last executing test programs: 2m47.180670245s ago: executing program 1 (id=235): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_io_uring_setup(0x3508, &(0x7f0000000240)={0x0, 0xcb74, 0x400, 0x4003, 0x89, 0x0, r0}, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2m46.963180482s ago: executing program 1 (id=239): r0 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x3}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x758}, 0xe) 2m46.117655339s ago: executing program 1 (id=245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x6, 0x10000000) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)=ANY=[], 0x0) 2m41.034172467s ago: executing program 1 (id=260): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2m39.44161153s ago: executing program 1 (id=266): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3517, 0x93c7, 0x42, 0x0, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000002fc0)='1', 0x1) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 2m38.348011456s ago: executing program 1 (id=271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4c0, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r7, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x75e7f000) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) 2m23.137114798s ago: executing program 32 (id=271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4c0, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r7, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x75e7f000) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) 6.130913654s ago: executing program 0 (id=1113): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) 5.825772817s ago: executing program 0 (id=1117): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x440, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x3ec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x3b0, 0x1, [@m_simple={0xa0, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '!_\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x5}}, @TCA_DEF_DATA={0x7, 0x3, '#/\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0x10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x10c, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x80, 0x5, 0x6, 0x3}}]}, {0xc5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2bc46895b3232929964907b2fcec2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90dc3f5fa19aa4"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x104, 0x2, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaa6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x1, 0x3, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1032, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xef7, 0x4, 0x2, 0x5, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0xb8, 0x4, 0x5, 0xb}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x6, 0xdf9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x61ca, 0x1, 0x1, 0xd1a}}]}, {0x45, 0x6, "65043db23614b2c5fe6d4d2637153bef7fcb38ba2040f5376fbbf34046602d42485015244ee993e7d633adcdf4954d21ec98f6d52e84490da7b9bcfe6bbf5f225b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xfc, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0xc9, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b45311b3eceeeb16cae2bfd77942d880d60c94991d896d67e1bf08b6ace5ba70ca5035668dfb4a725515d32b5a22a556f44e2b89730fe1a6221a70915b9bb25a23fd56b076c247e9e184eb4980fc772ce669d90a37e3bc81abb7f8109cf546a0bad7edec29176f5ad026bb5c011ec1e98fd9327bd98ce49db71100caf7d4a691394bef2ae5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x440}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.707951997s ago: executing program 0 (id=1118): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_read(r2, 0x4, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r1) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r3, 0x0, 0x0) 2.121310201s ago: executing program 5 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r1, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) 2.036984914s ago: executing program 5 (id=1156): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.036636733s ago: executing program 2 (id=1157): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) personality(0x400000d) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 2.019888339s ago: executing program 5 (id=1159): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1.941597201s ago: executing program 2 (id=1161): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3517, 0x93c7, 0x42, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 1.783859692s ago: executing program 4 (id=1163): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000002c0)="fc405593c572ae34910b3f", 0xb}], 0x2}, 0x0) 1.558683267s ago: executing program 0 (id=1165): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x2, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xf, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x6, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0x2, 0x4, 0x1000008, 0x18, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x5, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30f, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x5, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x3, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x4, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xd, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x0, 0x5, 0xfff, 0x800003, 0x200, 0x80, 0x3, 0x166c, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x8005, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffc, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x2, 0x57, 0x2, 0x3, 0x101, 0x10000, 0x5, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x4a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="f80100001900010000000000fbdbdf25fc000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f8}}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000013c4c20c215dcff1ba40102030109024000010200000009049d00001f988e000a240102000102010207240400058e910924030601030504050724050657c7cc09240302020305010205240404d9"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.369056062s ago: executing program 3 (id=1167): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x1, 0x0, 0x10, 0xc708}}) 1.368628265s ago: executing program 3 (id=1168): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) ptrace(0x420e, r6) fcntl$lock(r4, 0x25, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.312326518s ago: executing program 4 (id=1169): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.232242529s ago: executing program 3 (id=1170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x14, 0x5, {0xa, 0x1, 0x8, 0x8, 0x6, 0x6, 0x8, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.1330598s ago: executing program 4 (id=1171): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) 1.046514228s ago: executing program 5 (id=1172): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4b0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x3ec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x3b0, 0x1, [@m_simple={0xa0, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '!_\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x3, 0x20000000, 0x7f7, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x5}}, @TCA_DEF_DATA={0x7, 0x3, '#/\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0x10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x10c, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x80, 0x5, 0x6, 0x3}}]}, {0xc5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2bc46895b3232929964907b2fcec2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90dc3f5fa19aa4"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x104, 0x2, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaa6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x1, 0x3, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1032, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0xef7, 0x4, 0x2, 0x5, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0xb8, 0x4, 0x5, 0xb}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x6, 0xdf9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x61ca, 0x1, 0x1, 0xd1a}}]}, {0x45, 0x6, "65043db23614b2c5fe6d4d2637153bef7fcb38ba2040f5376fbbf34046602d42485015244ee993e7d633adcdf4954d21ec98f6d52e84490da7b9bcfe6bbf5f225b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xfc, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0xc9, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b45311b3eceeeb16cae2bfd77942d880d60c94991d896d67e1bf08b6ace5ba70ca5035668dfb4a725515d32b5a22a556f44e2b89730fe1a6221a70915b9bb25a23fd56b076c247e9e184eb4980fc772ce669d90a37e3bc81abb7f8109cf546a0bad7edec29176f5ad026bb5c011ec1e98fd9327bd98ce49db71100caf7d4a691394bef2ae5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x74, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_mirred={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "b9e6cb743efb5818279b291a7d56a99d728d0d3c5750442cdd89714a7135052ff6aa167b6d47ccb820"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.042592072s ago: executing program 2 (id=1173): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x208}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.042302841s ago: executing program 4 (id=1174): socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) listen(0xffffffffffffffff, 0x6) 953.508081ms ago: executing program 3 (id=1175): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c000380"], 0x8c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 952.499625ms ago: executing program 2 (id=1176): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x1507, 0x400700) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 903.715639ms ago: executing program 3 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x3, 0xb55, 0x9, 0x2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002600010a00000000000000000a0000001400dd80100067800c003f001000000000000000571794cf5e2a3b451513d474689161ecc3763bfaa399d0142c9f8623c4e80c2eb73c997c68164d90cf09c57566926da811b5565faaa9bd37607b5c886dd990d71c1aee56ef0a2b860721f35931c21c39f93bda5562ac1203f1dc3e140e4f75d52d1506cca0bea2d14f6c8a0eaa6f9832c3ed6dbea2bd3faa1573a23cf9013997ff500def54e58c162004328156d560eef740c362169b2947f37a67a4a84a74e575c080ac1eab00c4a1bc2e0cd34397505e4e849fa29f5348a9a37972c789173ddd0c000000000000"], 0x28}}, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000001440)={@local, @empty, 0x0, "513cd4cc40ac7f23c0709a177674ed0af53959b350f13ba74439c35a52e4b81c", 0x4, 0x3, 0x100, 0x5}, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x36) 903.076656ms ago: executing program 4 (id=1178): r0 = syz_io_uring_setup(0x40b5, &(0x7f0000000140)={0x0, 0x0, 0x10000, 0x2, 0xfffffffe}, &(0x7f00000001c0), &(0x7f00000005c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) 902.144536ms ago: executing program 5 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r1, 0x507}, 0x14}}, 0x0) 869.35817ms ago: executing program 2 (id=1180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[], 0x138}}, 0x4000000) 752.876104ms ago: executing program 4 (id=1181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf2507000000080001006b00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e3831000000000001090224000100000000090400000103000000332100000001220500090581030000000000"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 693.928138ms ago: executing program 2 (id=1182): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 587.576294ms ago: executing program 5 (id=1183): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = shmget$private(0x0, 0x800000, 0x54000000, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3517, 0x93c7, 0x42, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 137.017549ms ago: executing program 0 (id=1184): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 80.001506ms