last executing test programs: 4.234944238s ago: executing program 0 (id=548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}, {&(0x7f0000000040)="f866045bd4e45a803ded8d6b5ef1089eb1fcee155b9680070a64c0387e5c4f50de", 0x21}, {&(0x7f0000000240)="8e0ccde7422b9058d2c4e316cd2c9152e68041cdb0e09fc5bbe2b1471d3912f5ee23b06aefb7056f6ffae8a35dc0dd50eef6c53aff631f2d0105df84bb8f700e4b304823e0f56806ed2b2b92098d11d0244be0425863894682606309", 0x5c}], 0x3}, 0x200088c0) 3.261557437s ago: executing program 0 (id=555): socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x553d621d6200eaf7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 3.260134131s ago: executing program 1 (id=556): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x1, 0x9}) 2.744575395s ago: executing program 3 (id=557): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e01000000000000"], 0x14}, 0x1, 0x40030000000000}, 0x0) 2.721109347s ago: executing program 3 (id=559): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/189, 0xbd}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) 2.719881256s ago: executing program 1 (id=560): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.718764063s ago: executing program 4 (id=561): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.681611056s ago: executing program 4 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2.640001553s ago: executing program 4 (id=564): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x1, 0x9}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.331464559s ago: executing program 0 (id=565): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}, {&(0x7f0000000040)="f866045bd4e45a803ded8d6b5ef1089eb1fcee155b9680070a64c0387e5c4f50de", 0x21}, {&(0x7f0000000240)="8e0ccde7422b9058d2c4e316cd2c9152e68041cdb0e09fc5bbe2b1471d3912f5ee23b06aefb7056f6ffae8a35dc0dd50eef6c53aff631f2d0105df84bb8f700e4b304823e0f56806ed2b2b92098d11d0244be0425863894682606309", 0x5c}], 0x3}, 0x200088c0) 2.323995942s ago: executing program 2 (id=566): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 1.848143605s ago: executing program 3 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.644847696s ago: executing program 1 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') setgroups(0x0, 0x0) lseek(r3, 0x10000000005, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) 1.522406852s ago: executing program 4 (id=569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 1.451099847s ago: executing program 0 (id=570): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e01000000000000"], 0x14}, 0x1, 0x40030000000000}, 0x0) 1.435195844s ago: executing program 0 (id=571): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x1, 0x9}) 1.175172187s ago: executing program 2 (id=572): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.116408656s ago: executing program 2 (id=573): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 983.99449ms ago: executing program 3 (id=574): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 887.032251ms ago: executing program 3 (id=575): socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x20000810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x553d621d6200eaf7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 775.483671ms ago: executing program 1 (id=576): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 746.73427ms ago: executing program 1 (id=577): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/189, 0xbd}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) 645.751197ms ago: executing program 1 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 644.99593ms ago: executing program 4 (id=579): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x2, 0x1, 0x9}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 307.699809ms ago: executing program 2 (id=580): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}}]}, 0x0, 0x5}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 280.528162ms ago: executing program 2 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x40004) 196.191352ms ago: executing program 2 (id=582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 51.022686ms ago: executing program 0 (id=583): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f00000003c0)=0x8) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000004c0)={0x1b, 0x2, 0x0, "dd3e1ddbc8e90cb57346e6c94dfa5bf04abc3e8fc2976136531a27a41db375d7"}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x7, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", ' \x00', ["dc001000", "0000000000ffe700005a00", '\x00', "790000a5a16706008c00edbf"]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000010000001100000008000300", @ANYRES32=r7, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8880) 4.8075ms ago: executing program 4 (id=584): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 0s ago: executing program 3 (id=585): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c69", 0xf}], 0x1}, 0x480c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 30.628684][ T6540] cgroup: Unknown subsys name 'net' [ 30.718673][ T6540] cgroup: Unknown subsys name 'cpuset' [ 30.720640][ T6540] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.886477][ T6540] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.138871][ T6560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.139115][ T6560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.142571][ T6561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.144003][ T6561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.144231][ T6561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.144430][ T6561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.144718][ T6561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.145120][ T6561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.145556][ T6561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.145674][ T6561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.145900][ T6561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.150776][ T6561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.154877][ T6561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.155580][ T6561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.155739][ T6130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.156232][ T6566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.158301][ T6566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.166327][ T6566] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.169237][ T6566] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.171307][ T6566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.172922][ T6566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.175073][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.179005][ T6566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.181190][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.187595][ T6566] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.328761][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 33.383064][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.384623][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.385431][ T6558] bridge_slave_0: entered allmulticast mode [ 33.385897][ T6558] bridge_slave_0: entered promiscuous mode [ 33.387105][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 33.390106][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 33.393782][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 33.402419][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.402471][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.402526][ T6558] bridge_slave_1: entered allmulticast mode [ 33.403010][ T6558] bridge_slave_1: entered promiscuous mode [ 33.417390][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.426101][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.442239][ T6558] team0: Port device team_slave_0 added [ 33.443490][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 33.447990][ T6558] team0: Port device team_slave_1 added [ 33.477713][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.477739][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.477753][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.478437][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.478444][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.478456][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.485525][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.485595][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.485655][ T6557] bridge_slave_0: entered allmulticast mode [ 33.486040][ T6557] bridge_slave_0: entered promiscuous mode [ 33.486980][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.486997][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.487041][ T6557] bridge_slave_1: entered allmulticast mode [ 33.487715][ T6557] bridge_slave_1: entered promiscuous mode [ 33.510553][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.510614][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.510684][ T6550] bridge_slave_0: entered allmulticast mode [ 33.511118][ T6550] bridge_slave_0: entered promiscuous mode [ 33.512089][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.512167][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.512217][ T6550] bridge_slave_1: entered allmulticast mode [ 33.512588][ T6550] bridge_slave_1: entered promiscuous mode [ 33.519173][ T6558] hsr_slave_0: entered promiscuous mode [ 33.519481][ T6558] hsr_slave_1: entered promiscuous mode [ 33.522978][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.523546][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.523638][ T6551] bridge_slave_0: entered allmulticast mode [ 33.524047][ T6551] bridge_slave_0: entered promiscuous mode [ 33.533439][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.533524][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.533578][ T6551] bridge_slave_1: entered allmulticast mode [ 33.534019][ T6551] bridge_slave_1: entered promiscuous mode [ 33.538988][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.539874][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.560702][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.561546][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.567200][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.571804][ T6557] team0: Port device team_slave_0 added [ 33.572524][ T6557] team0: Port device team_slave_1 added [ 33.590724][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.593867][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.595138][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.596963][ T6556] bridge_slave_0: entered allmulticast mode [ 33.598546][ T6556] bridge_slave_0: entered promiscuous mode [ 33.601286][ T6550] team0: Port device team_slave_0 added [ 33.610136][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.610158][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.610174][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.610796][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.610804][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.610812][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.613465][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.613534][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.613608][ T6556] bridge_slave_1: entered allmulticast mode [ 33.614031][ T6556] bridge_slave_1: entered promiscuous mode [ 33.619786][ T6550] team0: Port device team_slave_1 added [ 33.630678][ T6551] team0: Port device team_slave_0 added [ 33.644420][ T6551] team0: Port device team_slave_1 added [ 33.653279][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.655064][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.655087][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.655101][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.655641][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.655648][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.655660][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.659075][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.670526][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.670537][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.670549][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.672292][ T6557] hsr_slave_0: entered promiscuous mode [ 33.672580][ T6557] hsr_slave_1: entered promiscuous mode [ 33.672785][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 33.672821][ T6557] Cannot create hsr debugfs directory [ 33.682750][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.683925][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.688491][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.711779][ T6556] team0: Port device team_slave_0 added [ 33.712525][ T6556] team0: Port device team_slave_1 added [ 33.720327][ T6550] hsr_slave_0: entered promiscuous mode [ 33.720595][ T6550] hsr_slave_1: entered promiscuous mode [ 33.720753][ T6550] debugfs: 'hsr0' already exists in 'hsr' [ 33.720763][ T6550] Cannot create hsr debugfs directory [ 33.730353][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.730379][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.730402][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.745350][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.745380][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.745409][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.769389][ T6551] hsr_slave_0: entered promiscuous mode [ 33.770841][ T6551] hsr_slave_1: entered promiscuous mode [ 33.772108][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 33.773107][ T6551] Cannot create hsr debugfs directory [ 33.797091][ T6556] hsr_slave_0: entered promiscuous mode [ 33.797930][ T6556] hsr_slave_1: entered promiscuous mode [ 33.798127][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 33.798138][ T6556] Cannot create hsr debugfs directory [ 33.826576][ T6558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.838888][ T6558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.842411][ T6558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.855797][ T6558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.910170][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.910220][ T6558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.910379][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.910408][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.915963][ T6557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.918852][ T6557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.921098][ T6557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.924651][ T6557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.953000][ T6551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.959266][ T6551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.967006][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.967045][ T6557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.967117][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.967150][ T6557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.970126][ T6551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.972033][ T6551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.973875][ T6550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.975484][ T6550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.978872][ T6550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.984451][ T6550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.018932][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.018968][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.019037][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.019069][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.025999][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.027215][ T6556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.030317][ T6556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.032767][ T6556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.038568][ T6556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.043037][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.044687][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.047250][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.049370][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.051603][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.053681][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.072071][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.079242][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.079371][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.083473][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.103303][ T258] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.103338][ T258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.112199][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.125649][ T6558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.128209][ T6558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.133246][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.133281][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.134517][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.138100][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.142243][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.153190][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.153226][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.163718][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.175084][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.175123][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.179375][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.186799][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.186843][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.187142][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.187156][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.196944][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.198722][ T6557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.198737][ T6557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.208842][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.208883][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.209372][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.209387][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.209680][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.209694][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.222238][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.223954][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.241668][ T6551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.247161][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.256976][ T6550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.257025][ T6550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.292593][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.311517][ T6558] veth0_vlan: entered promiscuous mode [ 34.315672][ T6558] veth1_vlan: entered promiscuous mode [ 34.323083][ T6558] veth0_macvtap: entered promiscuous mode [ 34.329912][ T6558] veth1_macvtap: entered promiscuous mode [ 34.342518][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.353372][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.365321][ T6557] veth0_vlan: entered promiscuous mode [ 34.369978][ T6557] veth1_vlan: entered promiscuous mode [ 34.374008][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.381107][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.382612][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.384984][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.402102][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402828][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402853][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402867][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.426914][ T6556] veth0_vlan: entered promiscuous mode [ 34.433084][ T6557] veth0_macvtap: entered promiscuous mode [ 34.435164][ T6557] veth1_macvtap: entered promiscuous mode [ 34.439017][ T6556] veth1_vlan: entered promiscuous mode [ 34.443780][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.446135][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.464417][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.464506][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.464524][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.464537][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.483110][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.483144][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.490208][ T6550] veth0_vlan: entered promiscuous mode [ 34.493477][ T6550] veth1_vlan: entered promiscuous mode [ 34.502015][ T6551] veth0_vlan: entered promiscuous mode [ 34.505666][ T6556] veth0_macvtap: entered promiscuous mode [ 34.506574][ T6556] veth1_macvtap: entered promiscuous mode [ 34.525856][ T6551] veth1_vlan: entered promiscuous mode [ 34.533776][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.533802][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.539897][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.546310][ T6550] veth0_macvtap: entered promiscuous mode [ 34.547845][ T6551] veth0_macvtap: entered promiscuous mode [ 34.548752][ T6551] veth1_macvtap: entered promiscuous mode [ 34.551566][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.559555][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.564822][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.576784][ T6550] veth1_macvtap: entered promiscuous mode [ 34.579051][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.579077][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.580195][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580256][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580271][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580285][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580298][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580310][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580322][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.580334][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.594357][ T6558] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.602919][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.604191][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.610543][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.610572][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.618404][ T924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.619321][ T924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.621252][ T924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.621274][ T924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.661227][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.661262][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.698935][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.698963][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.699089][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.699101][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.699580][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.699594][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.740503][ T924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.740533][ T924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.989438][ T6673] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.990017][ T6560] Bluetooth: hci2: Malformed LE Event: 0x0b [ 35.013320][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.014927][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.043286][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.044077][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.110644][ T6688] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 35.198125][ T6698] loop4: detected capacity change from 0 to 4096 [ 35.208966][ T6560] Bluetooth: hci4: command tx timeout [ 35.210168][ T6560] Bluetooth: hci3: command tx timeout [ 35.211264][ T6560] Bluetooth: hci0: command tx timeout [ 35.212390][ T6560] Bluetooth: hci1: command tx timeout [ 35.212455][ T6560] Bluetooth: hci2: command tx timeout [ 36.342094][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 36.439938][ T6736] Zero length message leads to an empty skb [ 36.478333][ T6740] dlm: no locking on control device [ 36.525523][ T6742] syz.4.29: attempt to access beyond end of device [ 36.525523][ T6742] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 36.530722][ T6742] syz.4.29: attempt to access beyond end of device [ 36.530722][ T6742] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 36.533998][ T6742] Mount JFS Failure: -5 [ 36.603847][ T6746] loop1: detected capacity change from 0 to 4096 [ 37.298294][ T6560] Bluetooth: hci2: command tx timeout [ 37.298334][ T6560] Bluetooth: hci1: command tx timeout [ 37.298358][ T6560] Bluetooth: hci0: command tx timeout [ 37.298374][ T6560] Bluetooth: hci3: command tx timeout [ 37.298388][ T6560] Bluetooth: hci4: command tx timeout [ 37.452070][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.454138][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.516112][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.516960][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.518220][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.557363][ T6769] infiniband syz2: set active [ 37.557394][ T6769] infiniband syz2: added vxcan1 [ 37.690180][ T6769] RDS/IB: syz2: added [ 37.690276][ T6769] smc: adding ib device syz2 with port count 1 [ 37.690308][ T6769] smc: ib device syz2 port 1 has pnetid [ 37.691357][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.735994][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.871102][ T6616] vxcan1 speed is unknown, defaulting to 1000 [ 37.889728][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.915173][ T26] vxcan1 speed is unknown, defaulting to 1000 [ 37.932391][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 37.970602][ T6769] vxcan1 speed is unknown, defaulting to 1000 [ 38.183439][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.44'. [ 38.185687][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 38.260825][ T6796] loop3: detected capacity change from 0 to 4096 [ 39.367623][ T6560] Bluetooth: hci3: command tx timeout [ 39.367749][ T6560] Bluetooth: hci0: command tx timeout [ 39.367777][ T6560] Bluetooth: hci1: command tx timeout [ 39.367794][ T6560] Bluetooth: hci2: command tx timeout [ 39.370688][ T6565] Bluetooth: hci4: command 0x040f tx timeout [ 40.506978][ T6858] tipc: Started in network mode [ 40.508154][ T6858] tipc: Node identity 26b7df1a04b6, cluster identity 4711 [ 40.510136][ T6858] tipc: Enabled bearer , priority 0 [ 40.512013][ T6858] syzkaller0: entered promiscuous mode [ 40.513288][ T6858] syzkaller0: entered allmulticast mode [ 40.517166][ T6858] tipc: Resetting bearer [ 40.520052][ T6857] tipc: Resetting bearer [ 40.524822][ T6857] tipc: Disabling bearer [ 40.653420][ T6863] tc_dump_action: action bad kind [ 41.026846][ T6809] Set syz1 is full, maxelem 65536 reached [ 41.059557][ T6876] netlink: 64 bytes leftover after parsing attributes in process `syz.3.70'. [ 41.191136][ T6879] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 41.191257][ T6879] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 41.441374][ T6889] tipc: Started in network mode [ 41.442385][ T6889] tipc: Node identity b2108b794196, cluster identity 4711 [ 41.444392][ T6889] tipc: Enabled bearer , priority 0 [ 41.446365][ T6889] syzkaller0: entered promiscuous mode [ 41.447976][ T6566] Bluetooth: hci4: command 0x040f tx timeout [ 41.448015][ T6566] Bluetooth: hci2: command tx timeout [ 41.448046][ T6566] Bluetooth: hci1: command tx timeout [ 41.448068][ T6566] Bluetooth: hci0: command tx timeout [ 41.448089][ T6566] Bluetooth: hci3: command tx timeout [ 41.455484][ T6889] syzkaller0: entered allmulticast mode [ 41.479155][ T6889] tipc: Resetting bearer [ 41.486622][ T6886] mmap: syz.2.72 (6886) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.490257][ T6888] tipc: Resetting bearer [ 41.501879][ T6888] tipc: Disabling bearer [ 42.348824][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 42.349335][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 42.867596][ T6555] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 43.019331][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.019366][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.019916][ T6555] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.020120][ T6555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.022982][ T6555] usb 1-1: config 0 descriptor?? [ 43.025977][ T6555] hub 1-1:0.0: USB hub found [ 43.038116][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.038291][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.092814][ T6928] vxcan1: MTU too low for tipc bearer [ 43.093971][ T6928] tipc: Enabling of bearer rejected, failed to enable media [ 43.227258][ T6555] hub 1-1:0.0: 2 ports detected [ 43.547471][ T6565] Bluetooth: hci4: command 0x040f tx timeout [ 43.572045][ T6939] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.573903][ T6939] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 43.756817][ T6555] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 43.756847][ T6555] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 44.752320][ T6555] usbhid 1-1:0.0: can't add hid device: -71 [ 44.752389][ T6555] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.838393][ T6555] usb 1-1: USB disconnect, device number 2 [ 46.147585][ T6973] loop4: detected capacity change from 0 to 4096 [ 46.173624][ T6973] ntfs3(loop4): ino=1a, mi_enum_attr [ 46.173695][ T6973] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 46.288495][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.291440][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.428733][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.428903][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.491416][ T6980] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 46.861549][ T6991] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 46.861696][ T6991] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 47.535165][ T7001] tc_dump_action: action bad kind [ 47.773922][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.781813][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.000243][ T7019] warning: `syz.4.