last executing test programs: 15.093217347s ago: executing program 3 (id=238): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 13.67103049s ago: executing program 3 (id=239): add_key(0x0, 0x0, &(0x7f0000000180)="0000000000000001ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b0009446100"/212, 0xd4, 0xffffffffffffffff) 13.359986324s ago: executing program 1 (id=243): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 11.729298083s ago: executing program 0 (id=247): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x240c4044}, 0x0) 11.556650878s ago: executing program 0 (id=249): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 10.254084368s ago: executing program 0 (id=251): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="a4", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(0xffffffffffffffff, 0x1) 10.244077803s ago: executing program 3 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) close_range(r1, r1, 0x0) 10.071709815s ago: executing program 3 (id=253): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r2, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000001180), &(0x7f00000002c0), 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 9.659731063s ago: executing program 1 (id=256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) 8.511766075s ago: executing program 1 (id=261): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 7.434444705s ago: executing program 1 (id=262): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) 7.43177013s ago: executing program 2 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000140)=r0) close_range(r1, r1, 0x0) 7.211202295s ago: executing program 2 (id=264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) 5.850354995s ago: executing program 3 (id=266): syz_open_dev$video(0x0, 0x485, 0x40042) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40a000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x6235, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0xc, 0x3, 0x6, 0x3, 0x2, 0x0, 0x6, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x102, 0x4, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0x3, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0xfffffffb, 0x6, 0x9, 0x2, 0x4, 0x7, 0x40, 0x6, 0x60, 0xb, 0x1, 0x6, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0x40, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc5, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x100003, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x5, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x2, 0x1, 0x7, 0xffff8000, 0x8, 0x100003, 0x6, 0x2, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x5, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x102, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x1, 0xffc0, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x400, 0x10009, 0x5, 0x5, 0x1002, 0xffffff7d, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0xfffffffc, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0xfffffffd, 0x5, 0xb8, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x8) restart_syscall() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0], 0x4c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 3.935121279s ago: executing program 4 (id=269): r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x120c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x11f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfe1, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x205, 0x5, "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"}]}]}, 0x120c}}, 0x0) r2 = syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r6, &(0x7f0000003780)={0x2020}, 0x2020) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) syz_io_uring_submit(r7, r8, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xe0, 0x0, &(0x7f0000001700)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x180b, 0x3}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x2, 0x0, 0x11}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x14, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/4096, 0x1000, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000001480)=""/213, 0xd5, 0x0, 0x39}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001680)={@ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/255, 0xff, 0x2, 0x10}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}, @enter_looper], 0x2a, 0x0, &(0x7f0000001800)="dd61d259619c2c8abc2f62515215e3b6de2cba3a5ac6b2de03ecc7e599fa292bcc48cde715e44728d34d"}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.793648067s ago: executing program 0 (id=270): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x0, 0xb}, {0x800, 0x5}]}, 0x18, 0x0) 3.67456796s ago: executing program 2 (id=271): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 3.543632016s ago: executing program 0 (id=272): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 3.459613915s ago: executing program 2 (id=273): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.202195857s ago: executing program 0 (id=274): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300), 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.139945909s ago: executing program 1 (id=275): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x103, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.138838559s ago: executing program 4 (id=276): r0 = io_uring_setup(0xb3c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.939233443s ago: executing program 2 (id=277): r0 = socket(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=@caif=@util={0x25, "5264eba723bbbdaf4e347321be23336e"}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000007000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0xfffe, 0x1, 'lc\x00', 0x25}, {@multicast1, 0x0, 0x4, 0x0, 0x0, 0x400}}, 0x44) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) close(0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ipvs(0x0, r7) sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2000}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048880}, 