last executing test programs: 12.944801124s ago: executing program 2 (id=267): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 12.507978829s ago: executing program 4 (id=271): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 9.463348333s ago: executing program 2 (id=274): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 9.360529558s ago: executing program 4 (id=275): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) read$FUSE(r0, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r1, 0x0, 0x0, 'syz1\x00', 0x0}) tgkill(0x0, r1, 0x29) 8.724931445s ago: executing program 1 (id=279): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$FUSE(r1, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0x1, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x1, r2, 0x0, 0x0, 'syz1\x00', 0x0}) tgkill(0x0, r2, 0x29) 7.765938406s ago: executing program 4 (id=280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) accept4$tipc(r1, 0x0, 0x0, 0x800) 7.763568384s ago: executing program 0 (id=281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 7.763044771s ago: executing program 1 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 7.762724895s ago: executing program 3 (id=283): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 7.689349137s ago: executing program 2 (id=284): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 5.643756814s ago: executing program 0 (id=285): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) 5.643128226s ago: executing program 4 (id=286): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='mm_page_alloc\x00'}, 0x18) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 5.576125321s ago: executing program 1 (id=287): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @random="1bcd7b1bb89f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000000004d06fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="5002001190"], 0x0) 5.556578947s ago: executing program 3 (id=288): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 4.282830213s ago: executing program 0 (id=289): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="355f2e4a357ab7", 0x7}], 0x1) 4.229177132s ago: executing program 1 (id=290): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4.110669899s ago: executing program 3 (id=291): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xd495, 0x2, 0x5) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'veth1_virt_wifi\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x4b, 0x1245a522dbadf005, 0x7, {0x8, @tcp_ip6_spec={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x4e23, 0x8}, {0x0, @broadcast, 0x7, 0x0, [0x8, 0x3]}, @tcp_ip4_spec={@loopback, @multicast2, 0x4e24, 0x4e22, 0xc4}, {0x0, @remote, 0x8, 0x7, [0x7fff, 0x7]}, 0xffffffffffff65e0, 0x10}, 0x1, [0x10]}}) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3.909042977s ago: executing program 0 (id=292): rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x4]}, 0x0, 0x8) 3.908834689s ago: executing program 1 (id=293): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 2.381268585s ago: executing program 2 (id=294): prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0x0) 2.379156434s ago: executing program 3 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.325236349s ago: executing program 0 (id=296): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.150574044s ago: executing program 1 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r8, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 961.269809ms ago: executing program 0 (id=298): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 797.589003ms ago: executing program 3 (id=299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) 673.053911ms ago: executing program 2 (id=300): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 572.472602ms ago: executing program 4 (id=301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) sendmmsg$inet6(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)='^', 0x1}], 0x1}}], 0x1, 0x8045) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff3, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) sendto$inet6(r0, &(0x7f0000000280)="d4", 0x1, 0x4010, 0x0, 0x0) 426.653848ms ago: executing program 3 (id=302): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) writev(r0, &(0x7f0000000640), 0x0) 174.756362ms ago: executing program 4 (id=303): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x8, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4004af61, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0xdddd1000}) 0s ago: executing program 2 (id=304): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 84.635169][ T5822] cgroup: Unknown subsys name 'net' [ 84.884297][ T5822] cgroup: Unknown subsys name 'cpuset' [ 84.939802][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.935141][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.153630][ T1231] cfg80211: failed to load regulatory.db [ 91.571909][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.574920][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.579324][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.611564][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.612499][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.754236][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.757106][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.758252][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.785707][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.788018][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.792757][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.793074][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.794553][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.795741][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.796501][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.819930][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.821575][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.822308][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.823470][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.824222][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.971770][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.976697][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.978117][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.987457][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.988299][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.684184][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 