ago: executing program 0 (id=1185): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 0s ago: executing program 3 (id=1186): timer_create(0x1, &(0x7f0000000400)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="8500000001000000660000000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 41.812702][ T6481] cgroup: Unknown subsys name 'net' [ 42.073706][ T6481] cgroup: Unknown subsys name 'cpuset' [ 42.077648][ T6481] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.392157][ T6481] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 43.917080][ T6502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.921567][ T6504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.922455][ T6504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.922806][ T6504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.923327][ T6504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.924096][ T6504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 43.924451][ T6504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.924802][ T6504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.925167][ T6504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.925671][ T6504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.926133][ T6504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.926400][ T6504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.926656][ T6504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.927793][ T6504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 43.929041][ T6504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.929280][ T6504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.929567][ T6504] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.929822][ T6504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.930565][ T6504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 43.932517][ T6504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.932795][ T6504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.933030][ T6504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.933305][ T6504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.945505][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 43.951647][ T6499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 44.264046][ T6496] chnl_net:caif_netlink_parms(): no params data found [ 44.317372][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 44.476550][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.478782][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.480108][ T6496] bridge_slave_0: entered allmulticast mode [ 44.481660][ T6496] bridge_slave_0: entered promiscuous mode [ 44.483820][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.483869][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.484001][ T6496] bridge_slave_1: entered allmulticast mode [ 44.484819][ T6496] bridge_slave_1: entered promiscuous mode [ 44.500328][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 44.507400][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.507480][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.507618][ T6491] bridge_slave_0: entered allmulticast mode [ 44.508432][ T6491] bridge_slave_0: entered promiscuous mode [ 44.510642][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.510707][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.510849][ T6491] bridge_slave_1: entered allmulticast mode [ 44.511655][ T6491] bridge_slave_1: entered promiscuous mode [ 44.554304][ T6496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.567963][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.583636][ T6496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.599194][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.599463][ T6497] chnl_net:caif_netlink_parms(): no params data found [ 44.623014][ T6496] team0: Port device team_slave_0 added [ 44.624555][ T6496] team0: Port device team_slave_1 added [ 44.657216][ T6491] team0: Port device team_slave_0 added [ 44.668548][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.668618][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.668647][ T6496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.692662][ T6491] team0: Port device team_slave_1 added [ 44.700801][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 44.703451][ T6496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.703479][ T6496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.703508][ T6496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.766534][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.766611][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.766640][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.767871][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.767897][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.767925][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.797100][ T6496] hsr_slave_0: entered promiscuous mode [ 44.799457][ T6496] hsr_slave_1: entered promiscuous mode [ 44.805186][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.805290][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.805428][ T6500] bridge_slave_0: entered allmulticast mode [ 44.806306][ T6500] bridge_slave_0: entered promiscuous mode [ 44.807861][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.807911][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.808053][ T6500] bridge_slave_1: entered allmulticast mode [ 44.808937][ T6500] bridge_slave_1: entered promiscuous mode [ 44.824100][ T6491] hsr_slave_0: entered promiscuous mode [ 44.824687][ T6491] hsr_slave_1: entered promiscuous mode [ 44.825074][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.825157][ T6491] Cannot create hsr debugfs directory [ 44.874637][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.877028][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.912795][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.912909][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.913015][ T6497] bridge_slave_0: entered allmulticast mode [ 44.913846][ T6497] bridge_slave_0: entered promiscuous mode [ 44.915331][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.915377][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.915505][ T6497] bridge_slave_1: entered allmulticast mode [ 44.916337][ T6497] bridge_slave_1: entered promiscuous mode [ 44.929679][ T6500] team0: Port device team_slave_0 added [ 44.932452][ T6500] team0: Port device team_slave_1 added [ 44.993557][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.994696][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.994724][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.994752][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.996429][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.996456][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.996484][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.996937][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.996981][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.997090][ T6492] bridge_slave_0: entered allmulticast mode [ 44.998023][ T6492] bridge_slave_0: entered promiscuous mode [ 44.999551][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.999612][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.999747][ T6492] bridge_slave_1: entered allmulticast mode [ 45.007343][ T6492] bridge_slave_1: entered promiscuous mode [ 45.013841][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.059376][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.088383][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.104553][ T6497] team0: Port device team_slave_0 added [ 45.145825][ T6497] team0: Port device team_slave_1 added [ 45.148490][ T6500] hsr_slave_0: entered promiscuous mode [ 45.149445][ T6500] hsr_slave_1: entered promiscuous mode [ 45.150139][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.150439][ T6500] Cannot create hsr debugfs directory [ 45.153090][ T6492] team0: Port device team_slave_0 added [ 45.195219][ T6492] team0: Port device team_slave_1 added [ 45.208648][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.209676][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.209706][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.211095][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.211121][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.211149][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.271342][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.271401][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.271429][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.272597][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.272625][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.272652][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.305503][ T6492] hsr_slave_0: entered promiscuous mode [ 45.307607][ T6492] hsr_slave_1: entered promiscuous mode [ 45.308341][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.308374][ T6492] Cannot create hsr debugfs directory [ 45.364700][ T6497] hsr_slave_0: entered promiscuous mode [ 45.365283][ T6497] hsr_slave_1: entered promiscuous mode [ 45.365587][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.365630][ T6497] Cannot create hsr debugfs directory [ 45.434216][ T6491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.440102][ T6491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.446498][ T6491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.476092][ T6491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.563773][ T6496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.582374][ T6496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.589035][ T6496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.594971][ T6496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.634045][ T6500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.641448][ T6500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.646682][ T6500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.667887][ T6500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.695272][ T6497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.706016][ T6497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.710227][ T6497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.713035][ T6497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.777224][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.796476][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.805618][ T6492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.809542][ T6492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.826235][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.829361][ T6492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.833210][ T6492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.842509][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.842650][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.861179][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.861272][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.874449][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.894254][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.897567][ T6496] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.916978][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.917062][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.918102][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.918147][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.932781][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.932873][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.947326][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.947414][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.967458][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.979371][ T6496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.979452][ T6496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.019579][ T6497] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.022756][ T6502] Bluetooth: hci0: command tx timeout [ 46.022839][ T55] Bluetooth: hci3: command tx timeout [ 46.022921][ T6502] Bluetooth: hci1: command tx timeout [ 46.031305][ T6499] Bluetooth: hci4: command tx timeout [ 46.031458][ T6499] Bluetooth: hci2: command tx timeout [ 46.044409][ T6500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.044482][ T6500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.058641][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.082575][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.082671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.107204][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.168540][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.168637][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.169551][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.169623][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.209539][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.209634][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.247644][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.271383][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.298023][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.338209][ T6496] veth0_vlan: entered promiscuous mode [ 46.369163][ T6496] veth1_vlan: entered promiscuous mode [ 46.387686][ T6496] veth0_macvtap: entered promiscuous mode [ 46.397145][ T6496] veth1_macvtap: entered promiscuous mode [ 46.419282][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.425419][ T6491] veth0_vlan: entered promiscuous mode [ 46.443865][ T6500] veth0_vlan: entered promiscuous mode [ 46.454217][ T6491] veth1_vlan: entered promiscuous mode [ 46.457835][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.468240][ T6500] veth1_vlan: entered promiscuous mode [ 46.488868][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.494806][ T6497] veth0_vlan: entered promiscuous mode [ 46.506583][ T6500] veth0_macvtap: entered promiscuous mode [ 46.512345][ T6500] veth1_macvtap: entered promiscuous mode [ 46.513715][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.516080][ T6496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.516382][ T6496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.516600][ T6496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.516912][ T6496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.533978][ T6491] veth0_macvtap: entered promiscuous mode [ 46.536103][ T6491] veth1_macvtap: entered promiscuous mode [ 46.563808][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.567084][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.571536][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.574755][ T6497] veth1_vlan: entered promiscuous mode [ 46.586571][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.589610][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.592674][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.595518][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.599194][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.616296][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.619117][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.619765][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.621931][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.621962][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.621982][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.622003][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.622650][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.624181][ T6500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.624221][ T6500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.624251][ T6500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.624281][ T6500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.644256][ T6491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.644302][ T6491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.644333][ T6491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.644363][ T6491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.699132][ T6497] veth0_macvtap: entered promiscuous mode [ 46.706562][ T6497] veth1_macvtap: entered promiscuous mode [ 46.718627][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.721959][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.724868][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.727855][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.731942][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.732007][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.733081][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.783746][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.783810][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.783831][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.783852][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.783872][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.783892][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.784550][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.797556][ T6497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.797617][ T6497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.797651][ T6497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.797684][ T6497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.811011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.811069][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.828894][ T6492] veth0_vlan: entered promiscuous mode [ 46.843626][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.843742][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.895172][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.895244][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.904578][ T6492] veth1_vlan: entered promiscuous mode [ 46.919791][ T6492] veth0_macvtap: entered promiscuous mode [ 46.924868][ T6492] veth1_macvtap: entered promiscuous mode [ 46.936119][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.939306][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.942516][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.946055][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.946312][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.946336][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.946360][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.946381][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.947228][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.961577][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.961629][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.979448][ T289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.979517][ T289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.994497][ T6491] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.996180][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.996231][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.996272][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.996300][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.996326][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.996352][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.996378][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.996404][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.998677][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.021115][ T6492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.021162][ T6492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.021193][ T6492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.021223][ T6492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.069475][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.069546][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.116275][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.116329][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.270193][ T6502] Bluetooth: hci1: command tx timeout [ 48.270275][ T6502] Bluetooth: hci2: command tx timeout [ 48.270328][ T6502] Bluetooth: hci4: command tx timeout [ 48.270370][ T6502] Bluetooth: hci3: command tx timeout [ 48.270410][ T6502] Bluetooth: hci0: command tx timeout [ 48.712909][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.718731][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.718762][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.723318][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.503449][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.503523][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.127983][ T6602] lo speed is unknown, defaulting to 1000 [ 50.128406][ T6602] lo speed is unknown, defaulting to 1000 [ 50.135266][ T6602] lo speed is unknown, defaulting to 1000 [ 50.145995][ T6602] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.167642][ T6602] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.341640][ T6502] Bluetooth: hci3: command tx timeout [ 50.341963][ T6502] Bluetooth: hci4: command tx timeout [ 50.342311][ T6502] Bluetooth: hci2: command tx timeout [ 50.342649][ T6502] Bluetooth: hci1: command tx timeout [ 50.343894][ T6499] Bluetooth: hci0: command tx timeout [ 50.548660][ T6602] lo speed is unknown, defaulting to 1000 [ 50.556210][ T6602] lo speed is unknown, defaulting to 1000 [ 50.566445][ T6602] lo speed is unknown, defaulting to 1000 [ 50.577135][ T6602] lo speed is unknown, defaulting to 1000 [ 50.580454][ T6602] lo speed is unknown, defaulting to 1000 [ 50.733274][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.748697][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.721280][ T6616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 52.341004][ T6618] netfs: Couldn't get user pages (rc=-14) [ 52.421446][ T6499] Bluetooth: hci0: command tx timeout [ 52.421529][ T6499] Bluetooth: hci1: command tx timeout [ 52.421583][ T6499] Bluetooth: hci2: command tx timeout [ 52.421631][ T6499] Bluetooth: hci4: command tx timeout [ 52.421674][ T6499] Bluetooth: hci3: command tx timeout [ 54.770831][ T6632] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 54.773938][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10'. [ 54.838763][ T6639] CUSE: unknown device info "ÿ" [ 54.850310][ T6639] CUSE: zero length info key specified [ 54.920802][ T6632] team0: Port device geneve0 added [ 56.243141][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 58.334844][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.335108][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.367957][ T6702] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.187436][ T6702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.193439][ T6702] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.275780][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.555347][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 60.205939][ T6721] Bluetooth: MGMT ver 1.23 [ 60.236689][ T6725] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.41'. [ 60.340842][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.345166][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.368402][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.373312][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.458088][ T6737] binder: BINDER_SET_CONTEXT_MGR already set [ 60.458183][ T6737] binder: 6731:6737 ioctl 4018620d 20000040 returned -16 [ 60.458500][ T6737] binder: 6731:6737 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 60.458539][ T6737] binder: 6737 RLIMIT_NICE not set [ 60.458564][ T6737] binder: 6731:6737 ioctl c0306201 20000240 returned -11 [ 60.458820][ T6737] binder: 6731:6737 