last executing test programs: 12.614368024s ago: executing program 3 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) gettid() timer_create(0x9, &(0x7f0000000340)={0x0, 0x9e, 0x1, @thr={&(0x7f0000000380)="ea616ff47e43e15ee23bec23e45765822da4c84bf25b0eb44b6219844396e562f922528d70a82a2e730e41f38d9160f2ddc52ef8f02deced37617efc4f14e7afa551eaad95f974e5a89915482db13c44e89ffcd6953dd9af5821cb55270c23064e8645d481c70216e4e102fad21364161f03cc67016902ec1d5075f9d3c3cf6be03158c2bb34dc203fdf9bc29babf3af143ec036bc11f3fdbce98e4b4b4a9e381c9e24aaaccb0f8173e4bb832324c8c0a8", &(0x7f0000000700)="de621baac7faa1cc05948b0aa17564f0357a6310e5ee6110ee470bc192c394b8a41fb8e2cd93de8385274b8014c8e8b28c9b83ce21d9b80695197854b8fe83a464df6d0a3b02746905bbe7158b3981a8713dd08de2234b25813e7b8b8f96af034c7fb54de2480822d207531a02bc01a5a2d5de3fd1b32adb68326f8fd762d968aff6779a4a3b549241"}}, &(0x7f00000000c0)) 11.594348027s ago: executing program 1 (id=292): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) 11.359852386s ago: executing program 1 (id=294): r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8c}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @private=0xc67}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1, 0x400006, 0x0, 0x9, '\x00', '\x00', '\x00', 0x0, 0x81, 0x3, 0xba, "b6855a32474f04ed0000ddcffbffffff"}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x89901) 11.261004634s ago: executing program 3 (id=296): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) accept4$llc(r1, 0x0, &(0x7f00000000c0), 0x181800) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 9.433179053s ago: executing program 0 (id=297): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x2) 9.389977686s ago: executing program 1 (id=298): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) brk(0x689d80000003) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x130, 0xa, 0xd0e0000, 0x130, 0x100, 0x268, 0x1d8, 0x1d8, 0x268, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00'}, 0x0, 0x98, 0x100, 0x0, {0x11}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095e67da5"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) 7.666631576s ago: executing program 1 (id=299): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000"], 0x8) 7.664535186s ago: executing program 3 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x67709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) 6.137565861s ago: executing program 1 (id=301): socket(0x2a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6.074165956s ago: executing program 3 (id=302): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$MSR(0x0, 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) 5.886024651s ago: executing program 0 (id=303): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='ext3\x00', 0x0, &(0x7f00000002c0)='cache=none') 5.797548478s ago: executing program 3 (id=305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.311232709s ago: executing program 2 (id=306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, 0x0}}], 0x2, 0x24000000) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(&(0x7f0000000300), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 4.310807539s ago: executing program 0 (id=307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@deltaction={0x14, 0x31, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x24004000) syz_open_dev$loop(0x0, 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = memfd_create(0x0, 0x1) pwritev(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0x800000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 3.117262917s ago: executing program 2 (id=308): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 3.07585781s ago: executing program 0 (id=309): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="9300a000000000"], 0x8) 2.805666042s ago: executing program 2 (id=310): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000280), 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 2.755312236s ago: executing program 1 (id=311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x2) 1.992699318s ago: executing program 0 (id=312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 981.69137ms ago: executing program 2 (id=313): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_open_dev$MSR(0x0, 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) 806.300985ms ago: executing program 0 (id=314): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xee}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @generic={0x5, 0xa, 0x0, 0x1, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa0, 0x35, &(0x7f00000000c0)=""/53, 0x41100, 0x1, '\x00', r6, @fallback=0x1b, r7, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xe, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000700)=[{0x1, 0x1, 0x9, 0x9}, {0x1, 0x1, 0x4, 0x9}, {0x2, 0x5, 0x2, 0x5}, {0x1, 0x1, 0xf, 0xa}, {0x5, 0x5, 0x1, 0xc}, {0x4, 0x1, 0xf, 0xa}, {0x0, 0x1, 0xe, 0xb}, {0x4, 0x5, 0x2, 0xa}, {0x1, 0x4}], 0x10, 0x9}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xb9}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 802.331215ms ago: executing program 2 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r4 = io_uring_setup(0x937, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x18}], 0x1, 0x101, 0x0) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000500)={0x0, 0x1, [{r3, 0x0, 0x0, 0x8000}]}) lseek(r7, 0x0, 0x2) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000040)=']\x00') sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) setrlimit(0x8, 0x0) mlockall(0xe) 75.621714ms ago: executing program 2 (id=316): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe}}, './bus\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) syz_open_dev$mouse(&(0x7f0000000240), 0xcaddbda, 0x24800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[r6], 0x1) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000"], 0x1c}], 0x1}, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0xa, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x5, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 0s ago: executing program 3 (id=317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x803, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, 0x0}}], 0x2, 0x24000000) getpid() r5 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(&(0x7f0000000300), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 76.364459][ T5778] cgroup: Unknown subsys name 'net' [ 