93.073614][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 93.079535][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 93.097513][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 93.581024][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.582322][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.583376][ T5834] bridge_slave_0: entered allmulticast mode [ 93.585234][ T5834] bridge_slave_0: entered promiscuous mode [ 93.632012][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 93.657896][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.658012][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.658342][ T5834] bridge_slave_1: entered allmulticast mode [ 93.666241][ T5834] bridge_slave_1: entered promiscuous mode [ 93.710791][ T5154] Bluetooth: hci0: command tx timeout [ 93.869274][ T5842] Bluetooth: hci1: command tx timeout [ 93.869618][ T5154] Bluetooth: hci2: command tx timeout [ 93.949221][ T5154] Bluetooth: hci3: command tx timeout [ 94.029322][ T5154] Bluetooth: hci4: command tx timeout [ 94.297696][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.525139][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.526882][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.527018][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.527132][ T5839] bridge_slave_0: entered allmulticast mode [ 94.528803][ T5839] bridge_slave_0: entered promiscuous mode [ 94.533589][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.533728][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.534240][ T5838] bridge_slave_0: entered allmulticast mode [ 94.537057][ T5838] bridge_slave_0: entered promiscuous mode [ 94.571470][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.571613][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.572217][ T5840] bridge_slave_0: entered allmulticast mode [ 94.575152][ T5840] bridge_slave_0: entered promiscuous mode [ 94.682688][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.682851][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.683083][ T5839] bridge_slave_1: entered allmulticast mode [ 94.686377][ T5839] bridge_slave_1: entered promiscuous mode [ 94.688847][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.690323][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.690549][ T5838] bridge_slave_1: entered allmulticast mode [ 94.693481][ T5838] bridge_slave_1: entered promiscuous mode [ 94.709907][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.710052][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.710247][ T5840] bridge_slave_1: entered allmulticast mode [ 94.713069][ T5840] bridge_slave_1: entered promiscuous mode [ 95.204316][ T5834] team0: Port device team_slave_0 added [ 95.482537][ T5834] team0: Port device team_slave_1 added [ 95.486075][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.491995][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.498284][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.498525][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.509347][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.509635][ T5848] bridge_slave_0: entered allmulticast mode [ 95.512396][ T5848] bridge_slave_0: entered promiscuous mode [ 95.602536][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.605001][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.608082][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.608342][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.608460][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.608581][ T5848] bridge_slave_1: entered allmulticast mode [ 95.621422][ T5848] bridge_slave_1: entered promiscuous mode [ 95.789249][ T5154] Bluetooth: hci0: command tx timeout [ 95.949402][ T5842] Bluetooth: hci1: command tx timeout [ 95.949583][ T5154] Bluetooth: hci2: command tx timeout [ 96.029262][ T5154] Bluetooth: hci3: command tx timeout [ 96.033999][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.034016][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.034043][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.109368][ T5154] Bluetooth: hci4: command tx timeout [ 96.633064][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.633083][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.633111][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.636615][ T5839] team0: Port device team_slave_0 added [ 96.641655][ T5838] team0: Port device team_slave_0 added [ 96.645063][ T5840] team0: Port device team_slave_0 added [ 96.652357][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.668270][ T5839] team0: Port device team_slave_1 added [ 96.671754][ T5838] team0: Port device team_slave_1 added [ 96.674887][ T5840] team0: Port device team_slave_1 added [ 96.682276][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.470320][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.470338][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.470364][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.591454][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.591470][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.591485][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.592733][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.592747][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.592773][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.691665][ T5848] team0: Port device team_slave_0 added [ 97.693113][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.693127][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.693155][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.695154][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.695167][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.695193][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.697787][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.697802][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.697825][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.712813][ T5834] hsr_slave_0: entered promiscuous mode [ 97.714378][ T5834] hsr_slave_1: entered promiscuous mode [ 97.730756][ T5848] team0: Port device team_slave_1 added [ 97.869257][ T5154] Bluetooth: hci0: command tx timeout [ 98.029244][ T5154] Bluetooth: hci2: command tx timeout [ 98.029281][ T5154] Bluetooth: hci1: command tx timeout [ 98.109283][ T5842] Bluetooth: hci3: command tx timeout [ 98.152993][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.153011][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.153039][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.189588][ T5842] Bluetooth: hci4: command tx timeout [ 98.465125][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.465139][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.465153][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.582304][ T5839] hsr_slave_0: entered promiscuous mode [ 98.583944][ T5839] hsr_slave_1: entered promiscuous mode [ 98.584957][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 98.585028][ T5839] Cannot create hsr debugfs directory [ 98.688411][ T5838] hsr_slave_0: entered promiscuous mode [ 98.695710][ T5838] hsr_slave_1: entered promiscuous mode [ 98.696748][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 98.696774][ T5838] Cannot create hsr debugfs directory [ 98.779383][ T5840] hsr_slave_0: entered promiscuous mode [ 98.781348][ T5840] hsr_slave_1: entered promiscuous mode [ 98.782511][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 98.782537][ T5840] Cannot create hsr debugfs directory [ 99.295737][ T5848] hsr_slave_0: entered promiscuous mode [ 99.296701][ T5848] hsr_slave_1: entered promiscuous mode [ 99.297293][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 99.297315][ T5848] Cannot create hsr debugfs directory [ 99.949219][ T5842] Bluetooth: hci0: command tx timeout [ 100.109487][ T5842] Bluetooth: hci1: command tx timeout [ 100.109522][ T5842] Bluetooth: hci2: command tx timeout [ 100.189198][ T5154] Bluetooth: hci3: command tx timeout [ 100.279913][ T5154] Bluetooth: hci4: command tx timeout [ 100.641769][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.680098][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.723857][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.777292][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.930083][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.988741][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.018545][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.063342][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.245047][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.281030][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.314770][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.385081][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.564456][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.598820][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.669296][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.723627][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.896232][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.942056][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.992675][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.033872][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.089403][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.197286][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.265213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.266302][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.334107][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.342195][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.342359][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.490342][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.530577][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.576206][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.576459][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.646226][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.646376][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.736882][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.804846][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.813964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.814207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.894031][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.894266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.007000][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.077725][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.077842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.102236][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.180437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.180626][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.326089][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.396060][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.396298][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.478111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.478877][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.636995][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.154000][ T5834] veth0_vlan: entered promiscuous mode [ 104.162688][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.247114][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.250953][ T5834] veth1_vlan: entered promiscuous mode [ 104.521770][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.546563][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.550942][ T5839] veth0_vlan: entered promiscuous mode [ 104.565184][ T5834] veth0_macvtap: entered promiscuous mode [ 104.642158][ T5834] veth1_macvtap: entered promiscuous mode [ 104.687501][ T5838] veth0_vlan: entered promiscuous mode [ 104.690162][ T5839] veth1_vlan: entered promiscuous mode [ 104.763984][ T5838] veth1_vlan: entered promiscuous mode [ 104.802024][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.843109][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.959354][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.978039][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.015262][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.024612][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.025113][ T5848] veth0_vlan: entered promiscuous mode [ 105.028407][ T5839] veth0_macvtap: entered promiscuous mode [ 105.115659][ T5839] veth1_macvtap: entered promiscuous mode [ 105.198440][ T5848] veth1_vlan: entered promiscuous mode [ 105.224122][ T5838] veth0_macvtap: entered promiscuous mode [ 105.345127][ T5838] veth1_macvtap: entered promiscuous mode [ 