ioctl c0306201 0 returned -14 [ 60.465182][ T6737] binder: 6731:6737 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 60.917485][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 60.952667][ T6741] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 60.952748][ T6741] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.953282][ T6741] vhci_hcd vhci_hcd.0: Device attached [ 60.985980][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.989164][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.400177][ T11] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 63.827696][ T6756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 64.057476][ T6742] vhci_hcd: connection reset by peer [ 64.062494][ T6588] vhci_hcd: stop threads [ 64.062840][ T6588] vhci_hcd: release socket [ 64.063156][ T6588] vhci_hcd: disconnect device [ 64.180653][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.183257][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.754997][ T2389] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.755165][ T2389] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.002350][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 67.217183][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.217430][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.459508][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 67.472491][ T6544] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.568403][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.568685][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.615268][ T6837] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 67.615340][ T6837] netlink: 'syz.4.84': attribute type 4 has an invalid length. [ 67.615363][ T6837] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.84'. [ 67.622664][ T6544] usb 1-1: Using ep0 maxpacket: 8 [ 67.635001][ T6544] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 67.635104][ T6544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.635149][ T6544] usb 1-1: Product: syz [ 67.635178][ T6544] usb 1-1: Manufacturer: syz [ 67.635206][ T6544] usb 1-1: SerialNumber: syz [ 67.647764][ T6544] usb 1-1: config 0 descriptor?? [ 67.660663][ T6544] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 67.664124][ T6544] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 67.923757][ T6544] usb 1-1: USB disconnect, device number 2 [ 68.109203][ T55] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 68.127099][ T6798] sp0: Synchronizing with TNC [ 69.010291][ T11] vhci_hcd: vhci_device speed not set [ 69.274959][ T6853] netlink: 'syz.4.88': attribute type 4 has an invalid length. [ 69.497184][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 69.552736][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 69.727923][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 69.898271][ T3887] cfg80211: failed to load regulatory.db [ 70.777255][ T6886] siw: device registration error -23 [ 72.402860][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.405702][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.541516][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.550532][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.122704][ T6931] vlan2: entered allmulticast mode [ 74.122795][ T6931] vlan1: entered allmulticast mode [ 74.122884][ T6931] veth0_vlan: entered allmulticast mode [ 74.751590][ T6933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.929213][ T6939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.948711][ T6939] Zero length message leads to an empty skb [ 75.679717][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 76.398859][ T6959] can0: slcan on ptm0. [ 76.903724][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.903974][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.935531][ T6965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.125837][ T6947] can0 (unregistered): slcan off ptm0. [ 78.679580][ T6983] netlink: 'syz.2.133': attribute type 10 has an invalid length. [ 79.501026][ T6989] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 79.573714][ T6499] Bluetooth: hci4: Malformed Event: 0x2f [ 79.749002][ T7000] vlan2: entered allmulticast mode [ 79.761788][ T7000] vlan1: entered allmulticast mode [ 79.763305][ T7000] veth0_vlan: entered allmulticast mode [ 79.864346][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 79.912340][ T7012] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 80.030231][ T55] Bluetooth: hci3: command tx timeout [ 80.034209][ T7012] bond1: (slave gretap1): making interface the new active one [ 80.042082][ T7012] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 80.866957][ T7025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.451338][ T7038] netlink: 44 bytes leftover after parsing attributes in process `syz.4.151'. [ 82.247587][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.262724][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.600093][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 84.120457][ T7068] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 84.289307][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.292508][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.314942][ T7079] netlink: 'syz.3.170': attribute type 8 has an invalid length. [ 85.012078][ T7089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.204503][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 85.309611][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 85.372169][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 86.045620][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.045887][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.453551][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.714309][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 88.782671][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 89.262330][ T7144] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 89.448493][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 89.481666][ T7138] vlan3: entered promiscuous mode [ 89.481728][ T7138] bridge0: entered promiscuous mode [ 90.053752][ T7154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'. [ 92.927168][ T7185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.206'. [ 92.996898][ T7188] input: syz0 as /devices/virtual/input/input3 [ 93.199470][ T7199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.545414][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 96.833751][ T7223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.220'. [ 97.040013][ T3887] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.200029][ T3887] usb 1-1: Using ep0 maxpacket: 16 [ 97.201502][ T3887] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 97.201543][ T3887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.203430][ T3887] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 97.203466][ T3887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.203492][ T3887] usb 1-1: Product: syz [ 97.203514][ T3887] usb 1-1: Manufacturer: syz [ 97.203535][ T3887] usb 1-1: SerialNumber: syz [ 97.206478][ T3887] usb 1-1: config 0 descriptor?? [ 97.223260][ T3887] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 97.223335][ T3887] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 98.177496][ T3887] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 98.178235][ T3887] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 99.460554][ T3887] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 99.461059][ T3887] em28xx 1-1:0.0: No AC97 audio processor [ 99.704496][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.966437][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 100.043936][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 100.550577][ T7278] netlink: 256 bytes leftover after parsing attributes in process `syz.4.238'. [ 100.738079][ T6542] usb 1-1: USB disconnect, device number 3 [ 100.739050][ T6542] em28xx 1-1:0.0: Disconnecting em28xx [ 100.758838][ T6542] em28xx 1-1:0.0: Freeing device [ 100.772304][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.772578][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.157816][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 102.005270][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.174102][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.421411][ T7320] block nbd4: NBD_DISCONNECT [ 102.427021][ T7320] block nbd4: Disconnected due to user request. [ 102.432878][ T7320] block nbd4: shutting down sockets [ 102.630261][ T6544] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.162112][ T7328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.310067][ T6544] usb 1-1: Using ep0 maxpacket: 16 [ 103.423605][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 103.427341][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 104.268362][ T7338] netlink: 'syz.3.255': attribute type 3 has an invalid length. [ 104.271426][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 104.986473][ T7342] lo speed is unknown, defaulting to 1000 [ 105.793164][ T7344] capability: warning: `syz.3.257' uses deprecated v2 capabilities in a way that may be insecure [ 107.786201][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 107.878698][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 108.342935][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.343289][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.519401][ T6544] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.520921][ T6544] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 108.520970][ T6544] usb 1-1: can't read configurations, error -71 [ 110.296973][ T7422] block nbd3: NBD_DISCONNECT [ 110.297110][ T7422] block nbd3: Disconnected due to user request. [ 110.297161][ T7422] block nbd3: shutting down sockets [ 110.343087][ T6502] Bluetooth: hci4: command 0x0405 tx timeout [ 110.502845][ T7406] syz.0.273 (7406): drop_caches: 2 [ 112.479586][ T6502] Bluetooth: hci4: command 0x0405 tx timeout [ 113.261070][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.261340][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.276271][ T7466] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.287'. [ 114.534633][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.537356][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.637261][ T7487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.305'. [ 117.092917][ T7519] syz.4.314 uses obsolete (PF_INET,SOCK_PACKET) [ 118.034761][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 119.627523][ T7576] netlink: 'syz.4.334': attribute type 11 has an invalid length. [ 120.480779][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.481063][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.556033][ T7571] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 120.559141][ T7571] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 121.461085][ T6499] Bluetooth: hci0: command 0x0406 tx timeout [ 123.833445][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.836062][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.899209][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.899477][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.942342][ T6499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.945714][ T6499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.948466][ T6499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.951276][ T6499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.954009][ T6499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.067821][ T7637] lo speed is unknown, defaulting to 1000 [ 124.832959][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 124.873246][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 124.906873][ T7655] netlink: 'syz.2.355': attribute type 3 has an invalid length. [ 