last executing test programs: 37.326240293s ago: executing program 3 (id=561): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/123, 0x7b}, {0x0}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6d", 0x8}) 37.095808446s ago: executing program 3 (id=564): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) 30.084271072s ago: executing program 3 (id=584): syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1603, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 26.311949612s ago: executing program 3 (id=594): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) 18.496541148s ago: executing program 3 (id=608): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40000) ioctl$BLKDISCARD(r1, 0x1277, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x859}) r7 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r7, 0x4}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r7, 0x27}) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 14.641747161s ago: executing program 2 (id=620): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r7}}, 0x48) fcntl$dupfd(r0, 0x406, r0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 13.01601136s ago: executing program 4 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010402ff7f00000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000005800128009000100766c616e00000000480002800c0002000800000000000000280004800500010084000000030000000c00010002000000ff0f00000c000100ff030000ff0f0000100003800c00010000000000c0ffffff14000300766c616e3000"/116], 0x8c}}, 0xc0c0) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x200) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f00000004c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604000c002b8008000200000001001400030076657468305f766c616e0000000000000a000100aa"], 0x4c}}, 0x48000) 12.981868496s ago: executing program 3 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x247c0) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380), 0x0, 0x20000090, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6187200, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 12.87642105s ago: executing program 0 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000420033"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x10102, 0x0) 10.799663663s ago: executing program 0 (id=625): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet6(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}, 0x80) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10.799342617s ago: executing program 1 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@ipv6_newroute={0x20, 0x18, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x3, 0xc8}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 10.395635278s ago: executing program 1 (id=627): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x301040, 0x32) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 10.314884556s ago: executing program 4 (id=628): socket$igmp6(0xa, 0x3, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 9.875687548s ago: executing program 0 (id=629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x1}, 0x10, 0x0, r4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setgid(0xee00) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x9, 0xf, 0x200, 0x6}, &(0x7f00000006c0)=0x14) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) 9.875366158s ago: executing program 2 (id=630): socket$inet(0x2, 0x4000000000000001, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20, 0x1000002, 0x94}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x1003, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.394968035s ago: executing program 1 (id=631): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {0x0, 0x3}, {0x6, 0x1c}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x8e}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r3, r7, &(0x7f0000000180)={0x0, 0x3, 0x1f00, 0x1, 0x187}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x1, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0xffffffd, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc788, 0x2000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x3, 0x1e9}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xdff9, 0x8004, 0x0, 0x0}}, 0x0) link(0x0, &(0x7f0000000180)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x14, &(0x7f0000009ac0)=[{0x5, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/194, 0xc2}]}, {0xfffffc01, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/40, 0x28}, {&(0x7f0000001ac0)=""/190, 0xbe}, {&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000001c40)=""/147, 0x93}, {&(0x7f0000001d00)=""/251, 0xfb}]}, {0x80000001, 0x0, &(0x7f0000002100)=[{&(0x7f0000001e80)=""/27, 0x1b}, {&(0x7f0000001ec0)=""/156, 0x9c}, {&(0x7f0000001f80)=""/112, 0x70}, {&(0x7f0000002000)=""/167, 0xa7}, {&(0x7f00000020c0)}]}, {0x7, 0x0, &(0x7f0000002480)}, {0x101, 0x0, &(0x7f0000003900)=[{&(0x7f0000002500)=""/171, 0xab}, {&(0x7f00000025c0)=""/221, 0xdd}, {&(0x7f00000026c0)=""/166, 0xa6}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/58, 0x3a}, {&(0x7f00000037c0)=""/104, 0x68}, {&(0x7f0000003840)}, {&(0x7f0000003880)=""/84, 0x54}]}, {0x3, 0x0, &(0x7f0000003ac0)}, {0x5, 0x0, &(0x7f0000005d80)=[{&(0x7f0000003b00)=""/22, 0x16}, {&(0x7f0000003b40)=""/155, 0x9b}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/159, 0x9f}, {&(0x7f0000004cc0)=""/43, 0x2b}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/101, 0x65}]}, {0x6, 0x0, &(0x7f0000007100)=[{&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000006e00)=""/185, 0xb9}, {&(0x7f0000006ec0)=""/189, 0xbd}, {&(0x7f0000006f80)=""/96, 0x60}, {&(0x7f0000000600)=""/224, 0xe0}]}, {0x5, 0x0, &(0x7f0000008480)=[{&(0x7f0000007180)=""/225, 0xe1}, {&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/165, 0xa5}, {0x0}, {&(0x7f0000008400)=""/126, 0x7e}]}, {0x5, 0x0, 0x0}, {0x5e68, 0x0, &(0x7f0000009a80)=[{&(0x7f0000008800)=""/4096, 0x1000}, {0x0}, {&(0x7f00000098c0)=""/143, 0x8f}, {&(0x7f0000009980)=""/207, 0xcf}]}], 0xb) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}}) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x72e) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a009090400000001"], 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r9, &(0x7f00000003c0)=ANY=[], 0xff2e) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.354261703s ago: executing program 4 (id=632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ff7f00000000000000000000340001a16200000095000078c2000000"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet6(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.258418154s ago: executing program 2 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) 6.178593087s ago: executing program 4 (id=634): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b9421"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x1}, 0x10, 0x0, r4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setgid(0xee00) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 4.603777482s ago: executing program 2 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r0, 0x0, 0x0, 0x10102, 0x0) 4.547719612s ago: executing program 4 (id=636): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r3, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) close(0xffffffffffffffff) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) epoll_create(0x2) read$FUSE(r5, &(0x7f0000002540)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000000000007118af000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.451294264s ago: executing program 2 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@ipv6_newroute={0x20, 0x18, 0x1, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x3, 0xc8}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'dh\x00', 0x0, 0x10000004, 0x30}, 0x2c) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r1, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c0012"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 4.376720468s ago: executing program 1 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x1000000) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000001000010402ff7f00000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000005800128009000100766c616e00000000480002800c0002000800000000000000280004800500010084000000030000000c00010002000000ff0f00000c000100ff030000ff0f0000100003800c00010000000000c0ffffff14000300766c616e3000"/116], 0x8c}}, 0xc0c0) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x200) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f00000004c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604000c002b8008000200000001001400030076657468305f766c616e0000000000000a000100aa"], 0x4c}}, 0x48000) 2.701872014s ago: executing program 0 (id=639): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4080) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000190001090000000000000200021800000000fd010000000008000100ac141400100016800c0001000000000000000fff080005000a010102060015"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.684477319s ago: executing program 2 (id=640): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 2.535675284s ago: executing program 0 (id=641): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x301040, 0x32) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.504849319s ago: executing program 4 (id=642): socket$igmp6(0xa, 0x3, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.503978183s ago: executing program 1 (id=643): socket$inet(0x2, 0x4000000000000001, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20, 0x1000002, 0x94}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x1003, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.206106874s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 1 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lstat(&(0x7f0000000040)='./my_sys\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 72.340674][ T5581] cgroup: Unknown subsys name 'net' [ 72.611269][ T5581] cgroup: Unknown subsys name 'cpuset' [ 72.675367][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.317328][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.611100][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.626840][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.627673][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.629438][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.630161][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.702755][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.719307][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.769339][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.780009][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.801759][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.802614][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.824061][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.827004][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.830055][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.833324][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.837677][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.838453][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.840845][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.846972][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.851256][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.858370][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.898134][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.926044][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.937674][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.938512][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.736528][ T5604] Bluetooth: hci0: command tx timeout [ 78.897600][ T5604] Bluetooth: hci1: command tx timeout [ 78.975658][ T5604] Bluetooth: hci2: command tx timeout [ 79.054751][ T5604] Bluetooth: hci3: command tx timeout [ 79.055013][ T5604] Bluetooth: hci4: command tx timeout [ 79.136413][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.137189][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.137324][ T5593] bridge_slave_0: entered allmulticast mode [ 79.138944][ T5593] bridge_slave_0: entered promiscuous mode [ 79.183653][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.183721][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.184034][ T5593] bridge_slave_1: entered allmulticast mode [ 79.186842][ T5593] bridge_slave_1: entered promiscuous mode [ 79.339169][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.339401][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.339593][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.339749][ T5599] bridge_slave_0: entered allmulticast mode [ 79.341382][ T5599] bridge_slave_0: entered promiscuous mode [ 79.396510][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.396800][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.396880][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.396975][ T5599] bridge_slave_1: entered allmulticast mode [ 79.398757][ T5599] bridge_slave_1: entered promiscuous mode [ 79.433250][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.433362][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.433837][ T5595] bridge_slave_0: entered allmulticast mode [ 79.437786][ T5595] bridge_slave_0: entered promiscuous mode [ 79.443854][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.443966][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.444128][ T5603] bridge_slave_0: entered allmulticast mode [ 79.447957][ T5603] bridge_slave_0: entered promiscuous mode [ 79.503105][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.503231][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.503341][ T5595] bridge_slave_1: entered allmulticast mode [ 79.507529][ T5595] bridge_slave_1: entered promiscuous mode [ 79.509793][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.509904][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.510410][ T5603] bridge_slave_1: entered allmulticast mode [ 79.513167][ T5603] bridge_slave_1: entered promiscuous mode [ 79.636949][ T5593] team0: Port device team_slave_0 added [ 79.640733][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.687538][ T5593] team0: Port device team_slave_1 added [ 79.689730][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.689968][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.690065][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.690345][ T5598] bridge_slave_0: entered allmulticast mode [ 79.691711][ T5598] bridge_slave_0: entered promiscuous mode [ 79.703595][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.709932][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.757578][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.759557][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.794476][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.802158][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.802300][ T5598] bridge_slave_1: entered allmulticast mode [ 79.803794][ T5598] bridge_slave_1: entered promiscuous mode [ 79.837354][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.837366][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.837380][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.841930][ T5599] team0: Port device team_slave_0 added [ 79.900209][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.900224][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.900248][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.902257][ T5599] team0: Port device team_slave_1 added [ 79.926394][ T5595] team0: Port device team_slave_0 added [ 79.932654][ T5603] team0: Port device team_slave_0 added [ 79.991993][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.993963][ T5595] team0: Port device team_slave_1 added [ 79.999657][ T5603] team0: Port device team_slave_1 added [ 80.023988][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.055618][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.055635][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.055658][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.123918][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.123931][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.123945][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.144137][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.144153][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.144177][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.150243][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.150257][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.150281][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.193999][ T5598] team0: Port device team_slave_0 added [ 80.197401][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.197429][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.197453][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.200611][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.200624][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.200648][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.219049][ T5593] hsr_slave_0: entered promiscuous mode [ 80.220627][ T5593] hsr_slave_1: entered promiscuous mode [ 80.230107][ T5598] team0: Port device team_slave_1 added [ 80.384010][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.384021][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.384034][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.435712][ T5599] hsr_slave_0: entered promiscuous mode [ 80.436535][ T5599] hsr_slave_1: entered