105.394561][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.468490][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.485340][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.485364][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.547175][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.571992][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.606618][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.607851][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.639329][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.684277][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.684300][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.691419][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.746542][ T5848] veth0_macvtap: entered promiscuous mode [ 105.871300][ T5848] veth1_macvtap: entered promiscuous mode [ 105.875696][ T5840] veth0_vlan: entered promiscuous mode [ 105.876203][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.898322][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.913725][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.935720][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.109931][ T5840] veth1_vlan: entered promiscuous mode [ 106.171451][ T5952] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 106.171519][ T5952] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 106.171573][ T5952] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 106.171628][ T5952] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 106.171682][ T5952] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 106.171736][ T5952] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 106.171791][ T5952] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 106.171845][ T5952] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 106.171899][ T5952] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 106.171955][ T5952] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 106.172013][ T5952] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 106.172067][ T5952] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 106.172121][ T5952] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 106.172175][ T5952] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 106.172285][ T5952] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 106.172348][ T5952] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 106.172403][ T5952] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 106.172606][ T5952] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 106.172656][ T5952] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 106.172713][ T5952] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 106.172766][ T5952] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 106.172867][ T5952] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 106.172920][ T5952] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 106.408323][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.464387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.464408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.575976][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.689557][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.722579][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.725907][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.777260][ T1885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.777281][ T1885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.787240][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.975993][ T5840] veth0_macvtap: entered promiscuous mode [ 107.057148][ T5840] veth1_macvtap: entered promiscuous mode [ 107.059304][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.059325][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.190859][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.414973][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.484847][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.691272][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.691296][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.811797][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.820064][ T5969] Bluetooth: MGMT ver 1.23 [ 107.820599][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.820616][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.887813][ T3627] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.888235][ T3627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.992999][ T3627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.995300][ T3627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.271430][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.271454][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.719564][ T5923] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 109.766640][ T5977] syz.3.13 (5977) used greatest stack depth: 16280 bytes left [ 109.980844][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 109.980882][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 109.980907][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 110.024037][ T5982] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 5982 comm: syz.2.3) [ 110.063117][ T5923] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 110.063150][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.063169][ T5923] usb 2-1: Product: syz [ 110.063181][ T5923] usb 2-1: Manufacturer: syz [ 110.063195][ T5923] usb 2-1: SerialNumber: syz [ 110.083351][ T37] audit: type=1800 audit(1756078434.750:2): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=7906 res=0 errno=0 [ 110.197454][ T5923] usb 2-1: config 0 descriptor?? [ 110.217282][ T5971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.217784][ T5971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.608124][ T5923] usb 2-1: ucan: probing device on interface #0 [ 111.448888][ T5993] netlink: 'syz.2.16': attribute type 10 has an invalid length. [ 111.571870][ T5990] pim6reg: entered allmulticast mode [ 111.827954][ T5993] team0: Port device netdevsim0 added [ 111.989761][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.989784][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.001022][ T5923] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 112.197210][ T5923] usb 2-1: USB disconnect, device number 2 [ 112.227048][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 112.441603][ T6006] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 112.602272][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.602293][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.379533][ T6029] netlink: 300 bytes leftover after parsing attributes in process `syz.1.28'. [ 115.589223][ T6024] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 116.488135][ T37] audit: type=1326 audit(1756078441.