125.118967][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.119076][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.119212][ T7637] bridge_slave_0: entered allmulticast mode [ 125.124047][ T7637] bridge_slave_0: entered promiscuous mode [ 125.125549][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.126016][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.126319][ T7637] bridge_slave_1: entered allmulticast mode [ 125.127480][ T7637] bridge_slave_1: entered promiscuous mode [ 126.042543][ T6502] Bluetooth: hci5: command tx timeout [ 126.178325][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.185541][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.348505][ T2389] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.348578][ T2389] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.174744][ T7637] team0: Port device team_slave_0 added [ 127.181076][ T7637] team0: Port device team_slave_1 added [ 127.291034][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.291098][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.291152][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.292258][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.292305][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.292340][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.371979][ T7637] hsr_slave_0: entered promiscuous mode [ 127.374346][ T7637] hsr_slave_1: entered promiscuous mode [ 127.376562][ T7637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.378897][ T7637] Cannot create hsr debugfs directory [ 127.775801][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.364'. [ 127.776004][ T7691] ksmbd: Unknown IPC event: 0, ignore. [ 128.116319][ T6499] Bluetooth: hci5: command tx timeout [ 128.300040][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.958556][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.017007][ T24] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=b1.50 [ 129.017074][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.017119][ T24] usb 1-1: Product: syz [ 129.017147][ T24] usb 1-1: Manufacturer: syz [ 129.017174][ T24] usb 1-1: SerialNumber: syz [ 129.041328][ T24] usb 1-1: config 0 descriptor?? [ 129.055363][ T24] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 129.056682][ T24] cyphidcom ttyUSB0: required endpoint is missing [ 129.074246][ T7637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.166635][ T7637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.206006][ T7637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.215185][ T7716] netlink: 216 bytes leftover after parsing attributes in process `syz.4.373'. [ 129.217863][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 129.230852][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.373'. [ 129.237346][ T7637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.273671][ T6499] Bluetooth: hci0: unexpected event for opcode 0x080b [ 129.957952][ T6575] usb 1-1: USB disconnect, device number 6 [ 129.959410][ T6575] cypress_m8 1-1:0.0: device disconnected [ 130.079522][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.135924][ T7637] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.176409][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.176500][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.177448][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.178197][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.200335][ T6499] Bluetooth: hci5: command tx timeout [ 130.692123][ T7736] erofs (device nullb0): cannot find valid erofs superblock [ 131.284012][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 131.284214][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 131.284874][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 131.918048][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.018565][ T7759] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 132.262703][ T6499] Bluetooth: hci5: command tx timeout [ 132.812166][ T7769] hfs: can't find a HFS filesystem on dev nullb0 [ 132.900120][ T7771] tipc: Started in network mode [ 132.900191][ T7771] tipc: Node identity a27d4f36891, cluster identity 4711 [ 132.900369][ T7771] tipc: Enabled bearer , priority 0 [ 132.946082][ T7771] syzkaller0: entered promiscuous mode [ 132.958391][ T7771] syzkaller0: entered allmulticast mode [ 132.961567][ T7771] tipc: Resetting bearer [ 133.035805][ T7770] tipc: Resetting bearer [ 133.306768][ T6499] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 133.307130][ T6499] Bluetooth: hci0: Injecting HCI hardware error event [ 133.307931][ T6502] Bluetooth: hci0: hardware error 0x00 [ 133.523970][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.527759][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.683406][ T11] kernel read not supported for file /dsp (pid: 11 comm: kworker/0:1) [ 134.021276][ T24] tipc: Node number set to 728583990 [ 135.460001][ T6502] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 145.154046][ T7770] tipc: Disabling bearer [ 145.205422][ T7637] veth0_vlan: entered promiscuous mode [ 145.211569][ T7637] veth1_vlan: entered promiscuous mode [ 145.257294][ T7637] veth0_macvtap: entered promiscuous mode [ 145.265244][ T7637] veth1_macvtap: entered promiscuous mode [ 145.275475][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.278534][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.281331][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.284244][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.287011][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.290001][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.292769][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.295750][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.298469][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.306446][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.307312][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.325544][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.325628][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.325649][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.325670][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.325691][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.325711][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.325732][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.325752][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.325779][ T7637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.325801][ T7637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.326409][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.328002][ T7637] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.328043][ T7637] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.328073][ T7637] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.328104][ T7637] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.502180][ T2187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.502476][ T2187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.559428][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.559495][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.045607][ T7898] lo speed is unknown, defaulting to 1000 [ 149.080014][ T3887] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.122028][ T7930] netlink: 'syz.5.433': attribute type 1 has an invalid length. [ 149.230530][ T3887] usb 1-1: Using ep0 maxpacket: 8 [ 149.231704][ T3887] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 149.232479][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.232510][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.233257][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.233288][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.234131][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.234161][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.235923][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.235957][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.236695][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.236737][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.237471][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.237501][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.238228][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.238259][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.239006][ T3887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.239036][ T3887] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.245852][ T3887] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 149.245887][ T3887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.245913][ T3887] usb 1-1: Product: syz [ 149.245934][ T3887] usb 1-1: Manufacturer: syz [ 149.245956][ T3887] usb 1-1: SerialNumber: syz [ 149.251085][ T3887] usb 1-1: config 0 descriptor?? [ 150.099693][ T7951] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 152.016904][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 152.839068][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839189][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839215][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839240][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839264][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839288][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839312][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839337][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839361][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839385][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839419][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839445][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839469][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839493][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.839517][ T24] hid-generic 009C:0008:0003.0001: unknown main item tag 0x0 [ 152.857192][ T24] hid-generic 009C:0008:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 153.097312][ T7994] ERROR: device name not specified. [ 155.931187][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.449'. [ 156.084442][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.084728][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.092409][ T6499] Bluetooth: hci5: command 0x0405 tx timeout [ 156.894027][ T6546] usb 1-1: USB disconnect, device number 7 [ 157.091854][ T8031] block nbd5: NBD_DISCONNECT [ 157.269266][ T8039] tipc: Enabled bearer , priority 10 [ 157.436200][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.449202][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.208259][ T8061] netlink: 288 bytes leftover after parsing attributes in process `syz.4.466'. [ 158.510720][ T8079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.795725][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'. [ 158.798775][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'. [ 160.041986][ T3887] libceph: connect (1)[c::]:6789 error -101 [ 160.149397][ T3887] libceph: mon0 (1)[c::]:6789 connect error [ 161.001646][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.480'. [ 161.001714][ T8111] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 161.101444][ T8102] ceph: No mds server is up or the cluster is laggy [ 161.274206][ T3887] libceph: connect (1)[c::]:6789 error -101 [ 161.274374][ T3887] libceph: mon0 (1)[c::]:6789 connect error [ 161.915585][ T3887] libceph: connect (1)[c::]:6789 error -101 [ 161.915777][ T3887] libceph: mon0 (1)[c::]:6789 connect error [ 162.960192][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.5.487'. [ 163.094800][ T8141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.033475][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 164.034197][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 164.843933][ T8165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.668884][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.671707][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.733773][ T8178] Unknown options in mask 5 [ 169.531907][ T6499] Bluetooth: hci2: command 0x0406 tx timeout [ 169.531997][ T6499] Bluetooth: hci1: command 0x0406 tx timeout [ 169.532063][ T6499] Bluetooth: hci3: command 0x0406 tx timeout [ 170.811044][ T8231] block nbd3: shutting down sockets [ 170.842707][ T8238] netlink: 'syz.5.513': attribute type 1 has an invalid length. [ 170.999428][ T8247] tap0: tun_chr_ioctl cmd 1074025677 [ 170.999620][ T8247] tap0: linktype set to 780 [ 171.674749][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 171.773313][ T8254] lo speed is unknown, defaulting to 1000 [ 171.780269][ T11] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 172.391274][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.391347][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.391379][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.391405][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 172.392185][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.392240][ T11] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.392265][ T11] usb 1-1: Manufacturer: syz [ 172.394435][ T11] usb 1-1: config 0 descriptor?? [ 172.417261][ T8272] block nbd2: shutting down sockets [ 172.684517][ T11] Registered IR keymap rc-hauppauge [ 172.693429][ T8285] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 172.756866][ T11] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 172.757094][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.769976][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.792822][ T11] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 172.793776][ T11] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 172.856144][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.869982][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.890018][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.912925][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 172.976475][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 173.675434][ T8301] pim6reg1: entered promiscuous mode [ 173.675513][ T8301] pim6reg1: entered allmulticast mode [ 173.700070][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.722610][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.739979][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.760164][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.780579][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.800283][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.820913][ T11] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 173.842400][ T11] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 173.842466][ T11] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.849587][ T11] usb 1-1: USB disconnect, device number 8 [ 173.886909][ T8311] block nbd4: shutting down sockets [ 174.119966][ T8324] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 175.153556][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 176.260528][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 177.028326][ T8355] lo speed is unknown, defaulting to 1000 [ 177.030754][ T8349] block nbd3: shutting down sockets [ 177.123541][ T8362] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 177.330930][ T8372] Illegal XDP return value 4294967294 on prog (id 23) dev N/A, expect packet loss! [ 179.010235][ T8402] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 179.602318][ T8407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.620598][ T8453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.679142][ T8460] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 185.400772][ T8495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.587297][ T8500] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 187.574986][ T55] Bluetooth: hci4: unknown advertising packet type: 0x64 [ 187.575427][ T55] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 187.623909][ T2389] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.624008][ T2389] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.704179][ T8529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.009485][ T8541] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 188.877967][ T8562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.987780][ T8573] sit0: entered allmulticast mode [ 189.192135][ T8573] sit0: entered promiscuous mode [ 189.258565][ T8584] pim6reg1: entered promiscuous mode [ 189.258647][ T8584] pim6reg1: entered allmulticast mode [ 190.214790][ T8591] lo speed is unknown, defaulting to 1000 [ 190.271998][ T8600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.165401][ T8632] pim6reg1: entered promiscuous mode [ 192.165478][ T8632] pim6reg1: entered allmulticast mode [ 192.188576][ T8634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.390973][ T8646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.391152][ T8646] IPv6: NLM_F_CREATE should be set when creating new route [ 193.391207][ T8646] IPv6: NLM_F_CREATE should be set when creating new route [ 193.748514][ T8659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.538508][ T8686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.538574][ T8686] IPv6: NLM_F_CREATE should be set when creating new route [ 195.538631][ T8686] IPv6: NLM_F_CREATE should be set when creating new route [ 195.775927][ T8696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.107358][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 198.005922][ T8722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.006022][ T8722] IPv6: NLM_F_CREATE should be set when creating new route [ 198.006072][ T8722] IPv6: NLM_F_CREATE should be set when creating new route [ 198.290047][ T8732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.570427][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 200.300644][ T8754] pim6reg1: entered promiscuous mode [ 200.300721][ T8754] pim6reg1: entered allmulticast mode [ 200.318476][ T8762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.243630][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 202.593677][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.406833][ T8808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.470711][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 203.477866][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 203.707854][ T8810] veth1_macvtap: left promiscuous mode [ 203.709641][ T8810] macsec0: entered promiscuous mode [ 203.711296][ T8810] macsec0: entered allmulticast mode [ 203.734378][ T8810] veth1_macvtap: entered promiscuous mode [ 203.734450][ T8810] veth1_macvtap: entered allmulticast mode [ 203.734621][ T8810] macsec0: left promiscuous mode [ 203.735930][ T8810] macsec0: left allmulticast mode [ 203.735959][ T8810] veth1_macvtap: left allmulticast mode [ 205.096386][ T8838] block nbd3: NBD_DISCONNECT [ 205.327480][ T8851] veth1_macvtap: left promiscuous mode [ 205.329327][ T8851] macsec0: entered promiscuous mode [ 205.498591][ T8857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.556197][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 205.557786][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 206.711480][ T8874] block nbd4: shutting down sockets [ 207.137372][ T8896] netlink: 60 bytes leftover after parsing attributes in process `syz.5.751'. [ 207.190573][ T8899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.251293][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 207.252878][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 207.327014][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.330220][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.349735][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.352772][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.432445][ T8926] block nbd4: shutting down sockets [ 208.572565][ T8932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.764'. [ 208.767230][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.870421][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.000096][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.000421][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.031032][ T8945] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 209.363819][ T8945] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.384521][ T8935] binder: 8929:8935 ioctl c0306201 0 returned -14 [ 209.387577][ T8951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.102546][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 210.111224][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 210.162735][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.163015][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.383372][ T8970] netlink: 60 bytes leftover after parsing attributes in process `syz.5.775'. [ 210.481112][ T8971] block nbd5: shutting down sockets [ 210.641210][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 211.872230][ T6502] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 211.939254][ T8996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.961041][ T8998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.786'. [ 212.162590][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 212.166101][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 212.917669][ T9010] block nbd3: shutting down sockets [ 212.959933][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.790'. [ 212.996671][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.996937][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.186899][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 214.006077][ T9034] netlink: 68 bytes leftover after parsing attributes in process `syz.5.798'. [ 214.022943][ T9034] netlink: 68 bytes leftover after parsing attributes in process `syz.5.798'. [ 214.023297][ T9032] netlink: 52 bytes leftover after parsing attributes in process `syz.0.797'. [ 214.140632][ T9040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.198289][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 214.201930][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'. [ 214.328478][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.343588][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.361017][ T9045] block nbd4: shutting down sockets [ 214.722577][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 215.826628][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.828200][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.831877][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.832099][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.841391][ T9079] block nbd2: shutting down sockets [ 215.903135][ T9089] lo speed is unknown, defaulting to 1000 [ 216.401177][ T1799] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 217.096292][ T1799] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 217.147597][ T1799] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 217.147673][ T1799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.147724][ T1799] usb 1-1: Product: syz [ 217.147747][ T1799] usb 1-1: Manufacturer: syz [ 217.147769][ T1799] usb 1-1: SerialNumber: syz [ 217.163070][ T1799] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 217.163323][ T1799] dvb-usb: bulk message failed: -22 (3/0) [ 217.179141][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.179416][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.204728][ T1799] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 217.231801][ T1799] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 217.234323][ T1799] dvb_usb_umt_010 1-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 218.247864][ T9117] block nbd2: shutting down sockets [ 218.269367][ T6575] usb 1-1: USB disconnect, device