0x240000c0) lseek(r4, 0x4, 0x57317caed2f340aa) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0xfffffffd, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}, @RTA_OIF={0x8}]}, 0x38}}, 0x0) 1.822608426s ago: executing program 4 (id=278): r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r7, &(0x7f0000000340)={0x1f, 0x17, 0x0, 0x1, 0x1, 0x6, @remote}, 0x13) socket$vsock_stream(0x28, 0x1, 0x0) 713.127838ms ago: executing program 4 (id=279): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50087}}, 0x20}, 0x1, 0x0, 0x0, 0x9805}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x482, 0x0, 0x1}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x26000, 0xe, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x50000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xa, 0x0, 0x7, 0x4, 0x0, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x4, 0xff, 0x7, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x8000000, 0xc, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0x3, 0x6, 0x5, 0x0, 0x3}, {0xf000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfd}, {0xffffffff}, {0x58000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 490.966214ms ago: executing program 2 (id=280): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="a4", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(0xffffffffffffffff, 0x1) 280.708875ms ago: executing program 4 (id=281): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 200.936249ms ago: executing program 3 (id=282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40082}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x46801}, 0x20024808) 159.307391ms ago: executing program 4 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8000ae83, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r6, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x2000)=nil, r4, 0x3000003, 0x2011, r3, 0x0) 0s ago: executing program 1 (id=284): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) read$FUSE(0xffffffffffffffff, &(0x7f0000006100)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 75.316119][ T5788] cgroup: Unknown subsys name 'net' [ 75.557025][ T5788] cgroup: Unknown subsys name 'cpuset' [ 75.613048][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.183498][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.434840][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.441292][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.455071][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.456394][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.458794][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.458797][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.482865][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.484373][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.485671][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.486599][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.489206][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.508271][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.510194][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.510500][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.512682][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.577495][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.578604][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.580411][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.582178][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.584082][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.622737][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.626988][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.630752][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.633142][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.635509][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.371201][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 80.476498][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 80.519799][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 80.532765][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 80.537635][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 80.711642][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.712989][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.713550][ T5808] bridge_slave_0: entered allmulticast mode [ 80.716106][ T5808] bridge_slave_0: entered promiscuous mode [ 80.764985][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.765064][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.765168][ T5808] bridge_slave_1: entered allmulticast mode [ 80.766510][ T5808] bridge_slave_1: entered promiscuous mode [ 80.883422][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.883530][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.883629][ T5809] bridge_slave_0: entered allmulticast mode [ 80.884953][ T5809] bridge_slave_0: entered promiscuous mode [ 80.935626][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.936031][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.936163][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.936378][ T5809] bridge_slave_1: entered allmulticast mode [ 80.937787][ T5809] bridge_slave_1: entered promiscuous mode [ 80.938864][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.938961][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.939199][ T5801] bridge_slave_0: entered allmulticast mode [ 80.940513][ T5801] bridge_slave_0: entered promiscuous mode [ 80.941813][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.941925][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.942068][ T5810] bridge_slave_0: entered allmulticast mode [ 80.964374][ T5810] bridge_slave_0: entered promiscuous mode [ 80.967757][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.967868][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.968031][ T5800] bridge_slave_0: entered allmulticast mode [ 80.970361][ T5800] bridge_slave_0: entered promiscuous mode [ 81.057855][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.071936][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.072032][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.072130][ T5801] bridge_slave_1: entered allmulticast mode [ 81.085152][ T5801] bridge_slave_1: entered promiscuous mode [ 81.087149][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.087257][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.087401][ T5810] bridge_slave_1: entered allmulticast mode [ 81.089931][ T5810] bridge_slave_1: entered promiscuous mode [ 81.091636][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.091745][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.091884][ T5800] bridge_slave_1: entered allmulticast mode [ 81.095515][ T5800] bridge_slave_1: entered promiscuous mode [ 81.187350][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.227655][ T5808] team0: Port device team_slave_0 added [ 81.230045][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.249145][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.251995][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.273345][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.275683][ T5808] team0: Port device team_slave_1 added [ 81.291349][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.296527][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.585453][ T5814] Bluetooth: hci0: command tx timeout [ 81.585539][ T5814] Bluetooth: hci1: command tx timeout [ 81.585586][ T5814] Bluetooth: hci2: command tx timeout [ 81.596154][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.663987][ T5807] Bluetooth: hci3: command tx timeout [ 81.688938][ T5809] team0: Port device team_slave_0 added [ 81.701050][ T9] cfg80211: failed to load regulatory.db [ 81.742537][ T5807] Bluetooth: hci4: command tx timeout [ 81.754942][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.754957][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.754981][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.759818][ T5809] team0: Port device team_slave_1 added [ 81.814797][ T5801] team0: Port device team_slave_0 added [ 81.817234][ T5810] team0: Port device team_slave_0 added [ 81.821292][ T5800] team0: Port device team_slave_0 added [ 81.843532][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.843547][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.843572][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.847382][ T5810] team0: Port device team_slave_1 added [ 81.856418][ T5801] team0: Port device team_slave_1 added [ 81.858786][ T5800] team0: Port device team_slave_1 added [ 81.948546][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.948563][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.948587][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.991801][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.991818][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.991843][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.013275][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.013292][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.013316][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.045377][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.045393][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.045424][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.048030][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.048042][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.048066][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.049222][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.049233][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.049256][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.055958][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.055972][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.055995][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.077861][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.077878][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.077903][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.111733][ T5808] hsr_slave_0: entered promiscuous mode [ 82.116076][ T5808] hsr_slave_1: entered promiscuous mode [ 82.245325][ T5809] hsr_slave_0: entered promiscuous mode [ 82.246612][ T5809] hsr_slave_1: entered promiscuous mode [ 82.247679][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 82.247791][ T5809] Cannot create hsr debugfs directory [ 82.327210][ T5800] hsr_slave_0: entered promiscuous mode [ 82.328448][ T5800] hsr_slave_1: entered promiscuous mode [ 82.329263][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 82.329285][ T5800] Cannot create hsr debugfs directory [ 82.590128][ T5810] hsr_slave_0: entered promiscuous mode [ 82.590861][ T5810] hsr_slave_1: entered promiscuous mode [ 82.591375][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 82.591390][ T5810] Cannot create hsr debugfs directory [ 82.600193][ T5801] hsr_slave_0: entered promiscuous mode [ 82.601329][ T5801] hsr_slave_1: entered promiscuous mode [ 82.602117][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 82.602137][ T5801] Cannot create hsr debugfs directory [ 83.202062][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.239946][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.278416][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.337354][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.453886][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.505125][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.541166][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.589573][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.663713][ T5807] Bluetooth: hci2: command tx timeout [ 83.663744][ T5807] Bluetooth: hci1: command tx timeout [ 83.663764][ T5807] Bluetooth: hci0: command tx timeout [ 