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.422785][ T7040] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.422859][ T7040] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.710337][ T7042] loop3: detected capacity change from 0 to 4096 [ 50.000281][ T7042] ntfs3(loop3): ino=1a, mi_enum_attr [ 50.000312][ T7042] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 50.057467][ T6555] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.237814][ T6555] usb 1-1: Using ep0 maxpacket: 32 [ 50.240438][ T6555] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.240480][ T6555] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 50.240491][ T6555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.241725][ T6555] usb 1-1: config 0 descriptor?? [ 51.160824][ T6555] usbhid 1-1:0.0: can't add hid device: -71 [ 51.160894][ T6555] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 51.163264][ T6555] usb 1-1: USB disconnect, device number 3 [ 51.741052][ T7103] fuse: Bad value for 'fd' [ 51.768092][ T7104] loop0: detected capacity change from 0 to 4096 [ 51.796044][ T7106] loop3: detected capacity change from 0 to 4096 [ 51.809860][ T7104] ntfs3(loop0): ino=1a, mi_enum_attr [ 51.809915][ T7104] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 52.559417][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.559580][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.033978][ T1821] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.099835][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.165'. [ 53.117159][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 53.151230][ T7150] loop3: detected capacity change from 0 to 4096 [ 53.187442][ T1821] usb 1-1: Using ep0 maxpacket: 32 [ 53.392410][ T1821] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 53.392448][ T1821] usb 1-1: config 0 has no interface number 0 [ 53.392468][ T1821] usb 1-1: config 0 interface 184 has no altsetting 0 [ 53.398801][ T1821] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 53.398830][ T1821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.398850][ T1821] usb 1-1: Product: syz [ 53.398862][ T1821] usb 1-1: Manufacturer: syz [ 53.398873][ T1821] usb 1-1: SerialNumber: syz [ 53.407171][ T1821] usb 1-1: config 0 descriptor?? [ 53.412992][ T1821] smsc75xx v1.0.0 [ 53.539025][ T7158] binder: 7157:7158 tried to acquire reference to desc 0, got 1 instead [ 53.539461][ T7158] binder: 7157:7158 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.539472][ T7158] binder: 7158 RLIMIT_NICE not set [ 53.539478][ T7158] binder: 7157:7158 ioctl c0306201 20000240 returned -11 [ 53.539609][ T7158] binder: 7157:7158 got reply transaction with no transaction stack [ 53.539651][ T7158] binder: 7157:7158 transaction reply to 0:0 failed 5/29201/-71, code 0 size 0-0 line 3054 [ 53.544004][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.592569][ T7161] loop2: detected capacity change from 0 to 4096 [ 53.605296][ T7161] ntfs3(loop2): ino=1a, mi_enum_attr [ 53.605333][ T7161] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 54.128051][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 54.165077][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 55.108214][ T7198] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 55.108340][ T7198] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 55.155526][ T7200] trusted_key: syz.4.183 sent an empty control message without MSG_MORE. [ 55.601522][ T7213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.185'. [ 56.091755][ T1821] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 56.091794][ T1821] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.093431][ T1821] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 56.093445][ T1821] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 56.093452][ T1821] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 56.093459][ T1821] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 56.093875][ T1821] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 56.101951][ T1821] usb 1-1: USB disconnect, device number 4 [ 57.229142][ T7239] syzkaller0: entered promiscuous mode [ 57.229177][ T7239] syzkaller0: entered allmulticast mode [ 57.233500][ T1080] syzkaller0: tun_net_xmit 48 [ 57.236843][ T7239] syzkaller0: create flow: hash 2973219092 index 1 [ 57.249948][ T7239] syzkaller0: delete flow: hash 2973219092 index 1 [ 57.702989][ T6565] Bluetooth: hci1: connection err: -111 [ 58.200411][ T7259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 58.200632][ T7259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 58.547260][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.206'. [ 58.647351][ T6565] Bluetooth: hci3: command tx timeout [ 58.668159][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'. [ 59.699299][ T6565] Bluetooth: hci1: connection err: -111 [ 59.920620][ T7297] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.215'. [ 60.082857][ T7308] random: crng reseeded on system resumption [ 61.474388][ T7313] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 61.474490][ T7313] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 61.522162][ T7317] tipc: Started in network mode [ 61.523070][ T7317] tipc: Node identity 3e89d88d7b16, cluster identity 4711 [ 61.524503][ T7317] tipc: Enabled bearer , priority 0 [ 61.527578][ T7317] tipc: Disabling bearer [ 62.588926][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 62.848843][ T6565] Bluetooth: hci1: connection err: -111 [ 63.079400][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.079438][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.079456][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.079468][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.082852][ T10] usb 1-1: config 0 descriptor?? [ 63.085133][ T10] hub 1-1:0.0: USB hub found [ 63.772557][ T7331] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 63.952078][ T7368] tipc: Started in network mode [ 63.953911][ T7368] tipc: Node identity b2bb7227c568, cluster identity 4711 [ 63.955831][ T7368] tipc: Enabled bearer , priority 0 [ 63.959675][ T7368] syzkaller0: entered promiscuous mode [ 63.963955][ T7368] syzkaller0: entered allmulticast mode [ 63.999036][ T10] hub 1-1:0.0: 2 ports detected [ 63.999291][ T10] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 64.001572][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 64.001646][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 64.005488][ T7361] tipc: Resetting bearer [ 64.016574][ T7356] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 64.018023][ T10] usb 1-1: USB disconnect, device number 5 [ 64.020044][ T7356] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 64.044743][ T7361] tipc: Disabling bearer [ 64.129934][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 64.132116][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 64.136270][ T7376] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 64.136312][ T7376] netlink: 10 bytes leftover after parsing attributes in process `syz.3.239'. [ 64.317204][ T7381] tipc: Cannot configure node identity twice [ 64.490094][ T24] cfg80211: failed to load regulatory.db [ 64.490102][ T2415] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490141][ T2415] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.102446][ T7393] fuse: Bad value for 'fd' [ 65.428355][ T6565] Bluetooth: hci1: connection err: -111 [ 65.563480][ T7409] tipc: Enabled bearer , priority 0 [ 65.566224][ T7409] syzkaller0: entered promiscuous mode [ 65.566255][ T7409] syzkaller0: entered allmulticast mode [ 65.577653][ T7408] tipc: Resetting bearer [ 65.583517][ T7408] tipc: Disabling bearer [ 65.897469][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 66.030251][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.033133][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.048037][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 66.051826][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.051873][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 66.051890][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.065111][ T7419] binder: 7417:7419 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.065142][ T7419] binder: 7419 RLIMIT_NICE not set [ 66.065235][ T7419] binder: 7417:7419 ioctl c0306201 20000a00 returned -14 [ 66.098345][ T24] usb 1-1: config 0 descriptor?? [ 66.103090][ T7418] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 66.285384][ T7407] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 66.285487][ T7407] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 67.015047][ T7442] tipc: Enabled bearer , priority 0 [ 67.018869][ T7442] tipc: Resetting bearer [ 67.021572][ T7441] tipc: Disabling bearer [ 67.193363][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 67.193440][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 67.197220][ T24] usb 1-1: USB disconnect, device number 6 [ 67.290756][ T7456] fuse: Bad value for 'fd' [ 67.945864][ T7465] loop1: detected capacity change from 0 to 4096 [ 68.419224][ T7459] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 68.419355][ T7459] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 68.447152][ T7473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.648051][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.649864][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.210041][ T7509] netlink: 172 bytes leftover after parsing attributes in process `syz.3.282'. [ 70.220473][ T7508] binder: 7507:7508 tried to acquire reference to desc 0, got 1 instead [ 70.222805][ T7508] binder: 7507:7508 sending u0000000000000001 node 15, cookie mismatch 0000000000000000 != 0000000001000000 [ 70.225206][ T7508] binder: 7508:7507 translate binder failed [ 70.226849][ T7508] binder: 7507:7508 transaction async to 7507:0 failed 12/29201/-22, code 0 size 72-24 line 3479 [ 70.232236][ T6555] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.321569][ T7512] syz.4.284: attempt to access beyond end of device [ 70.321569][ T7512] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 70.325529][ T7512] syz.4.284: attempt to access beyond end of device [ 70.325529][ T7512] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 70.329076][ T7512] Mount JFS Failure: -5 [ 71.145095][ T7510] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 71.145178][ T7510] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 71.968229][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.971474][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.147913][ T7548] netlink: 172 bytes leftover after parsing attributes in process `syz.0.295'. [ 72.181927][ T7550] syzkaller0: entered promiscuous mode [ 72.183077][ T7550] syzkaller0: entered allmulticast mode [ 72.185929][ T1149] syzkaller0: tun_net_xmit 48 [ 72.188761][ T7550] syzkaller0: create flow: hash 2973219092 index 1 [ 72.203679][ T7550] syzkaller0: delete flow: hash 2973219092 index 1 [ 72.934507][ T7567] syz.1.302: attempt to access beyond end of device [ 72.934507][ T7567] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 72.940268][ T7567] syz.1.302: attempt to access beyond end of device [ 72.940268][ T7567] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 72.944030][ T7567] Mount JFS Failure: -5 [ 72.951112][ T7569] binder: tried to use weak ref as strong ref [ 72.952639][ T7569] binder: 7564:7569 Acquire 1 refcount change on invalid ref 0 ret -22 [ 72.956291][ T7569] binder: 7564:7569 got transaction to invalid handle, 1 [ 72.956333][ T7569] binder: 7564:7569 cannot find target node [ 72.956355][ T7569] binder: 7564:7569 transaction async to 0:0 failed 19/29201/-22, code 0 size 72-24 line 3151 [ 72.963607][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.334509][ T7560] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 73.336559][ T7560] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 73.956446][ T7588] vxcan1 speed is unknown, defaulting to 1000 [ 74.290872][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.293716][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.171335][ T7610] binder: 7609:7610 got transaction to invalid handle, 1 [ 75.171367][ T7610] binder: 7609:7610 cannot find target node [ 75.171391][ T7610] binder: 7609:7610 transaction async to 0:0 failed 22/29201/-22, code 0 size 72-24 line 3151 [ 75.178093][ T6555] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.225751][ T7611] syzkaller0: entered promiscuous mode [ 75.225786][ T7611] syzkaller0: entered allmulticast mode [ 75.469161][ T7621] fuse: Bad value for 'fd' [ 75.487029][ T7621] netfs: Couldn't get user pages (rc=-14) [ 75.544392][ T7575] Set syz1 is full, maxelem 65536 reached [ 75.927926][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.930225][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.942027][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.945015][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.386324][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.389640][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.428580][ T7641] binder: tried to use weak ref as strong ref [ 76.428607][ T7641] binder: 7640:7641 Acquire 1 refcount change on invalid ref 0 ret -22 [ 76.429372][ T7641] binder: 7640:7641 got transaction to invalid handle, 1 [ 76.429381][ T7641] binder: 7640:7641 cannot find target node [ 76.429387][ T7641] binder: 7640:7641 transaction async to 0:0 failed 25/29201/-22, code 0 size 72-24 line 3151 [ 76.429574][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.568900][ T7652] syzkaller0: entered promiscuous mode [ 76.568933][ T7652] syzkaller0: entered allmulticast mode [ 77.514726][ T7674] binder: 7673:7674 got transaction to invalid handle, 1 [ 77.517318][ T7674] binder: 7673:7674 cannot find target node [ 77.517344][ T7674] binder: 7673:7674 transaction async to 0:0 failed 29/29201/-22, code 0 size 72-24 line 3151 [ 77.521129][ T1821] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.776144][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.776335][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.824495][ T7690] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 77.826171][ T7690] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 77.935955][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.936154][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.514941][ T7714] binder: 7712:7714 got transaction to invalid handle, 1 [ 78.516404][ T7714] binder: 7712:7714 cannot find target node [ 78.516419][ T7714] binder: 7712:7714 transaction async to 0:0 failed 33/29201/-22, code 0 size 72-24 line 3151 [ 78.521506][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.273546][ T7771] binder: 7769:7771 got transaction to invalid handle, 1 [ 80.274902][ T7771] binder: 7769:7771 cannot find target node [ 80.509972][ T6565] Bluetooth: hci0: connection err: -111 [ 80.657527][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 80.827436][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 80.833610][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.833653][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 80.833669][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.880384][ T10] usb 1-1: config 0 descriptor?? [ 81.333859][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 81.335763][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 81.337534][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 81.342201][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 81.342370][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 81.353396][ T10] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 81.868543][ T10] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 81.868584][ T10] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 81.873750][ T10] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -71 [ 81.880128][ T10] usb 1-1: USB disconnect, device number 7 [ 81.964805][ T7863] binder: 7860:7863 got transaction to invalid handle, 1 [ 81.964835][ T7863] binder_debug: 2 callbacks suppressed [ 81.964853][ T7863] binder: 7860:7863 cannot find target node [ 81.964860][ T7863] binder: 7860:7863 transaction async to 0:0 failed 40/29201/-22, code 0 size 72-24 line 3151 [ 81.965141][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.754522][ T6565] Bluetooth: hci0: connection err: -111 [ 83.118019][ T7917] tipc: Cannot configure node identity twice [ 83.630844][ T7922] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 83.635002][ T7922] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 83.654226][ T6565] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 83.654259][ T6565] Bluetooth: hci0: adv larger than maximum supported [ 83.654267][ T6565] Bluetooth: hci0: Malformed LE Event: 0x0d [ 84.134294][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.134449][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.171599][ T6565] Bluetooth: hci2: connection err: -111 [ 85.619829][ T7972] fuse: Bad value for 'group_id' [ 85.619850][ T7972] fuse: Bad value for 'group_id' [ 85.636021][ T6565] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 85.636048][ T6565] Bluetooth: hci0: adv larger than maximum supported [ 85.636077][ T6565] Bluetooth: hci0: Malformed LE Event: 0x0d [ 86.683898][ T8000] binder: 7999:8000 tried to acquire reference to desc 0, got 1 instead [ 86.686340][ T8000] binder_alloc: 7999: binder_alloc_buf, no vma [ 86.688058][ T8000] binder: cannot allocate buffer: vma cleared, target dead or dying [ 86.688179][ T8000] binder: 7999:8000 transaction async to 7999:0 failed 45/29189/-3, code 0 size 72-24 line 3335 [ 86.695631][ T6666] binder: undelivered TRANSACTION_ERROR: 29189 [ 86.740476][ T8004] fuse: Bad value for 'group_id' [ 86.741505][ T8004] fuse: Bad value for 'group_id' [ 87.533377][ T6565] Bluetooth: hci1: connection err: -111 [ 88.359477][ T6565] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 88.359519][ T6565] Bluetooth: hci1: adv larger than maximum supported [ 88.360846][ T6565] Bluetooth: hci1: Malformed LE Event: 0x0d [ 88.373405][ T8036] binder: tried to use weak ref as strong ref [ 88.374617][ T8036] binder: 8035:8036 Acquire 1 refcount change on invalid ref 0 ret -22 [ 88.376395][ T8036] binder: 8035:8036 got transaction to invalid handle, 1 [ 88.378051][ T8036] binder: 8035:8036 cannot find target node [ 88.379162][ T8036] binder: 8035:8036 transaction async to 0:0 failed 48/29201/-22, code 0 size 72-24 line 3151 [ 88.380838][ T6666] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.401756][ T8040] fuse: Bad value for 'group_id' [ 88.402848][ T8040] fuse: Bad value for 'group_id' [ 89.247916][ T6565] Bluetooth: hci3: connection err: -111 [ 89.418192][ T8064] binder: 8063:8064 got transaction to invalid handle, 1 [ 89.418223][ T8064] binder: 8063:8064 cannot find target node [ 89.418244][ T8064] binder: 8063:8064 transaction async to 0:0 failed 51/29201/-22, code 0 size 72-24 line 3151 [ 89.418957][ T6630] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.475849][ T6565] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 90.475886][ T6565] Bluetooth: hci2: Malformed LE Event: 0x0d [ 90.621263][ T8098] binder: tried to use weak ref as strong ref [ 90.621288][ T8098] binder: 8097:8098 Acquire 1 refcount change on invalid ref 0 ret -22 [ 90.621393][ T8098] binder: 8097:8098 got transaction to invalid handle, 1 [ 90.621401][ T8098] binder: 8097:8098 cannot find target node [ 90.621408][ T8098] binder: 8097:8098 transaction async to 0:0 failed 54/29201/-22, code 0 size 72-24 line 3151 [ 90.621577][ T6666] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.738785][ T8111] netfs: Couldn't get user pages (rc=-14) [ 91.449547][ T8128] binder: BINDER_SET_CONTEXT_MGR already set [ 91.451227][ T8128] binder: 8127:8128 ioctl 4018620d 20000040 returned -16 [ 91.452955][ T8128] binder: 8127:8128 got transaction to invalid handle, 1 [ 91.454323][ T8128] binder: 8127:8128 cannot find target node [ 92.102535][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 92.265916][ T8161] binder: BINDER_SET_CONTEXT_MGR already set [ 92.267154][ T8161] binder: 8160:8161 ioctl 4018620d 20000040 returned -16 [ 92.270009][ T8161] binder: 8160:8161 got transaction to invalid handle, 1 [ 92.970298][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.977021][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.203774][ T8188] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 93.320856][ T8193] binder: BINDER_SET_CONTEXT_MGR already set [ 93.322318][ T8193] binder: 8190:8193 ioctl 4018620d 20000040 returned -16 [ 93.324223][ T8193] binder: 8190:8193 got transaction to invalid handle, 1 [ 93.340080][ T8192] syzkaller1: entered promiscuous mode [ 93.340110][ T8192] syzkaller1: entered allmulticast mode [ 94.423589][ T8220] syzkaller0: entered promiscuous mode [ 94.425527][ T8220] syzkaller0: entered allmulticast mode [ 94.428718][ T7961] syzkaller0: tun_net_xmit 48 [ 94.435086][ T8220] syzkaller0: create flow: hash 2973219092 index 1 [ 94.458661][ T8219] syzkaller0: delete flow: hash 2973219092 index 1 [ 94.593279][ T8226] binder: 8225:8226 Acquire 1 refcount change on invalid ref 0 ret -22 [ 94.593779][ T8226] binder: 8225:8226 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 94.594168][ T8226] binder: 8225:8226 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 94.594738][ T8226] binder: 8225:8226 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.594757][ T8226] binder: 8226 RLIMIT_NICE not set [ 95.308519][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.310314][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.880653][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.882498][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.300443][ T6565] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 96.300505][ T6565] Bluetooth: hci1: Malformed LE Event: 0x0d [ 97.134671][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.136470][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.145672][ T8273] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 97.447545][ T1821] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.820372][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.822854][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.826896][ T8287] syz2: rxe_newlink: already configured on vxcan1 [ 97.837871][ T1821] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.837900][ T1821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.837919][ T1821] usb 1-1: Product: syz [ 97.837929][ T1821] usb 1-1: Manufacturer: syz [ 97.837938][ T1821] usb 1-1: SerialNumber: syz [ 98.378353][ T8296] syzkaller0: entered promiscuous mode [ 98.378388][ T8296] syzkaller0: entered allmulticast mode [ 99.158182][ T6565] Bluetooth: hci0: connection err: -111 [ 99.934012][ T8315] tipc: Enabled bearer , priority 0 [ 99.937236][ T8315] tipc: Resetting bearer [ 99.951921][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.952104][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.009782][ T8306] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 100.009903][ T8306] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 100.017667][ T8317] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 100.086176][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.086375][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.096798][ T8325] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 100.993034][ T1821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 101.003992][ T1821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 101.006312][ T1821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 101.006347][ T1821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 101.014093][ T1821] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 101.058099][ T24] tipc: Node number set to 1168103565 [ 101.063638][ T8342] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 101.064090][ T8342] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 101.097958][ T1821] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 101.106420][ T1821] usb 1-1: USB disconnect, device number 8 [ 101.279016][ T6565] Bluetooth: hci0: connection err: -111 [ 101.485535][ T8353] tipc: Started in network mode [ 101.485573][ T8353] tipc: Node identity 2e53f9a2dda7, cluster identity 4711 [ 101.485625][ T8353] tipc: Enabled bearer , priority 0 [ 101.487191][ T8353] tipc: Resetting bearer [ 101.492198][ T8352] tipc: Disabling bearer [ 101.903652][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.906160][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.910179][ T8364] syz2: rxe_newlink: already configured on vxcan1 [ 102.297912][ T8351] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 102.298006][ T8351] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 102.319868][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.322192][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.387894][ T8370] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 102.451810][ T8375] syzkaller0: entered promiscuous mode [ 102.451843][ T8375] syzkaller0: entered allmulticast mode [ 102.454587][ T14] syzkaller0: tun_net_xmit 48 [ 103.125116][ T8389] tipc: Enabling of bearer rejected, already enabled [ 103.303706][ T6565] Bluetooth: hci4: connection err: -111 [ 103.556754][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.556923][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.570990][ T8404] syz2: rxe_newlink: already configured on vxcan1 [ 104.098072][ T8415] tipc: Enabling of bearer rejected, already enabled [ 104.120796][ T8398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 104.120888][ T8398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 104.171395][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.171568][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.470803][ T8422] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 104.533012][ T8431] syzkaller0: entered promiscuous mode [ 104.534245][ T8431] syzkaller0: entered allmulticast mode [ 104.536912][ T12] syzkaller0: tun_net_xmit 48 [ 105.282691][ T6565] Bluetooth: hci1: connection err: -111 [ 105.657433][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 105.816403][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.816436][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.816466][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.816477][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.819816][ T10] usb 1-1: config 0 descriptor?? [ 105.826647][ T10] hub 1-1:0.0: USB hub found [ 105.843497][ T8454] tipc: Enabling of bearer rejected, failed to enable media [ 106.025713][ T10] hub 1-1:0.0: 2 ports detected [ 106.173331][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.173526][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.234381][ T8447] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 106.237055][ T10] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 106.237084][ T10] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 106.238885][ T8472] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 106.246800][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 106.251768][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.279269][ T10] usb 1-1: USB disconnect, device number 9 [ 106.481712][ T8452] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 106.483377][ T8452] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 106.505108][ T8479] netfs: Couldn't get user pages (rc=-14) [ 106.826212][ T8489] ------------[ cut here ]------------ [ 106.826240][ T8489] verifier bug: not inlined functions bpf_probe_read_user_str#114 is missing func(1) [ 106.826303][ T8489] WARNING: CPU: 1 PID: 8489 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 106.830309][ T8489] Modules linked in: [ 106.830889][ T8489] CPU: 1 UID: 0 PID: 8489 Comm: syz.4.584 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 106.832442][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 106.833878][ T8489] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 106.835042][ T8489] pc : bpf_check+0x1559c/0x15d8c [ 106.835765][ T8489] lr : bpf_check+0x1559c/0x15d8c [ 106.836427][ T8489] sp : ffff8000a4107480 [ 106.836951][ T8489] x29: ffff8000a4107980 x28: dfff800000000000 x27: 0000000000000006 [ 106.838264][ T8489] x26: 1ffff0001384fa13 x25: ffff80009c27d09c x24: ffff0000fa960008 [ 106.839563][ T8489] x23: ffff80009c27d098 x22: ffff80008b1441c0 x21: ffff800092df4000 [ 106.840913][ T8489] x20: ffff80009c27d09c x19: 1ffff0001384fa13 x18: 00000000b7030000 [ 106.842170][ T8489] x17: 0000000000000000 x16: ffff80008b007340 x15: 0000000000000001 [ 106.843544][ T8489] x14: 1ffff00014820e00 x13: 0000000000000000 x12: 0000000000000000 [ 106.844910][ T8489] x11: 0000000000080000 x10: 0000000000006e00 x9 : 6d4fc0a7b849a300 [ 106.846273][ T8489] x8 : 6d4fc0a7b849a300 x7 : ffff800080563af4 x6 : 0000000000000000 [ 106.847553][ T8489] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807de560 [ 106.848902][ T8489] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 106.850225][ T8489] Call trace: [ 106.850758][ T8489] bpf_check+0x1559c/0x15d8c (P) [ 106.851554][ T8489] bpf_prog_load+0xec8/0x13fc [ 106.852336][ T8489] __sys_bpf+0x450/0x628 [ 106.853010][ T8489] __arm64_sys_bpf+0x80/0x98 [ 106.853750][ T8489] invoke_syscall+0x98/0x2b8 [ 106.854495][ T8489] el0_svc_common+0x130/0x23c [ 106.855289][ T8489] do_el0_svc+0x48/0x58 [ 106.855948][ T8489] el0_svc+0x58/0x180 [ 106.856589][ T8489] el0t_64_sync_handler+0x84/0x12c [ 106.857433][ T8489] el0t_64_sync+0x198/0x19c [ 106.858085][ T8489] irq event stamp: 364 [ 106.858688][ T8489] hardirqs last enabled at (363): [] exit_to_kernel_mode+0xc0/0xf0 [ 106.860120][ T8489] hardirqs last disabled at (364): [] el1_brk64+0x1c/0x48 [ 106.861398][ T8489] softirqs last enabled at (194): [] local_bh_enable+0x10/0x34 [ 106.862748][ T8489] softirqs last disabled at (192): [] local_bh_disable+0x10/0x34 [ 106.864136][ T8489] ---[ end trace 0000000000000000 ]---