number 9 [ 218.868289][ T9135] lo speed is unknown, defaulting to 1000 [ 220.198518][ T9163] tipc: Started in network mode [ 220.212602][ T9163] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 220.212696][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 220.221287][ T9158] block nbd2: shutting down sockets [ 220.367412][ T9173] __nla_validate_parse: 3 callbacks suppressed [ 220.367487][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.848'. [ 220.369311][ T9171] sctp: [Deprecated]: syz.2.849 (pid 9171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.369311][ T9171] Use struct sctp_sack_info instead [ 220.412548][ T9175] syz_tun: entered promiscuous mode [ 220.415653][ T9175] syz_tun: left promiscuous mode [ 220.583680][ T9176] lo speed is unknown, defaulting to 1000 [ 220.824217][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.828077][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.932550][ T9206] block nbd0: shutting down sockets [ 222.335133][ T9229] netlink: 44 bytes leftover after parsing attributes in process `syz.3.870'. [ 222.620141][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.771452][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 222.780548][ T11] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 222.780602][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.780634][ T11] usb 1-1: Product: syz [ 222.780647][ T11] usb 1-1: Manufacturer: syz [ 222.780660][ T11] usb 1-1: SerialNumber: syz [ 222.790617][ T11] usb 1-1: config 0 descriptor?? [ 222.808335][ T11] gspca_main: sq905-2.14.0 probing 2770:9120 [ 223.720432][ T11] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 223.720529][ T11] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 223.729371][ T11] usb 1-1: USB disconnect, device number 10 [ 223.784031][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 224.011867][ T9257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.881'. [ 224.153840][ T9264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.154114][ T9264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.446170][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.446448][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.497943][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.498281][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.571015][ T9287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.893'. [ 227.360132][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 227.795336][ T9327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.907'. [ 227.984184][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 228.235591][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 228.238734][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.239383][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.396271][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.400305][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.520509][ T6502] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 228.520754][ T6502] Bluetooth: hci5: Injecting HCI hardware error event [ 228.522021][ T6502] Bluetooth: hci5: hardware error 0x00 [ 228.618348][ T9357] syz_tun: entered promiscuous mode [ 228.618565][ T9357] vlan2: entered promiscuous mode [ 229.355992][ T9362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.918'. [ 229.528585][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.528895][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.332660][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.333999][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.821182][ T6502] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 232.274740][ T6502] Bluetooth: hci4: command 0x0405 tx timeout [ 235.780533][ T6502] Bluetooth: hci4: command 0x0405 tx timeout [ 236.100512][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.106117][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.133345][ T9471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.136055][ T9471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.790012][ T6542] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.957721][ T6542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.960845][ T6542] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.960914][ T6542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.967736][ T6542] usb 1-1: config 0 descriptor?? [ 237.979319][ T6542] pwc: Askey VC010 type 2 USB webcam detected. [ 239.802320][ T9489] tipc: Started in network mode [ 239.802385][ T9489] tipc: Node identity , cluster identity 4711 [ 239.802773][ T9489] tipc: Failed to obtain node identity [ 239.802823][ T9489] tipc: Enabling of bearer rejected, failed to enable media [ 239.804257][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.804498][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.880710][ T6542] pwc: send_video_command error -71 [ 239.880772][ T6542] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 239.881298][ T6542] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 239.882763][ T6542] usb 1-1: USB disconnect, device number 11 [ 241.193526][ T31] audit: type=1326 audit(240.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9532 comm="syz.5.968" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x0 [ 241.212352][ T9537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.214662][ T9537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.699992][ T6542] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 242.554550][ T6542] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 242.554631][ T6542] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.554687][ T6542] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 242.554721][ T6542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.560667][ T6542] usb 1-1: config 0 descriptor?? [ 242.563917][ T6542] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 243.711047][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.711373][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.333955][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.334222][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.339246][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.342215][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.226750][ T6575] usb 1-1: USB disconnect, device number 12 [ 245.331428][ T9603] loop2: detected capacity change from 0 to 7 [ 245.360390][ T9603] Dev loop2: unable to read RDB block 7 [ 245.362424][ T9603] loop2: AHDI p2 [ 245.363566][ T9603] loop2: partition table partially beyond EOD, truncated [ 245.981534][ T6542] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 246.247803][ T6542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.252442][ T6542] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 246.267351][ T6542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.784498][ T6542] usb 1-1: config 0 descriptor?? [ 246.799318][ T6542] pwc: Askey VC010 type 2 USB webcam detected. [ 247.005247][ T6542] pwc: send_video_command error -71 [ 247.005309][ T6542] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 247.005429][ T6542] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 247.024555][ T6542] usb 1-1: USB disconnect, device number 13 [ 247.659967][ T6542] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 247.825202][ T6542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.825281][ T6542] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.825332][ T6542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.836133][ T6542] usb 1-1: config 0 descriptor?? [ 247.845083][ T6542] pwc: Askey VC010 type 2 USB webcam detected. [ 248.578317][ T6542] pwc: recv_control_msg error -32 req 02 val 2b00 [ 248.581435][ T6542] pwc: recv_control_msg error -32 req 02 val 2700 [ 248.585992][ T6542] pwc: recv_control_msg error -32 req 02 val 2c00 [ 248.588593][ T6542] pwc: recv_control_msg error -32 req 04 val 1000 [ 248.591954][ T6542] pwc: recv_control_msg error -32 req 04 val 1300 [ 248.594828][ T6542] pwc: recv_control_msg error -32 req 04 val 1400 [ 248.597597][ T6542] pwc: recv_control_msg error -32 req 02 val 2000 [ 248.600108][ T6542] pwc: recv_control_msg error -32 req 02 val 2100 [ 249.062562][ T2389] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.062680][ T2389] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.248626][ T6542] pwc: recv_control_msg error -71 req 02 val 2500 [ 249.248954][ T6542] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.249211][ T6542] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.249469][ T6542] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.249729][ T6542] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.250112][ T6542] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.250403][ T6542] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.252167][ T6542] pwc: Registered as video11. [ 249.253003][ T6542] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 249.255706][ T6542] usb 1-1: USB disconnect, device number 14 [ 249.300102][ T31] audit: type=1326 audit(249.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9667 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 249.300185][ T31] audit: type=1326 audit(249.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9667 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=95 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 249.300253][ T31] audit: type=1326 audit(249.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9667 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 249.566226][ T9682] syzkaller1: entered promiscuous mode [ 249.568204][ T9682] syzkaller1: entered allmulticast mode [ 249.595411][ T9684] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 249.864864][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 251.298524][ T9721] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 251.359158][ T9721] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 252.382112][ T6542] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 252.540873][ T6542] usb 1-1: Using ep0 maxpacket: 32 [ 252.547467][ T6542] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 252.547535][ T6542] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 252.547568][ T6542] usb 1-1: config 0 has no interface number 0 [ 252.547597][ T6542] usb 1-1: config 0 has no interface number 1 [ 252.565163][ T6542] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 252.565223][ T6542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.565264][ T6542] usb 1-1: Product: syz [ 252.565292][ T6542] usb 1-1: Manufacturer: syz [ 252.565320][ T6542] usb 1-1: SerialNumber: syz [ 252.576832][ T6542] usb 1-1: config 0 descriptor?? [ 252.606097][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.609427][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.695280][ T6542] viperboard 1-1:0.61: version 0.00 found at bus 001 address 015 [ 252.730083][ T6542] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 252.732500][ T6542] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 252.746323][ T9761] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1040'. [ 252.761850][ T6542] viperboard 1-1:0.98: version 0.00 found at bus 001 address 015 [ 252.773233][ T6542] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 252.775693][ T6542] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 252.809707][ T9745] lo speed is unknown, defaulting to 1000 [ 253.745207][ T9766] block device autoloading is deprecated and will be removed. [ 253.745850][ T9766] syz.0.1037: attempt to access beyond end of device [ 253.745850][ T9766] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 253.871183][ T6575] usb 1-1: USB disconnect, device number 15 [ 253.975405][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 255.253592][ T9792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.253891][ T9792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.161901][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.165338][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.771123][ T9836] lo speed is unknown, defaulting to 1000 [ 256.943214][ T9847] process 'syz.2.1071' launched './file1' with NULL argv: empty string added [ 257.247623][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.250421][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.219976][ T6542] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 258.369977][ T6542] usb 1-1: Using ep0 maxpacket: 8 [ 258.436001][ T6542] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.440682][ T6542] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 258.440749][ T6542] usb 1-1: can't read configurations, error -71 [ 262.070166][ T6542] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 262.221394][ T6542] usb 1-1: config 1 interface 0 has no altsetting 0 [ 262.225834][ T6542] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.225901][ T6542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.225934][ T6542] usb 1-1: Product: syz [ 262.225962][ T6542] usb 1-1: Manufacturer: syz [ 262.225990][ T6542] usb 1-1: SerialNumber: syz [ 262.398552][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1126'. [ 262.601970][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.611055][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.647028][ T6542] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 263.205621][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1140'. [ 263.262622][ T31] audit: type=1326 audit(262.