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c3aebe9 code=0x7ffc0000 [ 116.488284][ T37] audit: type=1326 audit(1756078441.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c3aebe9 code=0x7ffc0000 [ 116.543341][ T37] audit: type=1326 audit(1756078441.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff18c3aebe9 code=0x7ffc0000 [ 116.546862][ T37] audit: type=1326 audit(1756078441.270:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c3aebe9 code=0x7ffc0000 [ 116.546917][ T37] audit: type=1326 audit(1756078441.270:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18c3aebe9 code=0x7ffc0000 [ 116.614304][ T6041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34'. [ 117.678149][ T6057] netlink: 'syz.1.41': attribute type 3 has an invalid length. [ 122.189870][ T6075] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 122.194931][ T6075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'. [ 122.199592][ T6082] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 122.199638][ T6082] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 122.199657][ T6082] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 122.510612][ T6087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 122.511172][ T6085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.50'. [ 122.825051][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.825902][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 122.902890][ T6098] overlayfs: missing 'lowerdir' [ 123.314027][ T37] audit: type=1326 audit(1756078448.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.4.52" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91ea9febe9 code=0x0 [ 125.267390][ T6126] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 125.267605][ T6126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.64'. [ 126.550836][ T6132] IPVS: starting estimator thread 0... [ 126.640320][ T6140] IPVS: using max 5 ests per chain, 12000 per kthread [ 127.046538][ T37] audit: type=1326 audit(1756078451.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6149 comm="syz.0.72" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53cb77ebe9 code=0x0 [ 127.440724][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 127.441226][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 128.240051][ T6163] overlayfs: missing 'lowerdir' [ 128.415016][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.517151][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.619262][ T6132] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.799118][ T6132] usb 1-1: Using ep0 maxpacket: 16 [ 129.810709][ T6132] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 129.810738][ T6132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.810756][ T6132] usb 1-1: Product: syz [ 129.810769][ T6132] usb 1-1: Manufacturer: syz [ 129.810783][ T6132] usb 1-1: SerialNumber: syz [ 129.897420][ T6132] usb 1-1: config 0 descriptor?? [ 129.966892][ T6132] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 130.309960][ T37] audit: type=1326 audit(1756078455.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.90" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18c3aebe9 code=0x0 [ 130.370707][ T6132] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 130.514204][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.539413][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.713453][ T1231] usb 1-1: USB disconnect, device number 2 [ 132.165628][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 132.166126][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 133.131247][ T6217] overlayfs: missing 'lowerdir' [ 133.296582][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.296694][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.301936][ T1231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.509778][ T1231] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.509813][ T1231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.526621][ T1231] usb 1-1: config 0 descriptor?? [ 133.584894][ T6230] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.584927][ T6230] overlayfs: failed to set xattr on upper [ 133.584937][ T6230] overlayfs: ...falling back to redirect_dir=nofollow. [ 133.584945][ T6230] overlayfs: ...falling back to index=off. [ 133.584952][ T6230] overlayfs: ...falling back to uuid=null. [ 133.584961][ T6230] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 133.675688][ T6235] netlink: 'syz.4.98': attribute type 10 has an invalid length. [ 133.696080][ T6232] pim6reg: entered allmulticast mode [ 133.787488][ T1231] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 133.843486][ T6235] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 133.843715][ T6235] team0: Failed to send options change via netlink (err -105) [ 133.843732][ T6235] team0: Port device netdevsim0 added [ 133.990098][ T1231] [drm:udl_init] *ERROR* Selecting channel failed [ 134.172531][ T1231] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 134.172560][ T1231] [drm] Initialized udl on minor 2 [ 134.214142][ T1231] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.215850][ T1231] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 134.239349][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.298388][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.298857][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 134.387385][ T1231] usb 1-1: USB disconnect, device number 3 [ 135.540932][ T37] audit: type=1326 audit(1756078460.270:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18c3aebe9 code=0x0 [ 140.206913][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 140.295512][ T6287] sctp: [Deprecated]: syz.2.117 (pid 6287) Use of int in max_burst socket option deprecated. [ 140.295512][ T6287] Use struct sctp_assoc_value instead [ 140.716904][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 141.643357][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 141.643396][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 141.643420][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 