76.529146][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.192273][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.536511][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.545649][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.554355][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.563234][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.563521][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.572465][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.578829][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.585462][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.592997][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.601290][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.606506][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.614046][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.620671][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.627470][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.635419][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.641228][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.649036][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.657732][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.662317][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.679883][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.688529][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.696341][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.704410][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.720220][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.182101][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 81.336630][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 81.425975][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.434857][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.442695][ T5790] bridge_slave_0: entered allmulticast mode [ 81.450107][ T5790] bridge_slave_0: entered promiscuous mode [ 81.471880][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 81.492922][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.500443][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.507673][ T5790] bridge_slave_1: entered allmulticast mode [ 81.515507][ T5790] bridge_slave_1: entered promiscuous mode [ 81.528466][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 81.615458][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.670236][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.690991][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.698164][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.705837][ T5789] bridge_slave_0: entered allmulticast mode [ 81.712986][ T5789] bridge_slave_0: entered promiscuous mode [ 81.783889][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.791263][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.798563][ T5789] bridge_slave_1: entered allmulticast mode [ 81.805891][ T5789] bridge_slave_1: entered promiscuous mode [ 81.817068][ T5790] team0: Port device team_slave_0 added [ 81.827215][ T5790] team0: Port device team_slave_1 added [ 81.845656][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.853041][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.860379][ T5787] bridge_slave_0: entered allmulticast mode [ 81.867398][ T5787] bridge_slave_0: entered promiscuous mode [ 81.937446][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.949924][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.957135][ T5787] bridge_slave_1: entered allmulticast mode [ 81.966343][ T5787] bridge_slave_1: entered promiscuous mode [ 82.018822][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.033977][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.043742][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.074769][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.088542][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.102114][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.109365][ T5788] bridge_slave_0: entered allmulticast mode [ 82.117330][ T5788] bridge_slave_0: entered promiscuous mode [ 82.132121][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.139383][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.147196][ T5788] bridge_slave_1: entered allmulticast mode [ 82.155394][ T5788] bridge_slave_1: entered promiscuous mode [ 82.179389][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.212595][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.219707][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.247152][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.289482][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.319579][ T5789] team0: Port device team_slave_0 added [ 82.363077][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.375031][ T5789] team0: Port device team_slave_1 added [ 82.399937][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.447901][ T5790] hsr_slave_0: entered promiscuous mode [ 82.456328][ T5790] hsr_slave_1: entered promiscuous mode [ 82.468834][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.496624][ T5787] team0: Port device team_slave_0 added [ 82.530812][ T5787] team0: Port device team_slave_1 added [ 82.560958][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.567986][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.595274][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.622914][ T5788] team0: Port device team_slave_0 added [ 82.648504][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.655971][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.682110][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.695974][ T5788] team0: Port device team_slave_1 added [ 82.715318][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.723013][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.723120][ T5805] Bluetooth: hci0: command tx timeout [ 82.749044][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.751703][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.772460][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.798495][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.798892][ T5805] Bluetooth: hci2: command tx timeout [ 82.809373][ T5105] Bluetooth: hci3: command tx timeout [ 82.815030][ T5805] Bluetooth: hci1: command tx timeout [ 82.875316][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.882810][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.909237][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.922579][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.929576][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.955901][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.011517][ T5789] hsr_slave_0: entered promiscuous mode [ 83.018202][ T5789] hsr_slave_1: entered promiscuous mode [ 83.024909][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.033416][ T5789] Cannot create hsr debugfs directory [ 83.112679][ T5788] hsr_slave_0: entered promiscuous mode [ 83.119234][ T5788] hsr_slave_1: entered promiscuous mode [ 83.126084][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.134414][ T5788] Cannot create hsr debugfs directory [ 83.144516][ T5787] hsr_slave_0: entered promiscuous mode [ 83.151519][ T5787] hsr_slave_1: entered promiscuous mode [ 83.158402][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.166198][ T5787] Cannot create hsr debugfs directory [ 83.522693][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.566894][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.578090][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.610208][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.697161][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.709168][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.735229][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.746837][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.827786][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.839247][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.861265][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.874195][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.982310][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.998671][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.012297][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.024377][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.109028][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.185258][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.213807][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.232873][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.256408][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.266394][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.273869][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.303535][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.310748][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.342455][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.349642][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.374377][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.381609][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.396711][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.413115][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.453914][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.461111][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.487046][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.494223][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.521930][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.586577][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.593826][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.647463][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.654715][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.790572][ T5805] Bluetooth: hci0: command tx timeout [ 84.872269][ T5805] Bluetooth: hci3: command tx timeout [ 84.872289][ T5801] Bluetooth: hci2: command tx timeout [ 84.872326][ T5801] Bluetooth: hci1: command tx timeout [ 85.064991][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.081526][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.231421][ T5788] veth0_vlan: entered promiscuous mode [ 85.259019][ T5790] veth0_vlan: entered promiscuous mode [ 85.293639][ T5788] veth1_vlan: entered promiscuous mode [ 85.315619][ T5790] veth1_vlan: entered promiscuous mode [ 85.375744][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.395998][ T5788] veth0_macvtap: entered promiscuous mode [ 85.411556][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.419605][ T5788] veth1_macvtap: entered promiscuous mode [ 85.443865][ T5790] veth0_macvtap: entered promiscuous mode [ 85.484916][ T5790] veth1_macvtap: entered promiscuous mode [ 85.518457][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.567629][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.597047][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.606203][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.615733][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.624882][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.645409][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.656658][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.668916][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.682212][ T5789] veth0_vlan: entered promiscuous mode [ 85.698377][ T5787] veth0_vlan: entered promiscuous mode [ 85.712771][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.724827][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.738014][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.757205][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.766455][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.776608][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.788070][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.829180][ T5789] veth1_vlan: entered promiscuous mode [ 85.900097][ T5787] veth1_vlan: entered promiscuous mode [ 85.966373][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.997477][ T5789] veth0_macvtap: entered promiscuous mode [ 86.010613][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.047245][ T5789] veth1_macvtap: entered promiscuous mode [ 86.120285][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.128179][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.151367][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.162999][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.173870][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.191347][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.203532][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.217559][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.226389][ T5787] veth0_macvtap: entered promiscuous mode [ 86.244211][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.281461][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.297777][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.308699][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.321070][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.332837][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.367447][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.381912][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.393428][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402341][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432927][ T5787] veth1_macvtap: entered promiscuous mode [ 