promiscuous mode [ 80.437141][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 80.437217][ T5599] Cannot create hsr debugfs directory [ 80.456262][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.456277][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.456300][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.512439][ T5595] hsr_slave_0: entered promiscuous mode [ 80.513213][ T5595] hsr_slave_1: entered promiscuous mode [ 80.513752][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 80.513769][ T5595] Cannot create hsr debugfs directory [ 80.538435][ T5603] hsr_slave_0: entered promiscuous mode [ 80.539746][ T5603] hsr_slave_1: entered promiscuous mode [ 80.540579][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 80.540600][ T5603] Cannot create hsr debugfs directory [ 80.815007][ T5613] Bluetooth: hci0: command tx timeout [ 80.976067][ T5613] Bluetooth: hci1: command tx timeout [ 81.054950][ T5613] Bluetooth: hci2: command tx timeout [ 81.134866][ T5613] Bluetooth: hci4: command tx timeout [ 81.134898][ T5613] Bluetooth: hci3: command tx timeout [ 81.177347][ T5598] hsr_slave_0: entered promiscuous mode [ 81.178736][ T5598] hsr_slave_1: entered promiscuous mode [ 81.179646][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 81.179668][ T5598] Cannot create hsr debugfs directory [ 81.803766][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.873401][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.886075][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.929997][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.933681][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.980441][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.004764][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.029819][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.160641][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.200125][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.204455][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.231947][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.233563][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.271698][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.299136][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.328929][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.461714][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.498966][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.514426][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.558646][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.564503][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.608148][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.630251][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.670967][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.809412][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.838594][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.851940][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.891755][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.904940][ T5604] Bluetooth: hci0: command tx timeout [ 82.906811][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.951232][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.981150][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.997303][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.030807][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.055699][ T5604] Bluetooth: hci1: command tx timeout [ 83.134948][ T5604] Bluetooth: hci2: command tx timeout [ 83.176931][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.209965][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.222294][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.225046][ T5604] Bluetooth: hci3: command tx timeout [ 83.225074][ T5604] Bluetooth: hci4: command tx timeout [ 83.257628][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.259755][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.262946][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.290969][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.315798][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.369194][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.394495][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.403973][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.442327][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.486039][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.486136][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.570313][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.617002][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.617085][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.622661][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.664008][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.664154][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.763851][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.871678][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.871887][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.897005][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.922471][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.922602][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.115807][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.174233][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.174443][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.279919][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.303425][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.303601][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.509557][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.544041][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.553765][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.640927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.645014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.959442][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.974892][ T5613] Bluetooth: hci0: command tx timeout [ 85.144769][ T5613] Bluetooth: hci1: command tx timeout [ 85.214900][ T5613] Bluetooth: hci2: command tx timeout [ 85.295551][ T5613] Bluetooth: hci4: command tx timeout [ 85.295584][ T5613] Bluetooth: hci3: command tx timeout [ 85.468973][ T5593] veth0_vlan: entered promiscuous mode [ 85.599498][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.646574][ T5593] veth1_vlan: entered promiscuous mode [ 85.838630][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.893521][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.910107][ T5593] veth0_macvtap: entered promiscuous mode [ 85.979587][ T5593] veth1_macvtap: entered promiscuous mode [ 86.021323][ T5599] veth0_vlan: entered promiscuous mode [ 86.070715][ T5599] veth1_vlan: entered promiscuous mode [ 86.087843][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.153697][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.225431][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.264000][ T5603] veth0_vlan: entered promiscuous mode [ 86.324078][ T5603] veth1_vlan: entered promiscuous mode [ 86.451969][ T5599] veth0_macvtap: entered promiscuous mode [ 86.600304][ T5599] veth1_macvtap: entered promiscuous mode [ 86.733013][ T5598] veth0_vlan: entered promiscuous mode [ 86.750219][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.803830][ T10] cfg80211: failed to load regulatory.db [ 86.830370][ T5603] veth0_macvtap: entered promiscuous mode [ 86.858962][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.887712][ T5603] veth1_macvtap: entered promiscuous mode [ 86.890687][ T2101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.890711][ T2101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.940588][ T5598] veth1_vlan: entered promiscuous mode [ 86.953422][ T5595] veth0_vlan: entered promiscuous mode [ 87.022863][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.022882][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.057764][ T5595] veth1_vlan: entered promiscuous mode [ 87.071979][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.183112][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.452655][ T5598] veth0_macvtap: entered promiscuous mode [ 87.718389][ T5595] veth0_macvtap: entered promiscuous mode [ 87.723155][ T5598] veth1_macvtap: entered promiscuous mode [ 87.733030][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.733050][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.847589][ T5595] veth1_macvtap: entered promiscuous mode [ 88.130501][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.130517][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.131380][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.354473][ T5796] Zero length message