141.649167][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 141.649197][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.649216][ T9] usb 1-1: Product: syz [ 141.649229][ T9] usb 1-1: Manufacturer: syz [ 141.649242][ T9] usb 1-1: SerialNumber: syz [ 141.693270][ T9] usb 1-1: config 0 descriptor?? [ 141.694392][ T6293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.696730][ T6293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.723564][ T9] usb 1-1: ucan: probing device on interface #0 [ 141.989150][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.381888][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 142.389689][ T31] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 142.389716][ T31] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 142.389735][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 142.389755][ T31] usb 4-1: config 1 has no interface number 0 [ 142.389806][ T31] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.389834][ T31] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 142.389877][ T31] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 142.389900][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.012758][ T9] usb 1-1: ucan: failed to retrieve device info [ 143.012786][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 143.336270][ T31] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 143.381348][ T5947] usb 1-1: USB disconnect, device number 4 [ 143.541898][ T37] audit: type=1326 audit(1756078468.333:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6314 comm="syz.2.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa72b89ebe9 code=0x0 [ 143.603903][ T31] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 144.594546][ T31] usb 4-1: USB disconnect, device number 2 [ 144.602771][ T31] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 144.724443][ T6332] Zero length message leads to an empty skb [ 145.812671][ T6342] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 145.812724][ T6342] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 147.249224][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 147.412185][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 147.412223][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 147.412250][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 147.417372][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 147.417400][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.417420][ T9] usb 3-1: Product: syz [ 147.417434][ T9] usb 3-1: Manufacturer: syz [ 147.417449][ T9] usb 3-1: SerialNumber: syz [ 148.791505][ T9] usb 3-1: config 0 descriptor?? [ 148.794103][ T6355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.794316][ T6355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.833374][ T9] usb 3-1: ucan: probing device on interface #0 [ 149.089185][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.139147][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 150.144318][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.144419][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.144442][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.144487][ T5902] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.144511][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.294888][ T5902] usb 4-1: config 0 descriptor?? [ 150.428836][ T9] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 150.532182][ T9] usb 3-1: USB disconnect, device number 2 [ 150.740051][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740097][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740122][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740147][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740172][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740196][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740221][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740245][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740269][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.740293][ T5902] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 150.772065][ T6380] overlayfs: failed to resolve './file1': -2 [ 150.923134][ T5902] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5 [ 150.977770][ T5902] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 151.000118][ T5902] usb 4-1: USB disconnect, device number 3 [ 154.017409][ T6428] fido_id[6428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 154.613132][ T6449] overlayfs: failed to resolve './file1': -2 [ 157.959100][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.056270][ T37] audit: type=1326 audit(1756078482.843:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6485 comm="syz.2.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa72b89ebe9 code=0x0 [ 158.129201][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 158.134285][ T5844] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.134321][ T5844] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.159899][ T5844] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 158.159927][ T5844] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 158.159946][ T5844] usb 2-1: Product: syz [ 158.159958][ T5844] usb 2-1: Manufacturer: syz [ 158.159971][ T5844] usb 2-1: SerialNumber: syz [ 158.194333][ T5844] usb 2-1: config 0 descriptor?? [ 158.232889][ T5844] gs_usb 2-1:0.0: Required endpoints not found [ 158.430461][ T5902] usb 2-1: USB disconnect, device number 3 [ 158.668315][ T37] audit: type=1326 audit(1756078483.453:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.668765][ T37] audit: type=1326 audit(1756078483.453:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.713209][ T37] audit: type=1326 audit(1756078483.453:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.714047][ T37] audit: type=1326 audit(1756078483.503:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.714500][ T37] audit: type=1326 audit(1756078483.503:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.714822][ T37] audit: type=1326 audit(1756078483.503:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.716214][ T37] audit: type=1326 audit(1756078483.503:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.716497][ T37] audit: type=1326 audit(1756078483.503:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 158.716954][ T37] audit: type=1326 audit(1756078483.503:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6497 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x7ffc0000 [ 161.819902][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 164.035197][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 164.035219][ T37] audit: type=1326 audit(1756078488.823:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6534 comm="syz.3.