last executing test programs: 6.018895693s ago: executing program 3 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.434409994s ago: executing program 3 (id=103): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.172374729s ago: executing program 4 (id=108): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 3.789925488s ago: executing program 4 (id=109): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r3, &(0x7f0000000140)={0x38}, 0x38, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x88}}, 0x0) 3.594155349s ago: executing program 0 (id=110): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x20}, 0x4000) ptrace$pokeuser(0x6, 0x0, 0x358, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.515788602s ago: executing program 3 (id=111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036677265000018000280050008003d00000004001200060003001f00000008000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) 3.095893687s ago: executing program 2 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r0}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, 0x4}, 0x38) 3.094811905s ago: executing program 2 (id=113): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.030048759s ago: executing program 2 (id=114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f27, 0x1f, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x1, 0x3ff, 0x2, 0xc986, 0x74, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x401, 0x20001e56, 0xfffffffc, 0x0, 0x2, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 2.876444724s ago: executing program 1 (id=115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000280)={0x9, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.721736962s ago: executing program 0 (id=116): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getgroups(0x449a065a, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.674111341s ago: executing program 1 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="28000000130001", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x3000c054}, 0x800c4) 2.673929652s ago: executing program 4 (id=118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) 2.599733893s ago: executing program 3 (id=119): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tgkill(0x0, 0x0, 0x20) 2.574619498s ago: executing program 1 (id=120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7"], 0x48) 2.205838337s ago: executing program 3 (id=121): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.205652028s ago: executing program 2 (id=122): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa1, 0xd8, 0xff, 0x20, 0xcf2, 0x6250, 0x4642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x36, 0x10, 0x0, 0xc7, 0x3, 0xe8, 0x8}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x709843, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 1.777228669s ago: executing program 0 (id=123): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 1.738755105s ago: executing program 4 (id=124): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x0, "e922fe53e14fcad1ebe6ff00000000000000080000000000000000000021b49d61"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) getgroups(0x449a065a, 0xfffffffffffffffe) 1.302117689s ago: executing program 3 (id=125): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x6, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.301851495s ago: executing program 1 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r4, 0x1) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) 928.41418ms ago: executing program 2 (id=127): r0 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, &(0x7f0000000680)) 869.443031ms ago: executing program 0 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd03000a200000140000006c07010033d43aff"], 0x340a) 685.937965ms ago: executing program 2 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r6 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x7, {0x0, 0x2, 0x3, 0x6, 0x4}}) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000200)=0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') 644.952478ms ago: executing program 0 (id=130): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040), 0x4) 275.167937ms ago: executing program 1 (id=131): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) 142.097434ms ago: executing program 0 (id=132): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}]}]}}]}, 0x9c}}, 0x0) 141.879625ms ago: executing program 1 (id=133): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xb6b2ca0ebc195c99, {0x2, 0x4e22, @multicast2}, 'veth0_vlan\x00'}) 91.830224ms ago: executing program 4 (id=134): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x9, 0x8}, 0x8) 0s ago: executing program 4 (id=135): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(r0, 0x0, 0x80900) sendfile(r2, r2, 0x0, 0x200000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 31.022872][ T6514] cgroup: Unknown subsys name 'net' [ 31.155543][ T6514] cgroup: Unknown subsys name 'cpuset' [ 31.157559][ T6514] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.284850][ T6514] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.409009][ T6541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.409807][ T6541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.410450][ T6541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.410734][ T6541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.410897][ T6541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.411198][ T6541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.411393][ T6541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.412009][ T6529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.412277][ T6529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.412515][ T6529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.415593][ T6541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.415965][ T6541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.416176][ T6541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.416395][ T6541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.417029][ T6541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.417228][ T6541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.422233][ T6542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.422388][ T6542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.425918][ T6543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.427897][ T6543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.428568][ T6542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.429711][ T6543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.437039][ T6538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.459091][ T6538] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.462456][ T6538] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.576775][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 32.613447][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 32.643066][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.644792][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.646073][ T6525] bridge_slave_0: entered allmulticast mode [ 32.647630][ T6525] bridge_slave_0: entered promiscuous mode [ 32.662701][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.664057][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.665375][ T6525] bridge_slave_1: entered allmulticast mode [ 32.666826][ T6525] bridge_slave_1: entered promiscuous mode [ 32.680522][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 32.688885][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.690152][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.707675][ T6525] team0: Port device team_slave_0 added [ 32.722264][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.723408][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.725024][ T6528] bridge_slave_0: entered allmulticast mode [ 32.725507][ T6528] bridge_slave_0: entered promiscuous mode [ 32.726519][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.726540][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.726583][ T6528] bridge_slave_1: entered allmulticast mode [ 32.726969][ T6528] bridge_slave_1: entered promiscuous mode [ 32.736716][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 32.739047][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.739941][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.743637][ T6525] team0: Port device team_slave_1 added [ 32.759314][ T6528] team0: Port device team_slave_0 added [ 32.777899][ T6528] team0: Port device team_slave_1 added [ 32.779353][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.779371][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.779382][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.780137][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.780145][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.780158][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.792690][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 32.800902][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.801006][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.801092][ T6526] bridge_slave_0: entered allmulticast mode [ 32.801504][ T6526] bridge_slave_0: entered promiscuous mode [ 32.802188][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.802204][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.802260][ T6526] bridge_slave_1: entered allmulticast mode [ 32.802683][ T6526] bridge_slave_1: entered promiscuous mode [ 32.815101][ T6525] hsr_slave_0: entered promiscuous mode [ 32.815438][ T6525] hsr_slave_1: entered promiscuous mode [ 32.822067][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.822098][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.822114][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.822655][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.822661][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.822672][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.852993][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.872590][ T6528] hsr_slave_0: entered promiscuous mode [ 32.872900][ T6528] hsr_slave_1: entered promiscuous mode [ 32.873092][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 32.873136][ T6528] Cannot create hsr debugfs directory [ 32.876060][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.894532][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.895748][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.897009][ T6524] bridge_slave_0: entered allmulticast mode [ 32.898445][ T6524] bridge_slave_0: entered promiscuous mode [ 32.910813][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.912039][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.913250][ T6533] bridge_slave_0: entered allmulticast mode [ 32.914371][ T6533] bridge_slave_0: entered promiscuous mode [ 32.915369][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.915397][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.915930][ T6533] bridge_slave_1: entered allmulticast mode [ 32.916328][ T6533] bridge_slave_1: entered promiscuous mode [ 32.916610][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.916630][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.916679][ T6524] bridge_slave_1: entered allmulticast mode [ 32.917082][ T6524] bridge_slave_1: entered promiscuous mode [ 32.930765][ T6526] team0: Port device team_slave_0 added [ 32.931511][ T6526] team0: Port device team_slave_1 added [ 32.945833][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.955219][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.956439][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.960156][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.966591][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.967361][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.977738][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.977762][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.977784][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.979020][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.985491][ T6524] team0: Port device team_slave_0 added [ 32.988111][ T6524] team0: Port device team_slave_1 added [ 33.004954][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.006190][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.010316][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.014327][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.015472][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.019429][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.025676][ T6533] team0: Port device team_slave_0 added [ 33.026734][ T6533] team0: Port device team_slave_1 added [ 33.051678][ T6526] hsr_slave_0: entered promiscuous mode [ 33.053004][ T6526] hsr_slave_1: entered promiscuous mode [ 33.054413][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 33.054439][ T6526] Cannot create hsr debugfs directory [ 33.054779][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.054787][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.054801][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.055363][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.055369][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.055378][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.094956][ T6533] hsr_slave_0: entered promiscuous mode [ 33.095288][ T6533] hsr_slave_1: entered promiscuous mode [ 33.095449][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 33.095459][ T6533] Cannot create hsr debugfs directory [ 33.096787][ T6524] hsr_slave_0: entered promiscuous mode [ 33.097051][ T6524] hsr_slave_1: entered promiscuous mode [ 33.097630][ T6524] debugfs: 'hsr0' already exists in 'hsr' [ 33.097638][ T6524] Cannot create hsr debugfs directory [ 33.120674][ T6525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.134604][ T6525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.138152][ T6525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.151863][ T6525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.197183][ T6528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.202172][ T6528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.210597][ T6528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.213076][ T6528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.234225][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.236971][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.241668][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.241719][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.241897][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.241960][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.247692][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.249848][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.270980][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.271034][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.271109][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.271132][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.276914][ T6533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.279072][ T6533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.294338][ T6533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.296795][ T6524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.299875][ T6524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.302224][ T6524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.308063][ T6533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.312501][ T6524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.317086][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.317127][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.317195][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.317223][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.338880][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.352048][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.352097][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.352159][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.352182][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.355114][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.356772][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.360281][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.361575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.364664][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.367680][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.370946][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.372518][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.385908][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.404994][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.409343][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.415990][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.416030][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.416459][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.416474][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.416954][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.416968][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.418448][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.421388][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.430352][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.430388][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.440250][ T6525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.442389][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.453760][ T6528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.457027][ T6528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.462781][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.469429][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.469476][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.469782][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.469796][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.472548][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.472566][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.487221][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.498619][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.503375][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.517507][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.517550][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.523115][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.523150][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.549140][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.549190][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.551217][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.551241][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.562967][ T6533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.572209][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.583373][ T6526] veth0_vlan: entered promiscuous mode [ 33.589102][ T6526] veth1_vlan: entered promiscuous mode [ 33.595685][ T6526] veth0_macvtap: entered promiscuous mode [ 33.597766][ T6526] veth1_macvtap: entered promiscuous mode [ 33.603050][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.607729][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.611086][ T207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611289][ T207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611421][ T207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611560][ T207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.623805][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.649310][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.660698][ T6528] veth0_vlan: entered promiscuous mode [ 33.667785][ T6528] veth1_vlan: entered promiscuous mode [ 33.689482][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.690924][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.697164][ T6525] veth0_vlan: entered promiscuous mode [ 33.705405][ T6525] veth1_vlan: entered promiscuous mode [ 33.709247][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.723626][ T6528] veth0_macvtap: entered promiscuous mode [ 33.725402][ T6528] veth1_macvtap: entered promiscuous mode [ 33.728419][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.728434][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.731965][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.742038][ T6525] veth0_macvtap: entered promiscuous mode [ 33.753339][ T6524] veth0_vlan: entered promiscuous mode [ 33.758879][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.761384][ T6525] veth1_macvtap: entered promiscuous mode [ 33.768531][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.773416][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.778155][ T6524] veth1_vlan: entered promiscuous mode [ 33.778477][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778679][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778695][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778708][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.781741][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.790801][ T207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.790856][ T207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791294][ T207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791638][ T207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.805227][ T6526] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.832287][ T6524] veth0_macvtap: entered promiscuous mode [ 33.847233][ T6524] veth1_macvtap: entered promiscuous mode [ 33.850323][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.885411][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.889609][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.889898][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.904417][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904465][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904484][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904498][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.913273][ T6640] loop0: detected capacity change from 0 to 32768 [ 33.919120][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.919147][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.952738][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.952765][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.958975][ T6533] veth0_vlan: entered promiscuous mode [ 33.973194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.973227][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.983349][ T6640] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 33.992356][ T6640] allowing incompatible features above 0.0: (unknown version) [ 33.993760][ T6640] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 33.996267][ T6640] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 33.997642][ T6640] bcachefs (loop0): initializing new filesystem [ 34.000420][ T6640] bcachefs (loop0): going read-write [ 34.002446][ T6533] veth1_vlan: entered promiscuous mode [ 34.012612][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.012637][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.026653][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.026680][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.030350][ T6533] veth0_macvtap: entered promiscuous mode [ 34.031885][ T6533] veth1_macvtap: entered promiscuous mode [ 34.035168][ T6640] bcachefs (loop0): marking superblocks [ 34.044498][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.049689][ T6640] bcachefs (loop0): initializing freespace [ 34.051913][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.057928][ T6640] bcachefs (loop0): done initializing freespace [ 34.058800][ T6640] bcachefs (loop0): reading snapshots table [ 34.058823][ T6640] bcachefs (loop0): reading snapshots done [ 34.064996][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065148][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065189][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065219][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.066397][ T6654] process 'syz.2.3' launched '/dev/fd/4' with