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.268521][ T31] audit: type=1326 audit(262.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.275192][ T31] audit: type=1326 audit(263.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.281854][ T31] audit: type=1326 audit(263.010:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.288980][ T31] audit: type=1326 audit(263.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.296381][ T31] audit: type=1326 audit(263.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.303076][ T31] audit: type=1326 audit(263.010:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.309001][ T31] audit: type=1326 audit(263.010:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.315091][ T31] audit: type=1326 audit(263.010:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.321191][ T31] audit: type=1326 audit(263.010:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10038 comm="syz.5.1142" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8435b728 code=0x7ffc0000 [ 263.920501][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 263.923708][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1148'. [ 263.926558][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 263.930045][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 264.677587][ C1] usblp0: nonzero write bulk status received: -71 [ 264.681906][ T6277] usb 1-1: USB disconnect, device number 18 [ 264.690417][ T9972] usblp0: removed [ 264.716357][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1153'. [ 265.362376][T10100] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1165'. [ 265.519674][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 265.650151][ T6575] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 265.830040][ T6575] usb 1-1: Using ep0 maxpacket: 32 [ 265.832810][ T6575] usb 1-1: config 2 has an invalid interface number: 157 but max is 0 [ 265.832886][ T6575] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 265.832919][ T6575] usb 1-1: config 2 has no interface number 1 [ 265.832954][ T6575] usb 1-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30 [ 265.832990][ T6575] usb 1-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 265.833025][ T6575] usb 1-1: config 2 interface 0 has no altsetting 0 [ 265.850827][ T6575] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 265.850887][ T6575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.850927][ T6575] usb 1-1: Product: syz [ 265.850956][ T6575] usb 1-1: Manufacturer: syz [ 265.850983][ T6575] usb 1-1: SerialNumber: syz [ 265.874409][ T6575] imon 1-1:2.157: inconsistent driver matching [ 265.876365][ T6575] imon 1-1:2.157: unable to register, err -22 [ 265.878453][ T6575] imon 1-1:2.157: probe with driver imon failed with error -22 [ 266.083215][ T6575] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 266.086079][ T6575] imon 1-1:2.0: unable to initialize intf0, err -19 [ 266.089899][ T6575] imon:imon_probe: failed to initialize context! [ 266.089954][ T6575] imon 1-1:2.0: unable to register, err -19 [ 266.097608][ T6575] usb 1-1: USB disconnect, device number 19 [ 266.609282][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.609570][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.980623][ T32] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 266.980680][ T32] Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 [ 266.980709][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.980725][ T32] task:kworker/0:0 state:D stack:0 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 266.980763][ T32] Workqueue: events p9_write_work [ 266.980801][ T32] Call trace: [ 266.980814][ T32] __switch_to+0x404/0x778 (T) [ 266.980839][ T32] __schedule+0x13b0/0x28d4 [ 266.980859][ T32] schedule+0xb4/0x230 [ 266.980880][ T32] schedule_preempt_disabled+0x18/0x2c [ 266.980901][ T32] __mutex_lock_common+0xbd0/0x2190 [ 266.980922][ T32] mutex_lock_nested+0x2c/0x38 [ 266.980943][ T32] anon_pipe_write+0x130/0xfa0 [ 266.980983][ T32] __kernel_write_iter+0x2b8/0x6c8 [ 266.981009][ T32] kernel_write+0x18c/0x28c [ 266.981033][ T32] p9_write_work+0x450/0xc20 [ 266.981056][ T32] process_one_work+0x7e8/0x156c [ 266.981082][ T32] worker_thread+0x958/0xed8 [ 266.981102][ T32] kthread+0x5fc/0x75c [ 266.981125][ T32] ret_from_fork+0x10/0x20 [ 266.981246][ T32] INFO: task syz.1.271:7403 blocked for more than 143 seconds. [ 266.981265][ T32] Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 [ 266.981281][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.981295][ T32] task:syz.1.271 state:D stack:0 pid:7403 tgid:7392 ppid:6497 task_flags:0x400040 flags:0x00000001 [ 266.981331][ T32] Call trace: [ 266.981344][ T32] __switch_to+0x404/0x778 (T) [ 266.981365][ T32] __schedule+0x13b0/0x28d4 [ 266.981385][ T32] schedule+0xb4/0x230 [ 266.981405][ T32] schedule_preempt_disabled+0x18/0x2c [ 266.981426][ T32] rwsem_down_write_slowpath+0xa80/0x10f0 [ 266.981448][ T32] down_write+0xb4/0xc0 [ 266.981469][ T32] filemap_invalidate_inode+0x118/0x2f8 [ 266.981492][ T32] netfs_unbuffered_write_iter+0x304/0x654 [ 266.981515][ T32] v9fs_file_write_iter+0xa4/0xd8 [ 266.981536][ T32] vfs_write+0x62c/0x97c [ 266.981559][ T32] ksys_write+0x120/0x210 [ 266.981583][ T32] __arm64_sys_write+0x7c/0x90 [ 266.981637][ T32] invoke_syscall+0x98/0x2b8 [ 266.981665][ T32] el0_svc_common+0x130/0x23c [ 266.981686][ T32] do_el0_svc+0x48/0x58 [ 266.981706][ T32] el0_svc+0x58/0x150 [ 266.981728][ T32] el0t_64_sync_handler+0x78/0x108 [ 266.981751][ T32] el0t_64_sync+0x198/0x19c [ 266.981773][ T32] INFO: task syz.1.271:7405 blocked for more than 143 seconds. [ 266.981790][ T32] Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 [ 266.981806][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.981820][ T32] task:syz.1.271 state:D stack:0 pid:7405 tgid:7392 ppid:6497 task_flags:0x400040 flags:0x00000001 [ 266.981854][ T32] Call trace: [ 266.981868][ T32] __switch_to+0x404/0x778 (T) [ 266.981888][ T32] __schedule+0x13b0/0x28d4 [ 266.981909][ T32] schedule+0xb4/0x230 [ 266.981943][ T32] schedule_preempt_disabled+0x18/0x2c [ 266.981964][ T32] rwsem_down_read_slowpath+0x4ac/0x7c8 [ 266.981986][ T32] down_read+0x9c/0x2f8 [ 266.982007][ T32] filemap_fault+0x564/0x1278 [ 266.982027][ T32] __do_fault+0xf8/0x498 [ 266.982051][ T32] handle_mm_fault+0x2c00/0x4cec [ 266.982075][ T32] do_page_fault+0x598/0x1554 [ 266.982099][ T32] do_translation_fault+0xc4/0x114 [ 266.982122][ T32] do_mem_abort+0x70/0x194 [ 266.982145][ T32] el1_abort+0x3c/0x5c [ 266.982166][ T32] el1h_64_sync_handler+0x50/0xcc [ 266.982188][ T32] el1h_64_sync+0x6c/0x70 [ 266.982209][ T32] __arch_copy_from_user+0xcc/0x23c (P) [ 266.982233][ T32] __arm64_sys_sendfile64+0xfc/0x274 [ 266.982254][ T32] invoke_syscall+0x98/0x2b8 [ 266.982274][ T32] el0_svc_common+0x130/0x23c [ 266.982294][ T32] do_el0_svc+0x48/0x58 [ 266.982314][ T32] el0_svc+0x58/0x150 [ 266.982335][ T32] el0t_64_sync_handler+0x78/0x108 [ 266.982357][ T32] el0t_64_sync+0x198/0x19c [ 266.982392][ T32] [ 266.982392][ T32] Showing all locks held in the system: [ 266.982411][ T32] 3 locks held by kworker/0:0/9: [ 266.982427][ T32] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 266.982514][ T32] #1: ffff800097607bc0 ((work_completion)(&m->wq)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 266.982600][ T32] #2: ffff0000d8d12868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x130/0xfa0 [ 266.982695][ T32] 3 locks held by kworker/u8:1/13: [ 266.982712][ T32] 1 lock held by khungtaskd/32: [ 266.982728][ T32] #0: ffff80008f4e7d20 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 266.982812][ T32] 3 locks held by kworker/u9:0/55: [ 266.982828][ T32] #0: ffff0000ec811148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 266.982913][ T32] #1: ffff800097de7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 266.982999][ T32] #2: ffff0000ec818d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x184/0x33c [ 266.983086][ T32] 2 locks held by kworker/1:1H/59: [ 266.983113][ T32] 2 locks held by getty/6240: [ 266.983129][ T32] #0: ffff0000cd1cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 266.983213][ T32] #1: ffff80009b5ae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 [ 266.983305][ T32] 2 locks held by syz.1.271/7400: [ 266.983321][ T32] #0: ffff0000d8d12868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x130/0xfa0 [ 266.983406][ T32] #1: ffff0000f1148fc8 (mapping.invalidate_lock#3){++++}-{4:4}, at: filemap_fault+0x964/0x1278 [ 266.983500][ T32] 4 locks held by syz.1.271/7403: [ 266.983516][ T32] #0: ffff0000d4e350b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0 [ 266.983601][ T32] #1: ffff0000dc0de420 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x244/0x97c [ 266.983708][ T32] #2: ffff0000f1148e28 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: netfs_start_io_direct+0x1a4/0x234 [ 266.983803][ T32] #3: ffff0000f1148fc8 (mapping.invalidate_lock#3){++++}-{4:4}, at: filemap_invalidate_inode+0x118/0x2f8 [ 266.983898][ T32] 2 locks held by syz.1.271/7405: [ 266.983914][ T32] #0: ffff0000dc283d50 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x38/0x2d8 [ 266.983998][ T32] #1: ffff0000f1148fc8 (mapping.invalidate_lock#3){++++}-{4:4}, at: filemap_fault+0x564/0x1278 [ 266.984096][ T32] 1 lock held by syz.3.1186/10150: [ 266.984112][ T32] [ 266.984124][ T32] ============================================= [ 266.984124][ T32] [ 266.984139][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 267.152071][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 267.154963][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.157674][ T32] Call trace: [ 267.158532][ T32] show_stack+0x2c/0x3c (C) [ 267.159727][ T32] __dump_stack+0x30/0x40 [ 267.160898][ T32] dump_stack_lvl+0x30/0x12c [ 267.162089][ T32] dump_stack+0x1c/0x28 [ 267.163293][ T32] panic+0x2bc/0x7ac [ 267.164323][ T32] hung_task_panic+0x0/0x2c [ 267.165536][ T32] kthread+0x5fc/0x75c [ 267.166641][ T32] ret_from_fork+0x10/0x20 [ 267.167844][ T32] SMP: stopping secondary CPUs [ 267.169126][ T32] Kernel Offset: disabled [ 267.170345][ T32] CPU features: 0x0800,000040e0,01000250,82017203 [ 267.172129][ T32] Memory Limit: none [ 267.610444][ T32] Rebooting in 86400 seconds..