83.732893][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.742614][ T5814] Bluetooth: hci3: command tx timeout [ 83.785955][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.822598][ T5814] Bluetooth: hci4: command tx timeout [ 83.831498][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.895031][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.020347][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.048761][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.082682][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.132639][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.245778][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.258512][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.292182][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.331365][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.368479][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.447954][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.481152][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.497019][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.497760][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.540660][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.540779][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.589904][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.619241][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.637984][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.638115][ T1407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.678156][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.678337][ T1407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.729821][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.761652][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.787365][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.787566][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.842219][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.844416][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.894139][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.956664][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.957506][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.993451][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.993660][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.031642][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.131550][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.216939][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.217076][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.251171][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.251324][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.317012][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.529443][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.594927][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.595647][ T5808] veth0_vlan: entered promiscuous mode [ 85.684122][ T5808] veth1_vlan: entered promiscuous mode [ 85.742826][ T5814] Bluetooth: hci0: command tx timeout [ 85.742863][ T5814] Bluetooth: hci1: command tx timeout [ 85.742880][ T5814] Bluetooth: hci2: command tx timeout [ 85.813575][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.825179][ T5807] Bluetooth: hci3: command tx timeout [ 85.883811][ T5800] veth0_vlan: entered promiscuous mode [ 85.903512][ T5807] Bluetooth: hci4: command tx timeout [ 85.906516][ T5808] veth0_macvtap: entered promiscuous mode [ 85.908395][ T5809] veth0_vlan: entered promiscuous mode [ 85.936327][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.939452][ T5808] veth1_macvtap: entered promiscuous mode [ 85.946377][ T5800] veth1_vlan: entered promiscuous mode [ 85.974359][ T5809] veth1_vlan: entered promiscuous mode [ 86.027862][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.066493][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.128695][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.141429][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.157805][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.167636][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.196307][ T5800] veth0_macvtap: entered promiscuous mode [ 86.269695][ T5800] veth1_macvtap: entered promiscuous mode [ 86.278657][ T5809] veth0_macvtap: entered promiscuous mode [ 86.341176][ T5801] veth0_vlan: entered promiscuous mode [ 86.350901][ T5809] veth1_macvtap: entered promiscuous mode [ 86.429476][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.430049][ T5801] veth1_vlan: entered promiscuous mode [ 86.477414][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.481132][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.486546][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.486569][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.552255][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.569154][ T1444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.596701][ T1444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.598858][ T5810] veth0_vlan: entered promiscuous mode [ 86.599632][ T1444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.631342][ T1444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.647226][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.647239][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.649006][ T1444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.708764][ T1444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.721677][ T1444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.734867][ T5810] veth1_vlan: entered promiscuous mode [ 86.736226][ T1444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.828608][ T5801] veth0_macvtap: entered promiscuous mode [ 86.929542][ T5801] veth1_macvtap: entered promiscuous mode [ 87.106839][ T1407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.106858][ T1407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.109296][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.182012][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.224267][ T5810] veth0_macvtap: entered promiscuous mode [ 87.229016][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.229034][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.304490][ T5810] veth1_macvtap: entered promiscuous mode [ 87.324548][ T1407] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.346313][ T1407] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.354969][ T1407] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.395191][ T1407] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.395754][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.395771][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.567589][ T1407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.567608][ T1407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.612884][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.717597][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.824697][ T5807] Bluetooth: hci2: command tx timeout [ 87.824727][ T5807] Bluetooth: hci1: command tx timeout [ 87.824746][ T5807] Bluetooth: hci0: command tx timeout [ 87.866962][ T1407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.881676][ T1407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.888667][ T1407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.898831][ T1476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.902679][ T5814] Bluetooth: hci3: command tx timeout [ 87.992563][ T5814] Bluetooth: hci4: command tx timeout [ 87.993291][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.993306][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.080907][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.300004][ T1476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.300024][ T1476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.326889][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.512727][ T1496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.512746][ T1496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.571886][ T5817] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 88.571913][ T5817] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 88.571931][ T5817] usb 1-1: Product: syz [ 88.571943][ T5817] usb 1-1: Manufacturer: syz [ 88.571956][ T5817] usb 1-1: SerialNumber: syz [ 88.635443][ T5817] usb 1-1: config 0 descriptor?? [ 88.695414][ T5947] Zero length message leads to an empty skb [ 88.696364][ T5817] ch341 1-1:0.0: ch341-uart converter detected [ 88.739047][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.739276][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.859515][ T5817] usb 1-1: failed to receive control message: -121 [ 88.859574][ T5817] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 91.570218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 91.626481][ T44] usb 1-1: USB disconnect, device number 2 [ 91.794285][ T44] ch341 1-1:0.0: device disconnected [ 91.933656][ T5998] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 92.056477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.028253][ T6039] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 94.030507][ T6039] netlink: 'syz.4.49': attribute type 29 has an invalid length. [ 94.765834][ T6054] netlink: 'syz.2.55': attribute type 8 has an invalid length. [ 94.766035][ T6054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.55'. [ 96.472467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.482448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.492439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.502435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.512437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.522431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.532437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.539545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.478063][ T6114] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 100.536071][ T6114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.539799][ T6114] team0: Port device bond0 added [ 102.261188][ T6124] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 102.261210][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.83'. [ 102.261637][ T6124] veth0_vlan: entered allmulticast mode [ 102.262692][ T6124] bridge0: port 3(veth0_vlan) entered blocking state [ 102.262862][ T6124] bridge0: port 3(veth0_vlan) entered disabled state [ 102.289442][ T6124] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 103.585923][ T808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.733711][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 103.759215][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.765780][ T808] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 103.765807][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.765825][ T808] usb 4-1: Product: syz [ 103.765838][ T808] usb 4-1: Manufacturer: syz [ 103.765851][ T808] usb 4-1: SerialNumber: syz [ 103.790351][ T808] usb 4-1: config 0 descriptor?? [ 103.832810][ T808] gs_usb 4-1:0.0: Required endpoints not found [ 104.010756][ T808] usb 4-1: USB disconnect, device number 2 [ 105.973085][ T6161] netlink: 'syz.4.97': attribute type 29 has an invalid length. [ 106.003327][ T6162] netlink: 'syz.4.97': attribute type 29 has an invalid length. [ 106.006579][ T6163] netlink: 'syz.4.97': attribute type 29 has an invalid length. [ 106.007659][ T6166] netlink: 'syz.4.97': attribute type 29 has an invalid length. [ 107.634389][ T808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.806291][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 107.808571][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.811195][ T808] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 107.811219][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.811237][ T808] usb 1-1: Product: syz [ 107.811249][ T808] usb 1-1: Manufacturer: syz [ 107.811262][ T808] usb 1-1: SerialNumber: syz [ 107.931683][ T808] usb 1-1: config 0 descriptor?? [ 107.953904][ T808] gs_usb 1-1:0.0: Required endpoints not found [ 108.166226][ T808] usb 1-1: USB disconnect, device number 3 [ 108.718592][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 109.746385][ T37] audit: type=1326 audit(1770297715.