NULL argv: empty string added [ 34.079069][ T6640] bcachefs (loop0): done starting filesystem [ 34.146131][ T6656] loop1: detected capacity change from 0 to 64 [ 34.162248][ T6659] loop3: detected capacity change from 0 to 512 [ 34.167376][ T6659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.172939][ T6526] bcachefs (loop0): shutting down [ 34.172982][ T6526] bcachefs (loop0): going read-only [ 34.173060][ T6526] bcachefs (loop0): finished waiting for writes to stop [ 34.182680][ T207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.182708][ T207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.200411][ T6659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.216507][ T6526] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 34.261675][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.261704][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.287221][ T6526] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 34.290418][ T6526] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 34.290830][ T6526] bcachefs (loop0): marking filesystem clean [ 34.504199][ T6538] Bluetooth: hci0: command tx timeout [ 34.504543][ T6538] Bluetooth: hci1: command tx timeout [ 34.504737][ T6538] Bluetooth: hci3: command tx timeout [ 34.504861][ T6538] Bluetooth: hci2: command tx timeout [ 34.505077][ T6538] Bluetooth: hci4: command tx timeout [ 34.566274][ T6526] bcachefs (loop0): shutdown complete [ 34.581036][ T6674] loop2: detected capacity change from 0 to 4096 [ 34.615890][ T6674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.648003][ T6677] loop4: detected capacity change from 0 to 128 [ 34.653784][ T6677] qnx6: unable to set blocksize [ 34.673553][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.768298][ T6524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.806928][ T6684] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 34.943621][ T6688] loop3: detected capacity change from 0 to 128 [ 34.944562][ T6688] ======================================================= [ 34.944562][ T6688] WARNING: The mand mount option has been deprecated and [ 34.944562][ T6688] and is ignored by this kernel. Remove the mand [ 34.944562][ T6688] option from the mount to silence this warning. [ 34.944562][ T6688] ======================================================= [ 34.957630][ T6688] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 34.957841][ T6688] hpfs: filesystem error: improperly stopped [ 34.957854][ T6688] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 34.957863][ T6688] hpfs: You really don't want any checks? You are crazy... [ 34.957958][ T6688] hpfs: hpfs_map_sector(): read error [ 34.957962][ T6688] hpfs: code page support is disabled [ 34.958563][ T6688] hpfs: hpfs_map_4sectors(): unaligned read [ 34.958648][ T6688] hpfs: hpfs_map_4sectors(): unaligned read [ 34.958654][ T6688] hpfs: filesystem error: unable to find root dir [ 35.578576][ T6695] loop1: detected capacity change from 0 to 131072 [ 35.581483][ T6695] f2fs: Unknown parameter 'blacklist' [ 35.713539][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.716893][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.722124][ T6703] input: syz1 as /devices/virtual/input/input3 [ 36.336610][ T6719] ptrace attach of "./syz-executor exec"[6524] was attempted by "./syz-executor exec"[6719] [ 36.558019][ T6728] ubi31: attaching mtd0 [ 36.562953][ T6728] ubi31: scanning is finished [ 36.562999][ T6728] ubi31: empty MTD device detected [ 36.802654][ T6538] Bluetooth: hci2: command tx timeout [ 36.802692][ T6538] Bluetooth: hci3: command tx timeout [ 36.802712][ T6538] Bluetooth: hci1: command tx timeout [ 36.802732][ T6538] Bluetooth: hci0: command tx timeout [ 36.810067][ T52] Bluetooth: hci4: command tx timeout [ 36.994143][ T6728] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 36.994175][ T6728] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 36.994194][ T6728] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 36.994201][ T6728] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 36.994208][ T6728] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 36.994215][ T6728] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 36.994220][ T6728] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4284180887 [ 36.994226][ T6728] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 36.994441][ T6734] ubi31: background thread "ubi_bgt31d" started, PID 6734 [ 37.078862][ T6740] loop2: detected capacity change from 0 to 128 [ 37.084846][ T6740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.306258][ T6745] Zero length message leads to an empty skb [ 37.339220][ T6528] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.436356][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.438278][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.931494][ T52] Bluetooth: hci0: command tx timeout [ 38.931538][ T52] Bluetooth: hci1: command tx timeout [ 38.931607][ T52] Bluetooth: hci3: command tx timeout [ 38.931762][ T52] Bluetooth: hci2: command tx timeout [ 38.931778][ T52] Bluetooth: hci4: command tx timeout [ 38.986454][ T6774] geneve0: entered allmulticast mode [ 39.478881][ T6794] loop0: detected capacity change from 0 to 4096 [ 39.482546][ T6796] loop2: detected capacity change from 0 to 512 [ 39.492637][ T6796] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 39.492949][ T6796] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.41: invalid indirect mapped block 2683928664 (level 1) [ 39.497125][ T6796] EXT4-fs (loop2): Remounting filesystem read-only [ 39.497472][ T6796] EXT4-fs (loop2): 1 truncate cleaned up [ 39.497596][ T6794] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.499894][ T6796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.501257][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.629431][ T6528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.653271][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.913505][ T6804] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 39.984416][ T6811] loop0: detected capacity change from 0 to 512 [ 39.985730][ T6811] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.987568][ T6811] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.987629][ T6811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.990218][ T6811] EXT4-fs (loop0): 1 truncate cleaned up [ 39.992537][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.058679][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.398332][ T6822] loop0: detected capacity change from 0 to 64 [ 40.432114][ T6824] loop4: detected capacity change from 0 to 16 [ 40.443636][ T6824] erofs (device loop4): mounted with root inode @ nid 36. [ 40.542803][ T6831] binder: 6830:6831 tried to acquire reference to desc 0, got 1 instead [ 40.543285][ T6831] binder: 6830:6831 got reply transaction with bad transaction stack, transaction 5 has target 6830:0 [ 40.543383][ T6831] binder: 6830:6831 transaction reply to 0:0 failed 12/29201/-71, code 0 size 0-0 line 3069 [ 40.544993][ T24] binder: release 6830:6831 transaction 5 out, still active [ 40.545004][ T24] binder: undelivered TRANSACTION_COMPLETE [ 40.545013][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.613731][ T6834] erofs (device loop4): read error -117 @ 72 of nid 36 [ 40.811286][ T9] binder: send failed reply for transaction 5, target dead [ 41.044006][ T6540] Bluetooth: hci4: command tx timeout [ 41.045371][ T6540] Bluetooth: hci2: command tx timeout [ 41.046526][ T6540] Bluetooth: hci3: command tx timeout [ 41.047698][ T6540] Bluetooth: hci1: command tx timeout [ 41.048852][ T6540] Bluetooth: hci0: command tx timeout [ 42.006218][ T6859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.008586][ T6859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.017598][ T52] Bluetooth: hci0: Malformed LE Event: 0x0b [ 42.627968][ T6879] ufs: You didn't specify the type of your ufs filesystem [ 42.627968][ T6879] [ 42.627968][ T6879] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 42.627968][ T6879] [ 42.627968][ T6879] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 42.628004][ T6879] ufs: ufstype=old is supported read-only [ 42.628373][ T6879] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 42.981446][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.981630][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.986411][ T6881] loop2: detected capacity change from 0 to 32768 [ 42.993462][ T6881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.68 (6881) [ 43.000570][ T6881] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.002662][ T6881] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 43.047463][ T1818] cfg80211: failed to load regulatory.db [ 43.094458][ T6881] BTRFS info (device loop2): setting nodatasum [ 43.094494][ T6881] BTRFS info (device loop2): setting nodatacow [ 43.097253][ T6881] BTRFS info (device loop2): enabling free space tree [ 43.097283][ T6881] BTRFS info (device loop2): max_inline set to 0 [ 43.483470][ T6909] loop0: detected capacity change from 0 to 1024 [ 43.486579][ T6909] EXT4-fs: Ignoring removed nobh option [ 43.487533][ T6909] EXT4-fs: inline encryption not supported [ 43.499358][ T6528] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.543778][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.578087][ T6909] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.73: Allocating blocks 385-513 which overlap fs metadata [ 43.838134][ T6909] EXT4-fs (loop0): pa 0000000024e47fa4: logic 16, phys. 129, len 24 [ 43.838171][ T6909] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 43.846012][ T6909] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 43.848399][ T6909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.848399][ T6909] [ 43.851939][ T6909] EXT4-fs (loop0): Total free blocks count 0 [ 43.852089][ T6909] EXT4-fs (loop0): Free/Dirty block details [ 43.854442][ T6909] EXT4-fs (loop0): free_blocks=128 [ 43.855690][ T6909] EXT4-fs (loop0): dirty_blocks=0 [ 43.855733][ T6909] EXT4-fs (loop0): Block reservation details [ 43.855750][ T6909] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 43.885810][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.889206][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.137448][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.144152][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.369962][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372582][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372704][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372766][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372789][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372803][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372817][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372829][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372841][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.372851][ T24] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 44.390687][ T24] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.470002][ T6932] fido_id[6932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.750843][ T6943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 45.518121][ T6949] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 45.538497][ T6962] loop3: detected capacity change from 0 to 512 [ 45.543341][ T6962] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.90: casefold flag without casefold feature [ 45.547258][ T6962] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.90: couldn't read orphan inode 15 (err -117) [ 45.549702][ T6962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.577855][ T6524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.744657][ T1818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.424273][ T1818] usb 1-1: Using ep0 maxpacket: 8 [ 46.431538][ T6989] netlink: 'syz.2.97': attribute type 8 has an invalid length. [ 46.441504][ T1818] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 46.444483][ T1818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 46.444514][ T1818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 46.444529][ T1818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 46.444541][ T1818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.444561][ T1818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 46.444571][ T1818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.498815][ T6996] loop4: detected capacity change from 0 to 16 [ 46.505390][ T6996] erofs (device loop4): mounted with root inode @ nid 36. [ 47.235763][ T1818] usb 1-1: GET_CAPABILITIES returned 0 [ 47.235797][ T1818] usbtmc 1-1:16.0: can't read capabilities [ 47.386648][ T52] Bluetooth: hci4: Malformed Event: 0x02 [ 47.420993][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.422624][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.425201][ T7016] loop4: detected capacity change from 0 to 1024 [ 47.447693][ T6657] usb 1-1: USB disconnect, device number 2 [ 47.458882][ T7016] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 47.458946][ T7016] EXT4-fs (loop4): mount failed [ 47.630147][ T7024] loop1: detected capacity change from 0 to 64 [ 48.005695][ T7028] pim6reg: entered allmulticast mode [ 48.615615][ T31] audit: type=1326 audit(48.580:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.620325][ T31] audit: type=1326 audit(48.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.621464][ T31] audit: type=1326 audit(48.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.621548][ T31] audit: type=1326 audit(48.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.621615][ T31] audit: type=1326 audit(48.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.621769][ T31] audit: type=1326 audit(48.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.621832][ T31] audit: type=1326 audit(48.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.621889][ T31] audit: type=1326 audit(48.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.622083][ T31] audit: type=1326 audit(48.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=271 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.622139][ T31] audit: type=1326 audit(48.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.2.113" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a75c068 code=0x7ffc0000 [ 48.794043][ T7025] pim6reg: left allmulticast mode [ 48.889471][ T7046] binder: 7045:7046 tried to acquire reference to desc 0, got 1 instead [ 48.942292][ T7047] binder: 7045:7047 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.942319][ T7047] binder: 7047 RLIMIT_NICE not set [ 48.942344][ T7047] binder: 7047 RLIMIT_NICE not set [ 48.942917][ T7047] binder: 7047 RLIMIT_NICE not set [ 48.943076][ T7047] binder_alloc: 7045: binder_alloc_buf, no vma [ 48.943089][ T7047] binder: cannot allocate buffer: vma cleared, target dead or dying [ 48.943112][ T7047] binder: 7045:7047 transaction reply to 7045:7046 failed 18/29189/-3, code 0 size 0-0 line 3335 [ 48.943131][ T7047] binder: send failed reply for transaction 17 to 7045:7046 [ 48.978598][ T24] binder: undelivered TRANSACTION_COMPLETE [ 48.978617][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 48.978664][ T24] binder: undelivered TRANSACTION_ERROR: 29190 [ 49.022682][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 49.477594][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.477761][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.481901][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.483891][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.485977][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.487711][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.741353][ T7107] ------------[ cut here ]------------ [ 51.741379][ T7107] verifier bug: not inlined functions bpf_probe_read_user#112 is missing func(1) [ 51.745054][ T7107] WARNING: CPU: 1 PID: 7107 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 51.748807][ T7107] Modules linked in: [ 51.749423][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.4.135 Not tainted syzkaller #0 PREEMPT [ 51.750693][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 51.752213][ T7107] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 51.753407][ T7107] pc : bpf_check+0x1559c/0x15d8c [ 51.754296][ T7107] lr : bpf_check+0x1559c/0x15d8c [ 51.755142][ T7107] sp : ffff80009f407480 [ 51.755815][ T7107] x29: ffff80009f407980 x28: dfff800000000000 x27: 0000000000000006 [ 51.757118][ T7107] x26: 1ffff0001374fc12 x25: ffff80009ba7e094 x24: ffff0000d6ce8008 [ 51.758493][ T7107] x23: ffff80009ba7e090 x22: ffff80008b154800 x21: ffff800092e12000 [ 51.759843][ T7107] x20: ffff80009ba7e094 x19: 1ffff0001374fc12 x18: 1fffe0003379be88 [ 51.761201][ T7107] x17: ffff80008f7de000 x16: ffff80008b0155d8 x15: 0000000000000001 [ 51.762529][ T7107] x14: 1fffe0003379e900 x13: 0000000000000000 x12: 0000000000000000 [ 51.763786][ T7107] x11: 0000000000080000 x10: 0000000000000003 x9 : 1e0c6f721a8b6700 [ 51.765100][ T7107] x8 : 1e0c6f721a8b6700 x7 : ffff800080490a90 x6 : 0000000000000000 [ 51.766285][ T7107] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 51.767546][ T7107] x2 : ffff80009f407040 x1 : ffff80008b668440 x0 : 0000000000000001 [ 51.768821][ T7107] Call trace: [ 51.769311][ T7107] bpf_check+0x1559c/0x15d8c (P) [ 51.770025][ T7107] bpf_prog_load+0xec8/0x13fc [ 51.770722][ T7107] __sys_bpf+0x450/0x628 [ 51.771379][ T7107] __arm64_sys_bpf+0x80/0x98 [ 51.772048][ T7107] invoke_syscall+0x98/0x2b8 [ 51.772810][ T7107] el0_svc_common+0x130/0x23c [ 51.773508][ T7107] do_el0_svc+0x48/0x58 [ 51.774137][ T7107] el0_svc+0x5c/0x254 [ 51.774741][ T7107] el0t_64_sync_handler+0x84/0x12c [ 51.775614][ T7107] el0t_64_sync+0x198/0x19c [ 51.776320][ T7107] irq event stamp: 340 [ 51.776963][ T7107] hardirqs last enabled at (339): [] finish_lock_switch+0xb0/0x1c0 [ 51.778549][ T7107] hardirqs last disabled at (340): [] el1_brk64+0x20/0x54 [ 51.779899][ T7107] softirqs last enabled at (196): [] local_bh_enable+0x10/0x34 [ 51.781329][ T7107] softirqs last disabled at (194): [] local_bh_disable+0x10/0x34 [ 51.782767][ T7107] ---[ end trace 0000000000000000 ]---