86.492011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.516239][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.551313][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.563112][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.573640][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.587172][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.597472][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.610815][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.632028][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.685707][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.721862][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.733379][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.744431][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.756773][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.767846][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.801572][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.872681][ T5801] Bluetooth: hci0: command tx timeout [ 86.897232][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.932909][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.942806][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.951880][ T5105] Bluetooth: hci2: command tx timeout [ 86.952197][ T5805] Bluetooth: hci1: command tx timeout [ 86.957414][ T5801] Bluetooth: hci3: command tx timeout [ 86.970441][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.028621][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.062799][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.190269][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.194387][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.225823][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.266232][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.300984][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.375819][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.410896][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 87.418582][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.446452][ T23] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.489777][ T23] usb 4-1: config 1 has no interface number 1 [ 87.518333][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.558378][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.573159][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.592114][ T23] usb 4-1: Product: syz [ 87.603586][ T23] usb 4-1: Manufacturer: syz [ 87.618457][ T23] usb 4-1: SerialNumber: syz [ 87.725629][ T5897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.986329][ T5902] bridge0: entered promiscuous mode [ 87.992516][ T5902] macvlan2: entered promiscuous mode [ 88.018628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.027385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.223502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.233136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.325822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.334722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.428274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.437121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.530683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.539380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.950084][ T5801] Bluetooth: hci0: command tx timeout [ 89.062492][ T5801] Bluetooth: hci1: command tx timeout [ 89.069543][ T5801] Bluetooth: hci3: command tx timeout [ 89.078576][ T5805] Bluetooth: hci2: command tx timeout [ 90.468915][ T5909] syz.2.8: attempt to access beyond end of device [ 90.468915][ T5909] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 91.575992][ T23] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 91.589158][ T23] usb 4-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 91.602832][ T23] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 91.608977][ T23] usb 4-1: 2:1 : invalid channels 0 [ 91.622785][ T5909] gfs2: error 10 reading superblock [ 91.660550][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 91.667766][ T23] usb 4-1: USB disconnect, device number 2 [ 91.816249][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.378619][ T967] cfg80211: failed to load regulatory.db [ 92.705833][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.845700][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 92.909990][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 92.920700][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.946232][ T23] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.983889][ T23] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.000666][ T23] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 93.018107][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.026968][ T23] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 93.038179][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.071851][ T23] usb 4-1: config 0 descriptor?? [ 93.632264][ T23] hid-thrustmaster 0003:044F:B65D.0001: invalid report_count 29987 [ 93.731321][ T5932] netlink: 'syz.2.15': attribute type 20 has an invalid length. [ 94.180064][ T23] hid-thrustmaster 0003:044F:B65D.0001: item 0 2 1 9 parsing failed [ 94.190754][ T23] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 94.198921][ T23] hid-thrustmaster: probe of 0003:044F:B65D.0001 failed with error -22 [ 94.255606][ T23] usb 4-1: USB disconnect, device number 3 [ 95.064777][ T5935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.605127][ T5941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.622023][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.193911][ T5950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 97.200736][ T5950] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.219252][ T5950] vhci_hcd vhci_hcd.0: Device attached [ 97.278695][ T5952] vhci_hcd: connection closed [ 97.280163][ T1133] vhci_hcd: stop threads [ 97.302379][ T1133] vhci_hcd: release socket [ 97.307938][ T1133] vhci_hcd: disconnect device [ 97.469768][ T5956] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 97.577571][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.620538][ T5956] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.693078][ T5957] syz.1.21[5957]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.954816][ T5956] binder: 5954:5956 unknown command 1074553619 [ 97.962123][ T5956] binder: 5954:5956 ioctl c0306201 200000000540 returned -22 [ 98.030050][ T5961] Zero length message leads to an empty skb [ 99.757815][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.005456][ T5978] ip6tnl1: entered allmulticast mode [ 100.349758][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28'. [ 101.811555][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 101.866413][ T5990] syz.1.30: attempt to access beyond end of device [ 101.866413][ T5990] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 101.880246][ T5990] gfs2: error 10 reading superblock [ 102.869835][ T5996] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 