leads to an empty skb [ 89.299807][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.305829][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.337156][ T2101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.337175][ T2101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.377393][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.611323][ T5805] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.835790][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.835807][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.430347][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.500598][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.500618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.609096][ T2101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610543][ T2101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610976][ T2101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.611659][ T2101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.762516][ T2101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.762536][ T2101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.767810][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767872][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767905][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767936][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767967][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767998][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768029][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768061][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768093][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768124][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768156][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768187][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768218][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768251][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768282][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.050324][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.050343][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.238852][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.238872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.267514][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.391469][ T5848] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 95.391548][ T5848] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 100.893590][ T5872] netlink: 'syz.1.21': attribute type 4 has an invalid length. [ 105.324096][ T5894] netlink: 'syz.2.24': attribute type 2 has an invalid length. [ 105.324121][ T5894] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 106.132694][ T36] audit: type=1326 audit(1785801910.279:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132749][ T36] audit: type=1326 audit(1785801910.279:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132787][ T36] audit: type=1326 audit(1785801910.279:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132823][ T36] audit: type=1326 audit(1785801910.279:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132860][ T36] audit: type=1326 audit(1785801910.279:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132899][ T36] audit: type=1326 audit(1785801910.279:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132936][ T36] audit: type=1326 audit(1785801910.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.132972][ T36] audit: type=1326 audit(1785801910.289:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.133019][ T36] audit: type=1326 audit(1785801910.289:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 106.133057][ T36] audit: type=1326 audit(1785801910.289:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5903 comm="syz.4.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93263be019 code=0x7ffc0000 [ 110.202342][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 114.697568][ T5936] bond0: (slave bond_slave_0): Releasing backup interface [ 117.972037][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 117.972053][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 118.821128][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 118.821145][ T36] audit: type=1326 audit(1785801922.979:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.0.49" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b1d6ce019 code=0x0 [ 128.599069][ T6014] veth1_to_bond: entered promiscuous mode [ 128.612234][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 130.738830][ T6027] EXT4-fs (loop6): unable to read superblock [ 131.980888][ T6014] bond0: (slave bond_slave_1): Releasing backup interface [ 132.267449][ T6042] ======================================================= [ 132.267449][ T6042] WARNING: The mand mount option has been deprecated and [ 132.267449][ T6042] and is ignored by this kernel. Remove the mand [ 132.267449][ T6042] option from the mount to silence this warning. [ 132.267449][ T6042] ======================================================= [ 132.421924][ T6043] overlayfs: overlapping lowerdir path [ 132.453666][ T6044] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 132.460746][ T6044] overlayfs: overlapping lowerdir path [ 132.721706][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 132.830652][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.056174][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059688][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.479341][ T6051] bridge_slave_1 (unregistering): left allmulticast mode [ 133.479374][ T6051] bridge_slave_1 (unregistering): left promiscuous mode [ 133.479460][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.732549][ T6060] netlink: 'syz.3.71': attribute type 3 has an invalid length. [ 133.747913][ T6060] netlink: 'syz.3.71': attribute type 3 has an invalid length. [ 134.909682][ T6063] netlink: 'syz.4.70': attribute type 16 has an invalid length. [ 134.909704][ T6063] netlink: 'syz.4.70': attribute type 17 has an invalid length. [ 137.812913][ T6106] input: syz1 as /devices/virtual/input/input5 [ 138.751563][ T5730] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.103410][ T5730] usb 4-1: device descriptor read/64, error -71 [ 139.374420][ T5730] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.507147][ T5730] usb 4-1: device descriptor read/64, error -71 [ 139.618761][ T5730] usb usb4-port1: attempt power cycle [ 139.900105][ T6121] netlink: 140 bytes leftover after parsing attributes in process `syz.0.88'. [ 139.974784][ T5730] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.994649][ T5730] usb 4-1: device descriptor read/8, error -71 [ 140.233649][ T5730] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.363392][ T6134] netlink: 72 bytes leftover after parsing attributes in process `syz.1.94'. [ 140.365944][ T6134] netlink: 452 bytes leftover after parsing attributes in process `syz.1.94'. [ 140.388376][ T6136] netlink: 200 bytes leftover after parsing attributes in process `syz.2.96'. [ 140.439369][ T5730] usb 4-1: device descriptor read/8, error -71 [ 140.612915][ T5730] usb usb4-port1: unable to enumerate USB device [ 141.991617][ T6156] mmap: syz.2.102 (6156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.428944][ T6196] bridge_slave_1: left allmulticast mode [ 145.428981][ T6196] bridge_slave_1: left promiscuous mode [ 145.450268][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.749616][ T6216] netlink: 'syz.3.124': attribute type 16 has an invalid length. [ 145.749680][ T6216] netlink: 'syz.3.124': attribute type 17 has an invalid length. [ 145.864706][ T5604] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 146.630303][ T6196] bridge_slave_0: left allmulticast mode [ 146.630337][ T6196] bridge_slave_0: left promiscuous mode [ 146.631007][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.304954][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 153.448721][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 153.448845][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 153.927480][ T6312] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.406309][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 154.406347][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 155.718934][ T6353] netlink: 'syz.3.176': attribute type 4 has an invalid length. [ 155.789420][ T6360] netlink: 100 bytes leftover after parsing attributes in process `syz.0.179'. [ 156.311553][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 156.311578][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 161.398027][ T6432] sit0: entered promiscuous mode [ 161.419623][ T6432] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 161.419646][ T6432] netlink: 9 bytes leftover after