: ignoring exceeding usage max [ 141.712711][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.907151][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.962734][ T5596] playstation 0003:054C:0BA0.0002: hidraw0: USB HID v0.7f Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 142.083773][ T5596] playstation 0003:054C:0BA0.0002: Invalid reportID received, expected 18 got 83 [ 142.083863][ T5596] playstation 0003:054C:0BA0.0002: Failed to retrieve DualShock4 pairing info: -22 [ 142.083915][ T5596] playstation 0003:054C:0BA0.0002: Failed to get MAC address from DualShock4 [ 142.083938][ T5596] playstation 0003:054C:0BA0.0002: Failed to create dualshock4. [ 142.201454][ T5596] playstation 0003:054C:0BA0.0002: probe with driver playstation failed with error -22 [ 142.217913][ T5702] hid-led 0003:0FC5:B080.0003: reserved main item tag 0xd [ 142.218165][ T5702] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.218204][ T5702] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.218233][ T5702] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.218260][ T5702] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.218287][ T5702] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.218317][ T5702] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 142.311468][ T60] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 142.318497][ T820] usb 3-1: USB disconnect, device number 6 [ 142.519891][ T5702] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71 [ 142.573944][ T5702] ================================================================== [ 142.573968][ T5702] BUG: KASAN: vmalloc-out-of-bounds in __li[ 142.573968][ T5702] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 142.574015][ T5702] Read of size 8 at addr ffffc9001061b008 by task kworker/1:4/5702 [ 142.574036][ T5702] [ 142.574054][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 142.574088][ T5702] Tainted: [L]=SOFTLOCKUP [ 142.574097][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.574114][ T5702] Workqueue: usb_hub_wq hub_event [ 142.574145][ T5702] Call Trace: [ 142.574155][ T5702] [ 142.574166][ T5702] dump_stack_lvl+0xe8/0x150 [ 142.574197][ T5702] print_address_description+0x55/0x1e0 [ 142.574230][ T5702] ? __list_add_valid_or_report+0x4e/0x130 [ 142.574266][ T5702] print_report+0x58/0x70 [ 142.574295][ T5702] kasan_report+0x117/0x150 [ 142.574324][ T5702] ? __list_add_valid_or_report+0x4e/0x130 [ 142.574394][ T5702] __list_add_valid_or_report+0x4e/0x130 [ 142.574435][ T5702] kcov_remote_stop+0x457/0x680 [ 142.574467][ T5702] hub_event+0x49d8/0x4f60 [ 142.574524][ T5702] ? __pfx_hub_event+0x10/0x10 [ 142.574552][ T5702] ? process_one_work+0x8be/0x1630 [ 142.574596][ T5702] ? process_one_work+0x8be/0x1630 [ 142.574630][ T5702] process_one_work+0x98b/0x1630 [ 142.574678][ T5702] ? __pfx_process_one_work+0x10/0x10 [ 142.574712][ T5702] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.574749][ T5702] worker_thread+0xb8e/0x1140 [ 142.574793][ T5702] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.574832][ T5702] kthread+0x388/0x470 [ 142.574860][ T5702] ? __pfx_worker_thread+0x10/0x10 [ 142.574897][ T5702] ? __pfx_kthread+0x10/0x10 [ 142.574924][ T5702] ret_from_fork+0x514/0xb70 [ 142.574955][ T5702] ? __pfx_ret_from_fork+0x10/0x10 [ 142.574983][ T5702] ? __switch_to+0xc79/0x1410 [ 142.575009][ T5702] ? __pfx_kthread+0x10/0x10 [ 142.575037][ T5702] ret_from_fork_asm+0x1a/0x30 [ 142.575079][ T5702] [ 142.575088][ T5702] [ 142.575094][ T5702] The buggy address belongs to a vmalloc virtual mapping [ 142.575113][ T5702] Memory state around the buggy address: [ 142.575124][ T5702] ffffc9001061af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.575138][ T5702] ffffc9001061af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.575151][ T5702] >ffffc9001061b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.575162][ T5702] ^ [ 142.575174][ T5702] ffffc9001061b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.575189][ T5702] ffffc9001061b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 142.575201][ T5702] ================================================================== [ 142.591024][ T5702] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.591049][ T5702] CPU: 1 UID: 0 PID: 5702 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 142.591079][ T5702] Tainted: [L]=SOFTLOCKUP [ 142.591087][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.591101][ T5702] Workqueue: usb_hub_wq hub_event [ 142.591129][ T5702] Call Trace: [ 142.591138][ T5702] [ 142.591146][ T5702] vpanic+0x56c/0xa60 [ 142.591178][ T5702] ? __pfx_vpanic+0x10/0x10 [ 142.591206][ T5702] ? __pfx___schedule+0x10/0x10 [ 142.591230][ T5702] panic+0xc5/0xd0 [ 142.591257][ T5702] ? __pfx_panic+0x10/0x10 [ 142.591285][ T5702] ? preempt_schedule_thunk+0x16/0x40 [ 142.591321][ T5702] ? __list_add_valid_or_report+0x4e/0x130 [ 142.591364][ T5702] check_panic_on_warn+0x89/0xb0 [ 142.591389][ T5702] ? __list_add_valid_or_report+0x4e/0x130 [ 142.591417][ T5702] end_report+0x73/0x170 [ 142.591438][ T5702] ? __list_add_valid_or_report+0x4e/0x130 [ 142.591467][ T5702] kasan_report+0x128/0x150 [ 142.591489][ T5702] ? __list_add_valid_or_report+0x4e/0x130 [ 142.591525][ T5702] __list_add_valid_or_report+0x4e/0x130 [ 142.591559][ T5702] kcov_remote_stop+0x457/0x680 [ 142.591586][ T5702] hub_event+0x49d8/0x4f60 [ 142.591634][ T5702] ? __pfx_hub_event+0x10/0x10 [ 142.591657][ T5702] ? process_one_work+0x8be/0x1630 [ 142.591694][ T5702] ? process_one_work+0x8be/0x1630 [ 142.591724][ T5702] process_one_work+0x98b/0x1630 [ 142.591765][ T5702] ? __pfx_process_one_work+0x10/0x10 [ 142.591795][ T5702] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.591827][ T5702] worker_thread+0xb8e/0x1140 [ 142.591866][ T5702] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.591902][ T5702] kthread+0x388/0x470 [ 142.591928][ T5702] ? __pfx_worker_thread+0x10/0x10 [ 142.592064][ T5702] ? __pfx_kthread+0x10/0x10 [ 142.592163][ T5702] ret_from_fork+0x514/0xb70 [ 142.592247][ T5702] ? __pfx_ret_from_fork+0x10/0x10 [ 142.592321][ T5702] ? __switch_to+0xc79/0x1410 [ 142.592401][ T5702] ? __pfx_kthread+0x10/0x10 [ 142.592474][ T5702] ret_from_fork_asm+0x1a/0x30 [ 142.592589][ T5702] [ 142.593220][ T5702] Kernel Offset: disabled