102.876463][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.920422][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 102.944753][ T5998] vhci_hcd: connection closed [ 102.950888][ T48] vhci_hcd: stop threads [ 102.970372][ T48] vhci_hcd: release socket [ 102.974894][ T48] vhci_hcd: disconnect device [ 103.191465][ T6002] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 103.290441][ T6003] binder: 6000:6003 unknown command 1074553619 [ 103.296762][ T6003] binder: 6000:6003 ioctl c0306201 200000000540 returned -22 [ 104.236670][ T6014] netlink: 'syz.2.36': attribute type 20 has an invalid length. [ 105.883051][ T6024] capability: warning: `syz.3.40' uses deprecated v2 capabilities in a way that may be insecure [ 107.736564][ T6037] ip6tnl1: entered allmulticast mode [ 108.166094][ T6041] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 108.172743][ T6041] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.197547][ T6041] vhci_hcd vhci_hcd.0: Device attached [ 108.233243][ T6044] vhci_hcd: connection closed [ 108.238955][ T3467] vhci_hcd: stop threads [ 108.258515][ T3467] vhci_hcd: release socket [ 108.276092][ T3467] vhci_hcd: disconnect device [ 109.485724][ T6053] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 109.580292][ T6054] binder: 6051:6054 unknown command 1074553619 [ 109.586842][ T6054] binder: 6051:6054 ioctl c0306201 200000000540 returned -22 [ 109.613693][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.645274][ T6053] bond0: (slave team0): Enslaving as an active interface with an up link [ 110.700710][ T6061] netlink: 'syz.0.49': attribute type 20 has an invalid length. [ 110.750720][ T6061] dvmrp17: entered allmulticast mode [ 114.110692][ T6085] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 114.238250][ T6085] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.257981][ T6085] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.475994][ T6085] binder: 6083:6085 unknown command 1074553619 [ 114.482375][ T6085] binder: 6083:6085 ioctl c0306201 200000000540 returned -22 [ 116.795048][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.59'. [ 116.866911][ T6104] ip6tnl1: entered allmulticast mode [ 118.844496][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'. [ 118.933122][ T6121] syz.0.64: attempt to access beyond end of device [ 118.933122][ T6121] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 119.008073][ T6121] gfs2: error 10 reading superblock [ 120.430401][ T6131] process 'syz.0.67' launched '/dev/fd/3' with NULL argv: empty string added [ 121.081254][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.828131][ T5856] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 121.852149][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.860799][ T5856] usb 2-1: Product: syz [ 121.865008][ T5856] usb 2-1: Manufacturer: syz [ 121.869612][ T5856] usb 2-1: SerialNumber: syz [ 121.905395][ T5856] usb 2-1: config 0 descriptor?? [ 121.924473][ T5856] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 122.378189][ T5856] sonixb 2-1:0.0: Error writing register 01: -71 [ 122.390127][ T5856] sonixb: probe of 2-1:0.0 failed with error -71 [ 122.448086][ T5856] usb 2-1: USB disconnect, device number 2 [ 123.286121][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'. [ 123.324415][ T6159] syz.1.76: attempt to access beyond end of device [ 123.324415][ T6159] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 123.469298][ T6159] gfs2: error 10 reading superblock [ 125.494548][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 125.658329][ T6177] ip6tnl1: entered allmulticast mode [ 127.786721][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 127.969924][ T6200] syz.2.87: attempt to access beyond end of device [ 127.969924][ T6200] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 128.011453][ T6200] gfs2: error 10 reading superblock [ 133.116077][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130945][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.239125][ T6242] bridge0: port 3(team0) entered blocking state [ 134.246082][ T6242] bridge0: port 3(team0) entered disabled state [ 134.254381][ T6242] team0: entered allmulticast mode [ 134.259619][ T6242] team_slave_0: entered allmulticast mode [ 134.265504][ T6242] team_slave_1: entered allmulticast mode [ 134.281222][ T6242] team0: entered promiscuous mode [ 134.286386][ T6242] team_slave_0: entered promiscuous mode [ 134.293207][ T6242] team_slave_1: entered promiscuous mode [ 134.302719][ T6242] bridge0: port 3(team0) entered blocking state [ 134.309358][ T6242] bridge0: port 3(team0) entered forwarding state [ 134.629722][ C0] sched: RT throttling activated [ 134.840320][ T6245] syz.2.100: attempt to access beyond end of device [ 134.840320][ T6245] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 134.864133][ T6245] gfs2: error 10 reading superblock [ 136.542403][ T6252] (null): rxe_set_mtu: Set mtu to 1024 [ 136.549984][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 136.560873][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 136.569232][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 137.192289][ T6252] infiniband syz1: set active [ 137.197258][ T6252] infiniband syz1: added geneve1 [ 137.206030][ T6252] syz1: rxe_create_cq: returned err = -12 [ 137.212503][ T6252] infiniband syz1: Couldn't create ib_mad CQ [ 137.218791][ T6252] infiniband syz1: Couldn't open port 1 [ 137.251808][ T6252] RDS/IB: syz1: added [ 137.256479][ T6252] smc: adding ib device syz1 with port count 1 [ 137.262980][ T6252] smc: ib device syz1 port 1 has pnetid [ 137.274320][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 137.435162][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 137.557369][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 137.679862][ T6252] geneve1 speed is unknown, defaulting to 1000 [ 137.884656][ T8] geneve1 speed is unknown, defaulting to 1000 [ 137.892540][ T8] geneve1 speed is unknown, defaulting to 1000 [ 140.730169][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 140.767153][ T6279] syz.0.110: attempt to access beyond end of device [ 140.767153][ T6279] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 140.780462][ T6279] gfs2: error 10 reading superblock [ 145.094187][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 145.117375][ T6292] netlink: 'syz.3.113': attribute type 8 has an invalid length. [ 145.137639][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 145.182095][ T6292] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.191227][ T6292] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.200015][ T6292] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.208749][ T6292] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.262060][ T6294] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 