parsing attributes in process `syz.1.206'. [ 164.348342][ T6467] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.202363][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 169.202384][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 170.449958][ T6539] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.984964][ T6546] warning: `syz.1.248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.240829][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 173.240852][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 173.611198][ T6581] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.859073][ T6586] tap0: tun_chr_ioctl cmd 1074025677 [ 173.859300][ T6586] tap0: linktype set to 1 [ 173.860027][ T6586] tap0: tun_chr_ioctl cmd 35108 [ 175.081479][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 175.081500][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 177.782923][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 177.782947][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 180.824364][ T6674] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 181.095563][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 181.095585][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 184.958937][ T6707] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.132024][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 186.132049][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 189.597399][ T6747] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 189.597475][ T6747] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 191.600279][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 191.600302][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 192.029131][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'. [ 193.088849][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 194.978754][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.978822][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.821988][ T6823] netlink: 'syz.3.338': attribute type 2 has an invalid length. [ 196.822010][ T6823] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 201.356988][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.357'. [ 201.448827][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 201.455186][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 201.492643][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 201.660722][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 201.702612][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 201.702655][ T5597] Bluetooth: hci1: command 0x0406 tx timeout [ 202.802697][ T5835] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 203.005174][ T5601] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.254653][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 203.302334][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.302368][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.302389][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 203.302431][ T5835] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 203.302452][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.310273][ T5601] usb 5-1: Using ep0 maxpacket: 8 [ 204.322382][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 204.322412][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.322429][ T5601] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.322446][ T5601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 204.362569][ T5601] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 204.362624][ T5601] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 204.362647][ T5601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.549337][ T5835] usb 4-1: config 0 descriptor?? [ 204.558476][ T5601] usb 5-1: config 0 descriptor?? [ 204.598120][ T6884] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 204.859077][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.859585][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.892713][ T5727] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.042685][ T5727] usb 2-1: Using ep0 maxpacket: 16 [ 205.044993][ T5727] usb 2-1: config 1 interface 0 has no altsetting 0 [ 205.049386][ T5727] usb 2-1: string descriptor 0 read error: -22 [ 205.049519][ T5727] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.40 [ 205.049540][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.172778][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.174841][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.176194][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.179327][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.414975][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 205.417690][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.476138][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.884260][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.888122][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.945363][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945406][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945429][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945450][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945471][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945494][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945519][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945558][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945583][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 205.945609][ T5727] logitech 0003:046D:C219.0002: unknown main item tag 0x0 [ 206.051601][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.074149][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.108906][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.128878][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.273824][ T5325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 206.428596][ T5325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.428628][ T5325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.428665][ T5325] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 206.428685][ T5325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.444901][ T5727] logitech 0003:046D:C219.0002: hidraw0: USB HID vff.7f Device [HID 046d:c219] on usb-dummy_hcd.1-1/input0 [ 206.444957][ T5727] logitech 0003:046D:C219.0002: no inputs found [ 206.734723][ T5835] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input6 [ 206.762265][ T5325] usb 1-1: config 0 descriptor?? [ 207.821566][ T5611] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 208.109673][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 209.048417][ T5727] usb 2-1: USB disconnect, device number 2 [ 209.925711][ T50] usb 5-1: USB disconnect, device number 2 [ 210.493163][ T5835] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input7 [ 211.026331][ T6942] netlink: 'syz.0.381': attribute type 2 has an invalid length. [ 211.026353][ T6942] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 212.727224][ T5325] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 213.275145][ T5325] usb 1-1: USB disconnect, device number 2 [ 213.973922][ T5727] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 214.118099][ T5835] kye 0003:0458:5011.0001: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 215.029637][ T5835] usb 4-1: USB disconnect, device number 6 [ 215.058234][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 215.153230][ T5727] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.198708][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 215.198738][ T5727] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 215.198758][ T5727] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 215.222294][ T5727] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 215.222322][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.222340][ T5727] usb 2-1: Product: syz [ 215.222354][ T5727] usb 2-1: Manufacturer: syz [ 215.222367][ T5727] usb 2-1: SerialNumber: syz [ 216.440592][ T6954] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 218.749978][ T6991] netlink: 'syz.2.395': attribute type 2 has an invalid length. [ 218.750002][ T6991] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 219.548182][ T5727] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.548254][ T5727] usb 2-1: MIDIStreaming interface descriptor not found [ 226.044367][ T7037] netlink: 'syz.3.413': attribute type 2 has an invalid length. [ 226.044392][ T7037] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 228.642614][ T50] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 228.642871][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 228.817336][ T50] usb 1-1: device descriptor read/64, error -32 [ 229.052639][ T50] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 