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f390efcebe9 code=0x0 [ 164.639187][ T5915] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 164.729317][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.883043][ T9] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.883082][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.883142][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.883188][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 164.883211][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.972480][ T6550] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.053963][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 165.054002][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 165.054028][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 165.062836][ T5915] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 165.062864][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.062882][ T5915] usb 5-1: Product: syz [ 165.062895][ T5915] usb 5-1: Manufacturer: syz [ 165.062907][ T5915] usb 5-1: SerialNumber: syz [ 166.155406][ T5915] usb 5-1: config 0 descriptor?? [ 166.156633][ T6547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.156934][ T6547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.170540][ T5915] usb 5-1: ucan: probing device on interface #0 [ 166.750629][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 166.797656][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 166.824810][ T5915] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 167.239561][ T5915] usb 5-1: USB disconnect, device number 2 [ 168.565229][ T9] usb 1-1: USB disconnect, device number 5 [ 168.565322][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 168.909148][ T6370] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 169.070498][ T6370] usb 3-1: Using ep0 maxpacket: 32 [ 169.073616][ T6370] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.073647][ T6370] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.103522][ T6370] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 169.103553][ T6370] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 169.103574][ T6370] usb 3-1: Product: syz [ 169.103588][ T6370] usb 3-1: Manufacturer: syz [ 169.103603][ T6370] usb 3-1: SerialNumber: syz [ 169.524265][ T6370] usb 3-1: config 0 descriptor?? [ 169.555577][ T6370] gs_usb 3-1:0.0: Required endpoints not found [ 170.849632][ T6370] usb 3-1: USB disconnect, device number 3 [ 171.791940][ T6612] netlink: 'syz.2.233': attribute type 10 has an invalid length. [ 172.072539][ T6621] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 174.099135][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 174.195083][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.244'. [ 174.195708][ T6639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.244'. [ 174.468601][ T6646] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 174.563064][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 174.565865][ T5915] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.565893][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.570227][ T5915] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 174.570256][ T5915] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 174.570275][ T5915] usb 1-1: Product: syz [ 174.570288][ T5915] usb 1-1: Manufacturer: syz [ 174.570302][ T5915] usb 1-1: SerialNumber: syz [ 175.463576][ T6651] overlayfs: failed to resolve './file0': -2 [ 175.571630][ T5915] usb 1-1: config 0 descriptor?? [ 175.582193][ T5915] gs_usb 1-1:0.0: Required endpoints not found [ 175.822517][ T5915] usb 1-1: USB disconnect, device number 6 [ 180.637512][ T6689] netlink: 60 bytes leftover after parsing attributes in process `syz.3.258'. [ 180.638109][ T6682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.258'. [ 183.553382][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.799241][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 185.818300][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.818336][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.818359][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.818403][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.818426][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.928785][ T45] usb 2-1: config 0 descriptor?? [ 186.106016][ T45] usb 2-1: can't set config #0, error -71 [ 186.134056][ T45] usb 2-1: USB disconnect, device number 4 [ 186.211498][ T6729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.273'. [ 186.212031][ T6725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.273'. [ 186.510609][ T6735] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 191.449342][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.599464][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 191.604604][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.604640][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.604661][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.604705][ T5869] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.604729][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.757881][ T5869] usb 5-1: config 0 descriptor?? [ 193.150203][ T5869] hid_parser_main: 5 callbacks suppressed [ 193.150231][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150259][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150284][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150324][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150349][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150374][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150399][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150423][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150448][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.150472][ T5869] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 193.284060][ T5869] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input7 [ 193.316153][ T5869] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 193.519176][ T31] usb 5-1: USB disconnect, device number 3 [ 194.421786][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 