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.746621][ T37] audit: type=1326 audit(1770297715.324:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.746911][ T37] audit: type=1326 audit(1770297715.334:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.747154][ T37] audit: type=1326 audit(1770297715.334:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.747242][ T37] audit: type=1326 audit(1770297715.334:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.747503][ T37] audit: type=1326 audit(1770297715.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.747732][ T37] audit: type=1326 audit(1770297715.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.747952][ T37] audit: type=1326 audit(1770297715.334:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.748235][ T37] audit: type=1326 audit(1770297715.334:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 109.748532][ T37] audit: type=1326 audit(1770297715.334:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6206 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d83baeb9 code=0x7ffc0000 [ 110.748665][ T6220] fuse: Bad value for 'fd' [ 111.662826][ T1236] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.272664][ T1236] usb 1-1: Using ep0 maxpacket: 32 [ 113.276734][ T1236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.292131][ T1236] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.292158][ T1236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.292176][ T1236] usb 1-1: Product: syz [ 113.292190][ T1236] usb 1-1: Manufacturer: syz [ 113.292203][ T1236] usb 1-1: SerialNumber: syz [ 113.340045][ T1236] usb 1-1: config 0 descriptor?? [ 113.357677][ T1236] gs_usb 1-1:0.0: Required endpoints not found [ 113.554253][ T5886] usb 1-1: USB disconnect, device number 4 [ 113.835358][ T6249] warning: `syz.4.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.245412][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.132'. [ 114.352574][ T1236] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.828527][ T1236] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 114.848122][ T1236] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 114.848150][ T1236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.848168][ T1236] usb 5-1: Product: syz [ 114.848180][ T1236] usb 5-1: Manufacturer: syz [ 114.848193][ T1236] usb 5-1: SerialNumber: syz [ 114.924532][ T1236] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 115.383241][ T1236] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 115.462817][ T1236] usb 5-1: USB disconnect, device number 2 [ 116.186298][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 116.186337][ T37] audit: type=1326 audit(1770297722.054:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.186515][ T37] audit: type=1326 audit(1770297722.054:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.186556][ T37] audit: type=1326 audit(1770297722.054:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.186835][ T37] audit: type=1326 audit(1770297722.054:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.187057][ T37] audit: type=1326 audit(1770297722.054:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.187275][ T37] audit: type=1326 audit(1770297722.054:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.187361][ T37] audit: type=1326 audit(1770297722.054:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.187468][ T37] audit: type=1326 audit(1770297722.054:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.187662][ T37] audit: type=1326 audit(1770297722.064:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 116.187940][ T37] audit: type=1326 audit(1770297722.064:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6265 comm="syz.0.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e77aaeb9 code=0x7ffc0000 [ 118.362515][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.522508][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 118.525896][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.550694][ T5886] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 118.550711][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.550721][ T5886] usb 1-1: Product: syz [ 118.550728][ T5886] usb 1-1: Manufacturer: syz [ 118.550734][ T5886] usb 1-1: SerialNumber: syz [ 118.599951][ T5886] usb 1-1: config 0 descriptor?? [ 118.631870][ T5886] gs_usb 1-1:0.0: Required endpoints not found [ 118.673140][ T6289] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'. [ 118.822977][ T5886] usb 1-1: USB disconnect, device number 5 [ 119.245713][ T5886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.432557][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 119.433505][ T5886] usb 4-1: too many configurations: 14, using maximum allowed: 8 [ 119.450778][ T5886] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 119.450807][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.450825][ T5886] usb 4-1: Product: syz [ 119.450838][ T5886] usb 4-1: Manufacturer: syz [ 119.450850][ T5886] usb 4-1: SerialNumber: syz [ 119.487851][ T5886] usb 4-1: config 0 descriptor?? [ 119.709450][ T5886] usb 4-1: USB disconnect, device number 3 [ 121.842786][ T6321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.760357][ T6355] fuse: Bad value for 'rootmode' [ 124.141990][ T6359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.170'. [ 126.903958][ T6385] fuse: Unknown parameter 'use00000000000000000000' [ 130.776567][ T6426] random: crng reseeded on system resumption [ 130.824383][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 130.862432][ T37] audit: type=1326 audit(1770297736.694:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862485][ T37] audit: type=1326 audit(1770297736.694:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862523][ T37] audit: type=1326 audit(1770297736.694:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862561][ T37] audit: type=1326 audit(1770297736.694:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862583][ T37] audit: type=1326 audit(1770297736.694:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862610][ T37] audit: type=1326 audit(1770297736.694:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862631][ T37] audit: type=1326 audit(1770297736.694:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862652][ T37] audit: type=1326 audit(1770297736.694:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862673][ T37] audit: type=1326 audit(1770297736.694:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 130.862693][ T37] audit: type=1326 audit(1770297736.694:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.2.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8139aeb9 code=0x7ffc0000 [ 132.870010][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870064][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.377409][ T6432] fuse: Unknown parameter '0x0000000000000003' [ 133.500299][ T6434] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 135.089625][ T6444] geneve2: entered promiscuous mode [ 135.089653][ T6444] geneve2: entered allmulticast mode [ 137.960618][ T6466] geneve2: entered promiscuous mode [ 137.960644][ T6466] geneve2: entered allmulticast mode [ 138.938059][ T6474] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.207'. [ 138.940855][ T6474] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.207'. [ 139.454996][ T6485] fuse: Unknown parameter '0x0000000000000003' [ 140.746326][ T6496] fuse: Unknown parameter 'user_i00000000000000000000' [ 142.208750][ T6504] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.218'. [ 142.210991][ T6504] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.218'. [ 142.374449][ T6509] fuse: Unknown parameter '0x0000000000000003' [ 143.392956][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 143.547924][ T6524] netlink: 'syz.2.223': attribute type 15 has an invalid length. [ 143.715683][ T6520] bond0: entered promiscuous mode [ 143.715707][ T6520] bond_slave_0: entered promiscuous mode [ 143.715932][ T6520] bond_slave_1: entered promiscuous mode [ 143.718424][ T6520] geneve0: entered promiscuous mode [ 143.720537][ T6520] hsr1: entered promiscuous mode [ 145.351036][ T6532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.933514][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 147.499424][ T6545] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.231'. [ 147.500044][ T6545] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.231'. [ 147.599923][ T6547] fuse: Unknown parameter '0x0000000000000003' [ 147.692497][ T5961] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.842519][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 147.844642][ T5961] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.862551][ T5961] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 147.862580][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.862597][ T5961] usb 1-1: Product: syz [ 147.862610][ T5961] usb 1-1: Manufacturer: syz [ 147.862622][ T5961] usb 1-1: SerialNumber: syz [ 147.897795][ T5961] usb 1-1: config 0 descriptor?? [ 147.934430][ T5961] gs_usb 1-1:0.0: Required endpoints not found [ 148.140235][ T1236] usb 1-1: USB disconnect, device number 6 [ 150.033638][ T6569] fuse: Unknown parameter 'user_i00000000000000000000' [ 151.660510][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.824847][ T808] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 151.824874][ T808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.824891][ T808] usb 2-1: config 0 has no interfaces? [ 151.824918][ T808] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 151.824939][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.844907][ T808] usb 2-1: config 0 descriptor?? [ 153.345911][ T5807] Bluetooth: hci4: command 0x0405 tx timeout [ 153.376885][ T6608] fuse: Unknown parameter 'user_id00000000000000000000' [ 153.809163][ T808] usb 2-1: USB disconnect, device number 2 [ 154.891653][ T6625] "syz.1.256" (6625) uses obsolete ecb(arc4) skcipher [ 156.104334][ T6640] syzkaller0: entered promiscuous mode [ 156.104359][ T6640] syzkaller0: entered allmulticast mode [ 156.224123][ T6644] fuse: Unknown parameter 'user_id00000000000000000000' [ 157.624968][ T5961] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.773781][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 157.780449][ T5961] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.794919][ T5961] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 157.794947][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.794966][ T5961] usb 1-1: Product: syz [ 157.794979][ T5961] usb 1-1: Manufacturer: syz [ 157.794992][ T5961] usb 1-1: SerialNumber: syz [ 157.825044][ T5961] usb 1-1: config 0 descriptor?? [ 157.870370][ T5961] gs_usb 1-1:0.0: Required endpoints not found [ 157.872505][ T5851] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.046138][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 158.317907][ T6664] binder: 6659:6664 ioctl 4018620d 0 returned -22 [ 159.075560][ T5851] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 159.075720][ T5851] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.075742][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.075764][ T5851] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.075785][ T5851] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.075825][ T5851] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.075846][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.131388][ T6665] netlink: 44 bytes leftover after parsing attributes in process `syz.3.266'. [ 159.138301][ T6664] input: syz1 as /devices/virtual/input/input5 [ 159.144910][ T9] usb 1-1: USB disconnect, device number 7 [ 159.554986][ T5851] usb 2-1: usb_control_msg returned -32 [ 159.555034][ T5851] usbtmc 2-1:16.0: can't read capabilities [ 161.344495][ T5817] usb 2-1: USB disconnect, device number 3 [ 163.394046][ T5961] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 163.542809][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 163.545511][ T5961] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.549909][ T5961] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 163.549935][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.549953][ T5961] usb 3-1: Product: syz [ 163.549966][ T5961] usb 3-1: Manufacturer: syz [ 163.549979][ T5961] usb 3-1: SerialNumber: syz [ 163.583852][ T5961] usb 3-1: config 0 descriptor?? [ 163.598777][ T5961] gs_usb 3-1:0.0: Required endpoints not found [ 163.798701][ T9] usb 3-1: USB disconnect, device number 2 [ 163.972815][ T9] ================================================================== [ 163.972831][ T9] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 163.972879][ T9] Read of size 8 at addr ffffc9000d119008 by task kworker/0:0/9 [ 163.972894][ T9] [ 163.972918][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.972940][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.972953][ T9] Workqueue: usb_hub_wq hub_event [ 163.972984][ T9] Call Trace: [ 163.972991][ T9] [ 163.973003][ T9] dump_stack_lvl+0xe8/0x150 [ 163.973030][ T9] print_report+0xba/0x230 [ 163.973052][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 163.973079][ T9] kasan_report+0x117/0x150 [ 163.973111][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 163.973142][ T9] __list_add_valid_or_report+0x4e/0x130 [ 163.973177][ T9] kcov_remote_stop+0x457/0x680 [ 163.973205][ T9] hub_event+0x49d8/0x4f60 [ 163.973226][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 163.973254][ T9] ? finish_task_switch+0x161/0x920 [ 163.973283][ T9] ? __pfx_hub_event+0x10/0x10 [ 163.973301][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 163.973321][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 163.973338][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 163.973356][ T9] process_scheduled_works+0xaec/0x17a0 [ 163.973384][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.973401][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.973430][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.973463][ T9] ? schedule+0x90/0x360 [ 163.973489][ T9] worker_thread+0xda6/0x1360 [ 163.973518][ T9] kthread+0x726/0x8b0 [ 163.973541][ T9] ? __pfx_worker_thread+0x10/0x10 [ 163.973559][ T9] ? __pfx_kthread+0x10/0x10 [ 163.973579][ T9] ? rt_spin_unlock+0x14f/0x200 [ 163.973600][ T9] ? rt_spin_unlock+0x160/0x200 [ 163.973618][ T9] ? __pfx_kthread+0x10/0x10 [ 163.973641][ T9] ret_from_fork+0x51b/0xa40 [ 163.973661][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 163.973679][ T9] ? __switch_to+0xc82/0x1410 [ 163.973708][ T9] ? __pfx_kthread+0x10/0x10 [ 163.973730][ T9] ret_from_fork_asm+0x1a/0x30 [ 163.973762][ T9] [ 163.973769][ T9] [ 163.973774][ T9] The buggy address belongs to a vmalloc virtual mapping [ 163.973790][ T9] Memory state around the buggy address: [ 163.973800][ T9] ffffc9000d118f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.973812][ T9] ffffc9000d118f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.973825][ T9] >ffffc9000d119000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.973838][ T9] ^ [ 163.973847][ T9] ffffc9000d119080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.973860][ T9] ffffc9000d119100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 163.973869][ T9] ================================================================== [ 163.973880][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.973896][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.973916][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.973928][ T9] Workqueue: usb_hub_wq hub_event [ 163.973945][ T9] Call Trace: [ 163.973951][ T9] [ 163.973958][ T9] vpanic+0x1e0/0x670 [ 163.973984][ T9] panic+0xc5/0xd0 [ 163.974008][ T9] ? __pfx_panic+0x10/0x10 [ 163.974033][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 163.974065][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 163.974093][ T9] check_panic_on_warn+0x89/0xb0 [ 163.974119][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 163.974146][ T9] end_report+0x6f/0x140 [ 163.974171][ T9] kasan_report+0x128/0x150 [ 163.974198][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 163.974229][ T9] __list_add_valid_or_report+0x4e/0x130 [ 163.974258][ T9] kcov_remote_stop+0x457/0x680 [ 163.974285][ T9] hub_event+0x49d8/0x4f60 [ 163.974306][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 163.974338][ T9] ? finish_task_switch+0x161/0x920 [ 163.974367][ T9] ? __pfx_hub_event+0x10/0x10 [ 163.974384][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 163.974404][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 163.974422][ T9] ? process_scheduled_works+0xa0f/0x17a0 [ 163.974440][ T9] process_scheduled_works+0xaec/0x17a0 [ 163.974475][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 163.974492][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.974520][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.974547][ T9] ? schedule+0x90/0x360 [ 163.974571][ T9] worker_thread+0xda6/0x1360 [ 163.974600][ T9] kthread+0x726/0x8b0 [ 163.974623][ T9] ? __pfx_worker_thread+0x10/0x10 [ 163.974640][ T9] ? __pfx_kthread+0x10/0x10 [ 163.974661][ T9] ? rt_spin_unlock+0x14f/0x200 [ 163.974682][ T9] ? rt_spin_unlock+0x160/0x200 [ 163.974699][ T9] ? __pfx_kthread+0x10/0x10 [ 163.974721][ T9] ret_from_fork+0x51b/0xa40 [ 163.974741][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 163.974759][ T9] ? __switch_to+0xc82/0x1410 [ 163.974786][ T9] ? __pfx_kthread+0x10/0x10 [ 163.974809][ T9] ret_from_fork_asm+0x1a/0x30 [ 163.974841][ T9] [ 163.974977][ T9] Kernel Offset: disabled