145.268616][ T6294] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 145.290437][ T6294] vhci_hcd vhci_hcd.0: Device attached [ 145.310957][ T6296] vhci_hcd: connection closed [ 145.311249][ T48] vhci_hcd: stop threads [ 145.325302][ T48] vhci_hcd: release socket [ 145.339924][ T48] vhci_hcd: disconnect device [ 145.345251][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 145.390133][ T6292] netlink: 'syz.3.113': attribute type 8 has an invalid length. [ 145.407153][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 145.445677][ T6298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 148.259791][ T6313] tipc: Started in network mode [ 148.266396][ T6313] tipc: Node identity 4, cluster identity 4711 [ 148.275033][ T6313] tipc: Node number set to 4 [ 148.931223][ T6317] syz.0.120: attempt to access beyond end of device [ 148.931223][ T6317] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 148.954754][ T6317] gfs2: error 10 reading superblock [ 152.839804][ T5797] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.033146][ T5797] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF6, skipping [ 153.070190][ T5797] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 153.079310][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.100482][ T5797] usb 1-1: config 0 descriptor?? [ 153.106445][ T6345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.126634][ T5797] gspca_main: spca561-2.14.0 probing abcd:cdee [ 153.550926][ T5797] spca561: probe of 1-1:0.0 failed with error -22 [ 153.744178][ T5797] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 153.810581][ T5797] usb 1-1: MIDIStreaming interface descriptor not found [ 153.941074][ T5797] usb 1-1: USB disconnect, device number 2 [ 157.717882][ T6388] tipc: Started in network mode [ 157.724936][ T6388] tipc: Node identity 4, cluster identity 4711 [ 157.732415][ T6388] tipc: Node number set to 4 [ 161.891452][ T6420] netlink: 6 bytes leftover after parsing attributes in process `syz.1.151'. [ 161.977829][ T6420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.544512][ T6423] tipc: Started in network mode [ 162.549588][ T6423] tipc: Node identity 4, cluster identity 4711 [ 162.556012][ T6423] tipc: Node number set to 4 [ 165.769795][ T5892] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.948045][ T5892] usb 1-1: device descriptor read/64, error -71 [ 166.252358][ T5892] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.429871][ T5892] usb 1-1: device descriptor read/64, error -71 [ 166.568475][ T5892] usb usb1-port1: attempt power cycle [ 166.997538][ T5892] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.076852][ T5892] usb 1-1: device descriptor read/8, error -71 [ 167.599773][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.904024][ T6459] netlink: 'syz.2.163': attribute type 20 has an invalid length. [ 168.956790][ T6459] dvmrp17: entered allmulticast mode [ 169.594010][ T5892] usb 1-1: device descriptor read/8, error -71 [ 169.782433][ T5892] usb usb1-port1: unable to enumerate USB device [ 175.389758][ T6503] netlink: 'syz.3.177': attribute type 20 has an invalid length. [ 175.565639][ T6503] dvmrp17: entered allmulticast mode [ 176.139986][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.329811][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 176.337469][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.355896][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.390133][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.430520][ T5856] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 176.480040][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 176.527382][ T5856] usb 1-1: Product: syz [ 176.539739][ T5856] usb 1-1: Manufacturer: syz [ 176.544412][ T5856] usb 1-1: SerialNumber: syz [ 176.615247][ T5856] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 176.752779][ T6509] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 176.858739][ T5892] usb 1-1: USB disconnect, device number 7 [ 176.902340][ T5892] appletouch 1-1:1.0: input: appletouch disconnected [ 176.914635][ T6509] bridge0: port 3(team0) entered disabled state [ 176.945801][ T6511] binder: 6507:6511 unknown command 1074553619 [ 176.952416][ T6509] team0: left allmulticast mode [ 176.954665][ T6511] binder: 6507:6511 ioctl c0306201 200000000540 returned -22 [ 176.965068][ T6509] team_slave_0: left allmulticast mode [ 176.978088][ T6509] team_slave_1: left allmulticast mode [ 176.984228][ T6509] team0: left promiscuous mode [ 177.011817][ T6509] team_slave_0: left promiscuous mode [ 177.021780][ T6509] team_slave_1: left promiscuous mode [ 177.040013][ T6509] bridge0: port 3(team0) entered disabled state [ 177.094344][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.183317][ T6509] bond0: (slave team0): Enslaving as an active interface with an up link [ 177.292124][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 177.653148][ T6518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 177.659735][ T6518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.670844][ T6518] vhci_hcd vhci_hcd.0: Device attached [ 177.709825][ T6520] vhci_hcd: connection closed [ 177.710384][ T11] vhci_hcd: stop threads [ 177.733916][ T11] vhci_hcd: release socket [ 177.738386][ T11] vhci_hcd: disconnect device [ 178.455270][ T6527] mmap: syz.0.183 (6527) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.527206][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 178.665873][ T6531] syz.3.182: attempt to access beyond end of device [ 178.665873][ T6531] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 178.705797][ T6531] gfs2: error 10 reading superblock [ 182.555630][ T6556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 182.562201][ T6556] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 182.601804][ T6556] vhci_hcd vhci_hcd.0: Device attached [ 182.646502][ T6558] vhci_hcd: connection closed [ 182.720036][ T59] vhci_hcd: stop threads [ 182.738835][ T59] vhci_hcd: release socket [ 182.744990][ T59] vhci_hcd: disconnect device [ 182.836837][ T5856] vhci_hcd: vhci_device speed not set [ 184.858872][ T6572] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 184.966374][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 185.209048][ T6575] ip6tnl1: entered allmulticast mode [ 189.184126][ T6604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 189.190735][ T6604] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.236725][ T6604] vhci_hcd vhci_hcd.0: Device attached [ 189.280096][ T6606] vhci_hcd: connection closed [ 189.286457][ T1128] vhci_hcd: stop threads [ 189.298522][ T1128] vhci_hcd: release socket [ 189.314959][ T1128] vhci_hcd: disconnect device [ 190.497222][ T6622] dummy0: entered allmulticast mode [ 190.503827][ T6622] dummy0: left allmulticast mode [ 191.346384][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 191.446494][ T6630] syz.3.211: attempt to access beyond end of device [ 191.446494][ T6630] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 191.465764][ T6630] gfs2: error 10 reading superblock [ 193.472440][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.213'. [ 193.519577][ T6641] ip6tnl1: entered allmulticast mode [ 193.605622][ T6645] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 193.612279][ T6645] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.628507][ T6645] vhci_hcd vhci_hcd.0: Device attached [ 193.636761][ T6649] vhci_hcd: connection closed [ 193.637844][ T59] vhci_hcd: stop threads [ 193.649372][ T59] vhci_hcd: release socket [ 193.654038][ T59] vhci_hcd: disconnect device [ 194.437208][ T6661] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 194.980652][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.987145][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.142101][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'. [ 197.401838][ T6680] syz.2.223: attempt to access beyond end of device [ 197.401838][ T6680] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 197.450109][ T6680] gfs2: error 10 reading superblock [ 199.500803][ T6697] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 199.507381][ T6697] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 199.539192][ T6697] vhci_hcd vhci_hcd.0: Device attached [ 199.564661][ T6701] vhci_hcd: connection closed [ 199.564972][ T11] vhci_hcd: stop threads [ 199.586278][ T11] vhci_hcd: release socket [ 199.603987][ T11] vhci_hcd: disconnect device [ 203.692465][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 203.782632][ T6727] syz.2.236: attempt to access beyond end of device [ 203.782632][ T6727] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 203.830808][ T6727] gfs2: error 10 reading superblock [ 204.279955][ T6734] tipc: New replicast peer: 255.255.255.255 [ 204.290115][ T6734] tipc: Enabled bearer , priority 10 [ 204.967963][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 205.925863][ T6729] ip6tnl1: entered allmulticast mode [ 207.071996][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 207.078092][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 207.084250][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 207.090450][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 207.333423][ T6746] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 207.340003][ T6746] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 207.545120][ T6746] vhci_hcd vhci_hcd.0: Device attached [ 207.552605][ T6749] vhci_hcd: connection closed [ 207.552875][ T11] vhci_hcd: stop threads [ 207.568665][ T11] vhci_hcd: release socket [ 207.573414][ T11] vhci_hcd: disconnect device [ 210.194166][ T6769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'. [ 210.319492][ T6769] syz.0.247: attempt to access beyond end of device [ 210.319492][ T6769] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 210.333558][ T6769] gfs2: error 10 reading superblock [ 212.019789][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.230024][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 212.247296][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.279842][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.319804][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.344517][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.378591][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.388720][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.671534][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 212.677092][ T8] usbtmc 1-1:16.0: can't read capabilities [ 212.938531][ T8] usb 1-1: USB disconnect, device number 8 [ 214.139364][ T6786] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 214.145931][ T6786] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 215.050452][ T6786] vhci_hcd vhci_hcd.0: Device attached [ 215.228598][ T6793] vhci_hcd: connection closed [ 215.233186][ T12] vhci_hcd: stop threads [ 215.300319][ T8] vhci_hcd: vhci_device speed not set [ 216.385254][ T12] vhci_hcd: release socket [ 216.410286][ T12] vhci_hcd: disconnect device [ 216.436518][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 216.486895][ T6802] syz.0.257: attempt to access beyond end of device [ 216.486895][ T6802] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 216.500246][ T8] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 216.507816][ T8] usb 35-1: enqueue for inactive port 0 [ 216.515669][ T6802] gfs2: error 10 reading superblock [ 216.609802][ T8] vhci_hcd: vhci_device speed not set [ 219.679759][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 219.970276][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 220.025822][ T23] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 220.574559][ T23] usb 3-1: config 0 has no interface number 0 [ 220.604979][ T23] usb 3-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 220.648124][ T23] usb 3-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 220.668438][ T23] usb 3-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x91, skipping [ 220.692046][ T23] usb 3-1: config 0 interface 19 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.711951][ T6828] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 220.714850][ T23] usb 3-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 220.718500][ T6828] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.728272][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.736919][ T6828] vhci_hcd vhci_hcd.0: Device attached [ 220.743660][ T23] usb 3-1: Product: syz [ 220.753067][ T23] usb 3-1: Manufacturer: syz [ 220.757795][ T23] usb 3-1: SerialNumber: syz [ 220.773691][ T23] usb 3-1: config 0 descriptor?? [ 220.793642][ T6821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.802021][ T6821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.059838][ T5856] vhci_hcd: vhci_device speed not set [ 221.082318][ T8] usb 3-1: USB disconnect, device number 2 [ 221.149787][ T5856] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 223.394262][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 223.482089][ T6830] vhci_hcd: connection reset by peer [ 223.487781][ T3467] vhci_hcd: stop threads [ 223.529021][ T3467] vhci_hcd: release socket [ 223.590158][ T6849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 223.596727][ T6849] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.609885][ T6847] syz.3.270: attempt to access beyond end of device [ 223.609885][ T6847] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 223.624071][ T3467] vhci_hcd: disconnect device [ 223.630827][ T6849] vhci_hcd vhci_hcd.0: Device attached [ 223.658877][ T6847] gfs2: error 10 reading superblock [ 223.683964][ T6852] vhci_hcd: connection closed [ 223.684238][ T11] vhci_hcd: stop threads [ 223.708989][ T11] vhci_hcd: release socket [ 223.731003][ T11] vhci_hcd: disconnect device [ 226.503626][ T5856] vhci_hcd: vhci_device speed not set [ 226.551494][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 226.613883][ T6869] ip6tnl1: entered allmulticast mode [ 231.109078][ T6898] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 231.115644][ T6898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 231.291169][ T6898] vhci_hcd vhci_hcd.0: Device attached [ 231.321178][ T6902] vhci_hcd: connection closed [ 231.321633][ T1044] vhci_hcd: stop threads [ 231.590399][ T5797] vhci_hcd: vhci_device speed not set [ 232.022412][ T1044] vhci_hcd: release socket [ 232.074454][ T1044] vhci_hcd: disconnect device [ 232.154760][ T5797] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 232.162793][ T5797] usb 33-1: enqueue for inactive port 0 [ 232.259840][ T5797] vhci_hcd: vhci_device speed not set [ 236.729483][ T6944] loop3: detected capacity change from 0 to 1 [ 236.802296][ T6944] Dev loop3: unable to read RDB block 1 [ 236.810031][ T6944] loop3: unable to read partition table [ 236.816514][ T6944] loop3: partition table beyond EOD, truncated [ 236.822994][ T6944] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.555303][ T6946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 237.561881][ T6946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.371542][ T6946] vhci_hcd vhci_hcd.0: Device attached [ 238.392568][ T6951] vhci_hcd: connection closed [ 238.392892][ T3491] vhci_hcd: stop threads [ 238.434128][ T3491] vhci_hcd: release socket [ 238.718475][ T23] vhci_hcd: vhci_device speed not set [ 239.191800][ T23] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 239.889876][ T3491] vhci_hcd: disconnect device [ 240.272869][ T6970] futex_wake_op: syz.2.304 tries to shift op by -1; fix this program [ 242.769350][ T6984] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 242.891974][ T6984] binder: 6982:6984 unknown command 1074553619 [ 242.898184][ T6984] binder: 6982:6984 ioctl c0306201 200000000540 returned -22 [ 243.014739][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 244.340429][ T23] vhci_hcd: vhci_device speed not set [ 245.085429][ T6997] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 245.092032][ T6997] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 245.110432][ T6997] vhci_hcd vhci_hcd.0: Device attached [ 245.136568][ T7002] vhci_hcd: connection closed [ 245.137511][ T11] vhci_hcd: stop threads [ 245.147640][ T11] vhci_hcd: release socket [ 245.156839][ T11] vhci_hcd: disconnect device [ 246.076303][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'. [ 246.729443][ T7024] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 247.031124][ T7022] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 247.042909][ T7022] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 247.051366][ T7022] CPU: 0 PID: 7022 Comm: syz.2.316 Not tainted 6.6.101-syzkaller #0 [ 247.059367][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.069459][ T7022] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 247.075053][ T7022] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 bf e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 bf e0 f9 4d 8b 24 24 48 83 c3 [ 247.094698][ T7022] RSP: 0018:ffffc9000cacfa78 EFLAGS: 00010206 [ 247.100887][ T7022] RAX: 0000000000000005 RBX: ffff888026c5e900 RCX: 0000000000080000 [ 247.108981][ T7022] RDX: ffffc9000ef92000 RSI: 0000000000000d2a RDI: 0000000000000d2b [ 247.116980][ T7022] RBP: 0000000000000001 R08: ffff88814c79812f R09: 1ffff110298f3025 [ 247.125001][ T7022] R10: dffffc0000000000 R11: ffffed10298f3026 R12: 0000000000000028 [ 247.132989][ T7022] R13: dffffc0000000000 R14: ffff88814c798000 R15: dffffc0000000000 [ 247.140974][ T7022] FS: 00007f771cf5c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 247.149917][ T7022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.156515][ T7022] CR2: 000000110c43bab7 CR3: 000000005e0ac000 CR4: 00000000003526f0 [ 247.164504][ T7022] Call Trace: [ 247.167797][ T7022] [ 247.170742][ T7022] pcl818_detach+0x66/0xd0 [ 247.175181][ T7022] comedi_device_detach+0x131/0x6f0 [ 247.180415][ T7022] comedi_unlocked_ioctl+0xbd0/0xf90 [ 247.185727][ T7022] ? comedi_poll+0x8c0/0x8c0 [ 247.190365][ T7022] ? __fget_files+0x28/0x4d0 [ 247.194986][ T7022] ? bpf_lsm_file_ioctl+0x9/0x10 [ 247.199932][ T7022] ? security_file_ioctl+0x80/0xa0 [ 247.205058][ T7022] ? comedi_poll+0x8c0/0x8c0 [ 247.209672][ T7022] __se_sys_ioctl+0xfd/0x170 [ 247.214279][ T7022] do_syscall_64+0x55/0xb0 [ 247.218707][ T7022] ? clear_bhb_loop+0x40/0x90 [ 247.223394][ T7022] ? clear_bhb_loop+0x40/0x90 [ 247.228081][ T7022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.234006][ T7022] RIP: 0033:0x7f771c18eb69 [ 247.238450][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.258077][ T7022] RSP: 002b:00007f771cf5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.266508][ T7022] RAX: ffffffffffffffda RBX: 00007f771c3b6160 RCX: 00007f771c18eb69 [ 247.274493][ T7022] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000a [ 247.282472][ T7022] RBP: 00007f771c211df1 R08: 0000000000000000 R09: 0000000000000000 [ 247.290451][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.298437][ T7022] R13: 0000000000000000 R14: 00007f771c3b6160 R15: 00007fff03ca3758 [ 247.306445][ T7022] [ 247.309487][ T7022] Modules linked in: [ 247.315002][ T7022] ---[ end trace 0000000000000000 ]--- [ 247.320570][ T7022] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 247.326132][ T7022] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 89 bf e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 bf e0 f9 4d 8b 24 24 48 83 c3 [ 247.345780][ T7022] RSP: 0018:ffffc9000cacfa78 EFLAGS: 00010206 [ 247.352222][ T7022] RAX: 0000000000000005 RBX: ffff888026c5e900 RCX: 0000000000080000 [ 247.360776][ T7022] RDX: ffffc9000ef92000 RSI: 0000000000000d2a RDI: 0000000000000d2b [ 247.368762][ T7022] RBP: 0000000000000001 R08: ffff88814c79812f R09: 1ffff110298f3025 [ 247.376775][ T7022] R10: dffffc0000000000 R11: ffffed10298f3026 R12: 0000000000000028 [ 247.384777][ T7022] R13: dffffc0000000000 R14: ffff88814c798000 R15: dffffc0000000000 [ 247.392774][ T7022] FS: 00007f771cf5c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 247.401738][ T7022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.408327][ T7022] CR2: 000000110c43bab7 CR3: 000000005e0ac000 CR4: 00000000003526f0 [ 247.416329][ T7022] Kernel panic - not syncing: Fatal exception [ 247.422782][ T7022] Kernel Offset: disabled [ 247.427135][ T7022] Rebooting in 86400 seconds..