194.532467][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 194.676861][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.676937][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.930659][ T6808] fido_id[6808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 195.017785][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 196.294156][ C1] ------------[ cut here ]------------ [ 196.294173][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 196.294213][ C1] Modules linked in: [ 196.294234][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.294259][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.294271][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 196.294294][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 196.294312][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 196.294331][ C1] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801caf1dc0 [ 196.294347][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 196.294360][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 196.294375][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000005 [ 196.294389][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888035c3f068 [ 196.294403][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 196.294422][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.294438][ C1] CR2: 0000001b31723ffc CR3: 00000000216c0000 CR4: 00000000003526f0 [ 196.294460][ C1] Call Trace: [ 196.294469][ C1] [ 196.294498][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.294539][ C1] call_timer_fn+0x17b/0x5f0 [ 196.294567][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.294589][ C1] ? call_timer_fn+0xbe/0x5f0 [ 196.294617][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 196.294658][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.294685][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.294710][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.294736][ C1] __run_timer_base+0x648/0x970 [ 196.294784][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 196.294834][ C1] run_timer_softirq+0xb7/0x180 [ 196.294861][ C1] handle_softirqs+0x22c/0x710 [ 196.294903][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 196.294954][ C1] run_ktimerd+0xcf/0x190 [ 196.294983][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 196.295009][ C1] ? schedule+0x91/0x360 [ 196.295045][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 196.295070][ C1] smpboot_thread_fn+0x542/0xa60 [ 196.295099][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 196.295138][ C1] kthread+0x711/0x8a0 [ 196.295175][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 196.295201][ C1] ? __pfx_kthread+0x10/0x10 [ 196.295240][ C1] ? __pfx_kthread+0x10/0x10 [ 196.295273][ C1] ret_from_fork+0x3fc/0x770 [ 196.295306][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 196.295342][ C1] ? __switch_to_asm+0x39/0x70 [ 196.295363][ C1] ? __switch_to_asm+0x33/0x70 [ 196.295381][ C1] ? __pfx_kthread+0x10/0x10 [ 196.295415][ C1] ret_from_fork_asm+0x1a/0x30 [ 196.295458][ C1] [ 196.295475][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.295490][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.295513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.295525][ C1] Call Trace: [ 196.295534][ C1] [ 196.295543][ C1] dump_stack_lvl+0x99/0x250 [ 196.295575][ C1] ? __asan_memcpy+0x40/0x70 [ 196.295600][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.295631][ C1] ? __pfx__printk+0x10/0x10 [ 196.295672][ C1] vpanic+0x281/0x750 [ 196.295704][ C1] ? __pfx__printk+0x10/0x10 [ 196.295727][ C1] ? __pfx_vpanic+0x10/0x10 [ 196.295758][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 196.295803][ C1] panic+0xb9/0xc0 [ 196.295834][ C1] ? __pfx_panic+0x10/0x10 [ 196.295885][ C1] __warn+0x31b/0x4b0 [ 196.295921][ C1] ? est_timer+0x6dc/0x9f0 [ 196.295947][ C1] ? est_timer+0x6dc/0x9f0 [ 196.295970][ C1] report_bug+0x2be/0x4f0 [ 196.295995][ C1] ? est_timer+0x6dc/0x9f0 [ 196.296018][ C1] ? est_timer+0x6dc/0x9f0 [ 196.296041][ C1] ? est_timer+0x6de/0x9f0 [ 196.296063][ C1] handle_bug+0x84/0x160 [ 196.296095][ C1] exc_invalid_op+0x1a/0x50 [ 196.296126][ C1] asm_exc_invalid_op+0x1a/0x20 [ 196.296146][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 196.296169][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 196.296185][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 196.296204][ C1] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801caf1dc0 [ 196.296219][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 196.296232][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 196.296246][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000005 [ 196.296261][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888035c3f068 [ 196.296286][ C1] ? est_timer+0x6db/0x9f0 [ 196.296336][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.296375][ C1] call_timer_fn+0x17b/0x5f0 [ 196.296402][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.296424][ C1] ? call_timer_fn+0xbe/0x5f0 [ 196.296451][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 196.296492][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.296518][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.296543][ C1] ? __pfx_est_timer+0x10/0x10 [ 196.296569][ C1] __run_timer_base+0x648/0x970 [ 196.296617][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 196.296665][ C1] run_timer_softirq+0xb7/0x180 [ 196.296692][ C1] handle_softirqs+0x22c/0x710 [ 196.296733][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 196.296775][ C1] run_ktimerd+0xcf/0x190 [ 196.296805][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 196.296832][ C1] ? schedule+0x91/0x360 [ 196.296868][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 196.296893][ C1] smpboot_thread_fn+0x542/0xa60 [ 196.296931][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 196.296970][ C1] kthread+0x711/0x8a0 [ 196.297006][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 196.297032][ C1] ? __pfx_kthread+0x10/0x10 [ 196.297071][ C1] ? __pfx_kthread+0x10/0x10 [ 196.297103][ C1] ret_from_fork+0x3fc/0x770 [ 196.297135][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 196.297172][ C1] ? __switch_to_asm+0x39/0x70 [ 196.297190][ C1] ? __switch_to_asm+0x33/0x70 [ 196.297210][ C1] ? __pfx_kthread+0x10/0x10 [ 196.297243][ C1] ret_from_fork_asm+0x1a/0x30 [ 196.297286][ C1] [ 196.297612][ C1] Kernel Offset: disabled