229.303211][ T50] usb 1-1: Using ep0 maxpacket: 16 [ 229.307133][ T50] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 229.327916][ T50] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 229.327945][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.327970][ T50] usb 1-1: Product: syz [ 229.327982][ T50] usb 1-1: Manufacturer: syz [ 229.327995][ T50] usb 1-1: SerialNumber: syz [ 229.506547][ T50] usb 1-1: config 0 descriptor?? [ 229.555065][ T50] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 229.561509][ T50] usb 1-1: Detected FT232R [ 229.718440][ T50] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 229.906238][ T7070] netlink: 'syz.3.424': attribute type 29 has an invalid length. [ 229.906806][ T7070] netlink: 'syz.3.424': attribute type 3 has an invalid length. [ 229.906821][ T7070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.424'. [ 230.041141][ T5727] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 230.052661][ T5727] usb 2-1: can't set first interface for hiFace device. [ 230.052716][ T5727] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 230.070015][ T5727] usb 2-1: USB disconnect, device number 3 [ 230.179107][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.072816][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.428'. [ 231.073581][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.428'. [ 231.074157][ T7079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.428'. [ 233.154299][ T50] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.163429][ T50] usb 1-1: USB disconnect, device number 4 [ 233.555576][ T5730] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.704617][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.704666][ T5730] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.704689][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.984140][ T5730] usb 4-1: config 0 descriptor?? [ 234.222137][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 234.222254][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.243450][ T50] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.248928][ T50] ftdi_sio 1-1:0.0: device disconnected [ 234.395743][ T5730] usb 4-1: USB disconnect, device number 7 [ 235.514055][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 235.585831][ T50] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 235.602589][ T5730] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 235.674644][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 235.679421][ T5835] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 235.683021][ T5835] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 235.683048][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 235.683069][ T5835] usb 2-1: Product: syz [ 235.683082][ T5835] usb 2-1: Manufacturer: syz [ 235.683095][ T5835] usb 2-1: SerialNumber: syz [ 235.733066][ T5835] usb 2-1: config 0 descriptor?? [ 235.734056][ T7105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.759240][ T5835] hub 2-1:0.0: bad descriptor, ignoring hub [ 235.759275][ T5835] hub 2-1:0.0: probe with driver hub failed with error -5 [ 235.771529][ T50] usb 1-1: not running at top speed; connect to a high speed hub [ 235.775573][ T50] usb 1-1: config 8 has an invalid interface number: 93 but max is 0 [ 235.775608][ T50] usb 1-1: config 8 has no interface number 0 [ 235.775637][ T50] usb 1-1: config 8 interface 93 has no altsetting 0 [ 235.806562][ T50] usb 1-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=bc.66 [ 235.806588][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.806605][ T50] usb 1-1: Product: syz [ 235.806616][ T50] usb 1-1: Manufacturer: syz [ 235.806628][ T50] usb 1-1: SerialNumber: syz [ 235.900662][ T7116] netlink: 'syz.2.444': attribute type 29 has an invalid length. [ 236.171756][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.178840][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.190595][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.191667][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.207529][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.226046][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.251272][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.266568][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.380250][ T50] gspca_main: kinect-2.14.0 probing 045e:02ae [ 236.762519][ T5730] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.922527][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 236.981102][ T5730] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.981143][ T5730] usb 4-1: config 0 has no interface number 0 [ 236.981263][ T5730] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 236.981285][ T5730] usb 4-1: config 0 interface 1 has no altsetting 0 [ 237.036859][ T5730] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 237.036889][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.036909][ T5730] usb 4-1: Product: syz [ 237.036923][ T5730] usb 4-1: Manufacturer: syz [ 237.036937][ T5730] usb 4-1: SerialNumber: syz [ 237.089615][ T5730] usb 4-1: config 0 descriptor?? [ 237.353764][ T50] usb 1-1: USB disconnect, device number 5 [ 237.402289][ T5730] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 237.491418][ T5730] cx231xx 4-1:0.1: Failed to read PCB config [ 237.491662][ T5730] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 237.580606][ T5730] usb 4-1: USB disconnect, device number 9 [ 238.562563][ T5730] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 238.566951][ T7160] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.462'. [ 239.602660][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 239.618646][ T5730] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.618674][ T5730] usb 4-1: config 0 has no interface number 0 [ 239.618717][ T5730] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 239.618738][ T5730] usb 4-1: config 0 interface 1 has no altsetting 0 [ 239.855105][ T5730] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 239.855136][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.855156][ T5730] usb 4-1: Product: syz [ 239.867588][ T5730] usb 4-1: config 0 descriptor?? [ 239.906146][ T5730] usb 4-1: can't set config #0, error -71 [ 239.938801][ T5730] usb 4-1: USB disconnect, device number 10 [ 240.077284][ T7172] netlink: 'syz.1.467': attribute type 29 has an invalid length. [ 240.236574][ T6013] udevd[6013]: setting mode of /dev/bus/usb/004/010 to 020664 failed: No such file or directory [ 240.241679][ T5835] usb 2-1: USB disconnect, device number 4 [ 240.252579][ T6013] udevd[6013]: setting owner of /dev/bus/usb/004/010 to uid=0, gid=0 failed: No such file or directory [ 242.483922][ T7196] netlink: 'syz.4.475': attribute type 21 has an invalid length. [ 242.512595][ T7196] netlink: 'syz.4.475': attribute type 6 has an invalid length. [ 242.512618][ T7196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.475'. [ 242.705811][ T7202] netlink: 'syz.4.477': attribute type 29 has an invalid length. [ 244.571274][ T7214] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.479'. [ 245.214636][ T7223] ksmbd: Unknown IPC event: 1, ignore. [ 247.800859][ T7232] syz.0.488 (7232) used greatest stack depth: 18152 bytes left [ 247.941943][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 248.010458][ T7260] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 248.010486][ T7260] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.027842][ T7260] vhci_hcd vhci_hcd.0: Device attached [ 249.290697][ T7276] netlink: 'syz.3.496': attribute type 12 has an invalid length. [ 249.512917][ T5601] usb 36-1: SetAddress Request (2) to port 0 [ 249.513004][ T5601] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 249.630059][ T5325] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.818949][ T5325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.822331][ T5325] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 249.822512][ T5325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.822530][ T5325] usb 4-1: Product: syz [ 249.822544][ T5325] usb 4-1: Manufacturer: syz [ 249.822557][ T5325] usb 4-1: SerialNumber: syz [ 249.995961][ T5325] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 249.996356][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 249.996429][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 250.007165][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 250.007250][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 250.007329][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 250.016329][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 250.016417][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 250.016514][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 250.118759][ T5325] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 250.233792][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 250.233886][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 250.233968][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 250.234048][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 250.234128][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 250.234207][ T5325] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 250.392778][ T5325] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 252.272521][ T5727] usb 4-1: USB disconnect, device number 11 [ 252.379773][ T5727] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 252.619110][ T5727] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 252.649275][ T5727] keyspan 4-1:1.0: device disconnected [ 253.000683][ T7261] vhci_hcd: connection reset by peer [ 253.035384][ T68] vhci_hcd vhci_hcd.1: stop threads [ 253.040487][ T68] vhci_hcd vhci_hcd.1: release socket [ 253.102949][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 253.644323][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 254.476070][ T7317] vivid-000: disconnect [ 255.026286][ T5601] usb 36-1: device descriptor read/8, error -110 [ 255.999024][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 256.705954][ T7319] bond0: entered promiscuous mode [ 256.706097][ T7319] bond_slave_0: entered promiscuous mode [ 256.708805][ T7319] bond_slave_1: entered promiscuous mode [ 256.758451][ T7319] gretap0: entered promiscuous mode [ 256.776968][ T7319] hsr1: entered promiscuous mode [ 257.191716][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.191818][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.882179][ T5601] usb usb36-port1: attempt power cycle [ 257.969161][ T7340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 257.969192][ T7340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.024984][ T7340] vhci_hcd vhci_hcd.0: Device attached [ 258.418786][ T7310] vivid-000: reconnect [ 258.644533][ T5860] usb 34-1: SetAddress Request (2) to port 0 [ 258.644617][ T5860] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 259.808118][ T5601] usb usb36-port1: unable to enumerate USB device [ 260.062401][ T5325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 260.261288][ T5325] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 260.261320][ T5325] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 260.261344][ T5325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 260.261365][ T5325] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 260.264852][ T5325] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 260.264882][ T5325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.264902][ T5325] usb 2-1: Product: syz [ 260.264915][ T5325] usb 2-1: Manufacturer: syz [ 260.264928][ T5325] usb 2-1: SerialNumber: syz [ 260.278011][ T7341] vhci_hcd: connection reset by peer [ 260.361985][ T5979] vhci_hcd vhci_hcd.0: stop threads [ 260.362009][ T5979] vhci_hcd vhci_hcd.0: release socket [ 260.362084][ T5979] vhci_hcd vhci_hcd.0: disconnect device [ 260.431215][ T5325] usb 2-1: config 0 descriptor?? [ 260.432056][ T7352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.449259][ T5325] usb 2-1: ucan: probing device on interface #0 [ 260.449291][ T5325] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 260.449304][ T5325] usb 2-1: ucan: probe failed; try to update the device firmware [ 260.776563][ T7364] netlink: 'syz.4.513': attribute type 12 has an invalid length. [ 261.102005][ T5835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 261.263522][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.284867][ T5835] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 261.284894][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.284947][ T5835] usb 5-1: Product: syz [ 261.284960][ T5835] usb 5-1: Manufacturer: syz [ 261.284973][ T5835] usb 5-1: SerialNumber: syz [ 261.407537][ T5835] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 261.409418][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 261.409495][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 261.438480][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 261.438573][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 261.439267][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 261.439411][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 261.439504][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 261.439587][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 261.455379][ T5835] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 261.507073][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 261.507164][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 261.507243][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 261.507323][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 261.507402][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 261.507490][ T5835] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 261.536791][ T5835] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 261.704781][ T5727] usb 5-1: USB disconnect, device number 3 [ 261.708482][ T5601] usb 2-1: USB disconnect, device number 5 [ 261.866999][ T5727] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 261.915307][ T5727] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 261.917870][ T5727] keyspan 5-1:1.0: device disconnected [ 262.342411][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 263.356837][ T7386] vivid-000: disconnect [ 263.859131][ T5860] usb 34-1: device descriptor read/8, error -110 [ 264.192550][ T5835] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 264.737809][ T5860] usb usb34-port1: attempt power cycle [ 264.743782][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 266.344659][ T5860] usb usb34-port1: unable to enumerate USB device [ 266.838006][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.839151][ T5835] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 266.839187][ T5835] usb 1-1: can't read configurations, error -71 [ 267.007610][ T7406] gretap1: entered promiscuous mode [ 267.436302][ T7380] vivid-000: reconnect [ 267.788826][ T7428] netlink: 'syz.4.538': attribute type 12 has an invalid length. [ 267.840631][ T7430] trusted_key: syz.1.539 sent an empty control message without MSG_MORE. [ 268.981649][ T5727] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 271.872871][ T5727] usb 5-1: device not accepting address 4, error -71 [ 273.006795][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 273.796676][ T7476] vivid-000: disconnect [ 275.035123][ T5727] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 275.282350][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 275.431182][ T7493] bond0: entered promiscuous mode [ 275.431260][ T7493] bond_slave_0: entered promiscuous mode [ 275.433526][ T7493] bond_slave_1: entered promiscuous mode [ 275.460215][ T7493] gretap0: entered promiscuous mode [ 275.479314][ T7493] debugfs: 'hsr1' already exists in 'hsr' [ 275.480267][ T7493] Cannot create hsr debugfs directory [ 275.487221][ T7493] hsr1: entered promiscuous mode [ 276.143362][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 276.280221][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.321077][ T5727] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 276.321116][ T5727] usb 4-1: can't read configurations, error -71 [ 276.330007][ T7465] vivid-000: reconnect [ 278.439664][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 278.464427][ T7537] bond0: entered promiscuous mode [ 278.464450][ T7537] bond_slave_0: entered promiscuous mode [ 278.483854][ T7537] gretap0: entered promiscuous mode [ 278.485520][ T7537] debugfs: 'hsr1' already exists in 'hsr' [ 278.485545][ T7537] Cannot create hsr debugfs directory [ 278.512847][ T7537] hsr1: entered promiscuous mode [ 279.397740][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 281.654676][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 288.566016][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 288.625916][ T7645] vivid-000: disconnect [ 288.881844][ T5325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 289.924623][ T5325] usb 5-1: Using ep0 maxpacket: 32 [ 290.151479][ T5727] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 290.159364][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 290.333288][ T5727] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 290.333320][ T5727] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 290.333392][ T5727] usb 2-1: Product: syz [ 290.333407][ T5727] usb 2-1: Manufacturer: syz [ 290.474661][ T5727] usb 2-1: config 0 descriptor?? [ 290.503495][ T5727] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 290.509405][ T5727] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 290.785746][ T5601] usb 2-1: USB disconnect, device number 6 [ 290.788111][ T5601] ftdi_sio 2-1:0.0: device disconnected [ 291.905695][ T7640] vivid-000: reconnect [ 291.931244][ T5325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.939257][ T5325] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 291.939295][ T5325] usb 5-1: can't read configurations, error -71 [ 297.497575][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 297.662853][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 297.793647][ T7725] vivid-000: disconnect [ 298.185537][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 300.553127][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 300.594379][ T50] usb 5-1: device descriptor read/all, error -71 [ 300.620882][ T7720] vivid-000: reconnect [ 302.727495][ T7755] netlink: 'syz.4.621': attribute type 2 has an invalid length. [ 302.727519][ T7755] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 307.012236][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 307.380641][ T7800] vivid-000: disconnect [ 307.496379][ T6010] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.771505][ T5860] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 307.866241][ T6010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 307.866272][ T6010] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 307.866297][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 307.866318][ T6010] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 307.869689][ T6010] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 307.869716][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.869743][ T6010] usb 1-1: Product: syz [ 307.869756][ T6010] usb 1-1: Manufacturer: syz [ 307.869769][ T6010] usb 1-1: SerialNumber: syz [ 308.152911][ T6010] usb 1-1: config 0 descriptor?? [ 308.188130][ T7786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.201122][ T6010] usb 1-1: ucan: probing device on interface #0 [ 308.201147][ T6010] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 308.201161][ T6010] usb 1-1: ucan: probe failed; try to update the device firmware [ 309.280498][ T7793] vivid-000: reconnect [ 309.713841][ T7825] netlink: 'syz.1.638': attribute type 2 has an invalid length. [ 309.713863][ T7825] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 310.733383][ T5860] usb 2-1: device not accepting address 7, error -71 [ 310.801697][ T5718] usb 1-1: USB disconnect, device number 8 [ 313.667136][ T6010] ------------[ cut here ]------------ [ 313.667150][ T6010] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 313.667170][ T6010] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#0: kworker/0:8/6010 [ 313.667220][ T6010] Modules linked in: [ 313.667258][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.667283][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.667294][ T6010] Workqueue: events drm_fb_helper_damage_work [ 313.667324][ T6010] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 313.667348][ T6010] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 313.667362][ T6010] RSP: 0018:ffffc9000582f7e0 EFLAGS: 00010246 [ 313.667377][ T6010] RAX: 1ffff11004c62800 RBX: 0000000000000000 RCX: 0000000000000000 [ 313.667389][ T6010] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 313.667402][ T6010] RBP: ffffc9000582f8c8 R08: 0000000000000000 R09: 0000000000000000 [ 313.667414][ T6010] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 313.667427][ T6010] R13: ffff888026314000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 313.667441][ T6010] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 313.667456][ T6010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.667468][ T6010] CR2: 000020000003c030 CR3: 0000000036dee000 CR4: 00000000003526f0 [ 313.667484][ T6010] Call Trace: [ 313.667491][ T6010] [ 313.667504][ T6010] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 313.667525][ T6010] ? rt_spin_unlock+0x157/0x200 [ 313.667559][ T6010] ? __pfx_autoremove_wake_function+0x10/0x10 [ 313.667588][ T6010] ? rt_spin_unlock+0x163/0x200 [ 313.667611][ T6010] ? drm_vblank_get+0x147/0x280 [ 313.667635][ T6010] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 313.667659][ T6010] drm_fb_helper_damage_work+0x6cf/0xf00 [ 313.667692][ T6010] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 313.667737][ T6010] ? process_scheduled_works+0xa20/0x14e0 [ 313.667767][ T6010] ? rcu_is_watching+0x15/0xb0 [ 313.667793][ T6010] ? process_scheduled_works+0xa20/0x14e0 [ 313.667815][ T6010] process_scheduled_works+0xa8e/0x14e0 [ 313.667867][ T6010] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.667897][ T6010] ? assign_work+0x3cf/0x5d0 [ 313.667925][ T6010] worker_thread+0xa47/0xfb0 [ 313.667976][ T6010] kthread+0x388/0x470 [ 313.668003][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 313.668023][ T6010] ? __pfx_kthread+0x10/0x10 [ 313.668050][ T6010] ret_from_fork+0x514/0xb70 [ 313.668089][ T6010] ? __pfx_ret_from_fork+0x10/0x10 [ 313.668115][ T6010] ? __switch_to+0xc89/0x1420 [ 313.668148][ T6010] ? __pfx_kthread+0x10/0x10 [ 313.668175][ T6010] ret_from_fork_asm+0x1a/0x30 [ 313.668212][ T6010] [ 313.668222][ T6010] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.668235][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.668256][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.668267][ T6010] Workqueue: events drm_fb_helper_damage_work [ 313.668288][ T6010] Call Trace: [ 313.668295][ T6010] [ 313.668303][ T6010] vpanic+0x56c/0xa60 [ 313.668322][ T6010] ? __pfx__printk+0x10/0x10 [ 313.668344][ T6010] ? __pfx_vpanic+0x10/0x10 [ 313.668360][ T6010] ? is_bpf_text_address+0x292/0x2b0 [ 313.668381][ T6010] ? is_bpf_text_address+0x26/0x2b0 [ 313.668411][ T6010] panic+0xc5/0xd0 [ 313.668429][ T6010] ? __pfx_panic+0x10/0x10 [ 313.668458][ T6010] ? ret_from_fork_asm+0x1a/0x30 [ 313.668482][ T6010] __warn+0x315/0x4c0 [ 313.668499][ T6010] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 313.668525][ T6010] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 313.668547][ T6010] __report_bug+0x276/0x570 [ 313.668576][ T6010] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 313.668602][ T6010] ? __pfx___report_bug+0x10/0x10 [ 313.668636][ T6010] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 313.668660][ T6010] ? lockdep_hardirqs_on+0x7a/0x110 [ 313.668684][ T6010] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 313.668711][ T6010] report_bug_entry+0x19a/0x290 [ 313.668736][ T6010] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 313.668756][ T6010] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 313.668777][ T6010] handle_bug+0xce/0x200 [ 313.668805][ T6010] exc_invalid_op+0x1a/0x50 [ 313.668830][ T6010] asm_exc_invalid_op+0x1a/0x20 [ 313.668848][ T6010] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 313.668870][ T6010] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 eb b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 313.668884][ T6010] RSP: 0018:ffffc9000582f7e0 EFLAGS: 00010246 [ 313.668898][ T6010] RAX: 1ffff11004c62800 RBX: 0000000000000000 RCX: 0000000000000000 [ 313.668910][ T6010] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 313.668924][ T6010] RBP: ffffc9000582f8c8 R08: 0000000000000000 R09: 0000000000000000 [ 313.668935][ T6010] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 313.668949][ T6010] R13: ffff888026314000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 313.668985][ T6010] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 313.669006][ T6010] ? rt_spin_unlock+0x157/0x200 [ 313.669025][ T6010] ? __pfx_autoremove_wake_function+0x10/0x10 [ 313.669059][ T6010] ? rt_spin_unlock+0x163/0x200 [ 313.669082][ T6010] ? drm_vblank_get+0x147/0x280 [ 313.669106][ T6010] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 313.669128][ T6010] drm_fb_helper_damage_work+0x6cf/0xf00 [ 313.669161][ T6010] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 313.669204][ T6010] ? process_scheduled_works+0xa20/0x14e0 [ 313.669233][ T6010] ? rcu_is_watching+0x15/0xb0 [ 313.669259][ T6010] ? process_scheduled_works+0xa20/0x14e0 [ 313.669280][ T6010] process_scheduled_works+0xa8e/0x14e0 [ 313.669333][ T6010] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.669362][ T6010] ? assign_work+0x3cf/0x5d0 [ 313.669390][ T6010] worker_thread+0xa47/0xfb0 [ 313.669442][ T6010] kthread+0x388/0x470 [ 313.669468][ T6010] ? __pfx_worker_thread+0x10/0x10 [ 313.669488][ T6010] ? __pfx_kthread+0x10/0x10 [ 313.669516][ T6010] ret_from_fork+0x514/0xb70 [ 313.669545][ T6010] ? __pfx_ret_from_fork+0x10/0x10 [ 313.669571][ T6010] ? __switch_to+0xc89/0x1420 [ 313.669598][ T6010] ? __pfx_kthread+0x10/0x10 [ 313.669625][ T6010] ret_from_fork_asm+0x1a/0x30 [ 313.669661][ T6010] [ 313.669820][ T6010] Kernel Offset: disabled