last executing test programs: 3.129952324s ago: executing program 0 (id=52): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x3, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x181081) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x8, 0x4}) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) 2.938666932s ago: executing program 3 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 2.173787373s ago: executing program 0 (id=60): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 1.85040793s ago: executing program 3 (id=61): r0 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) 1.822505593s ago: executing program 3 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000e4ffffffffff010000000900020073797a32000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080002400000000b080001400000000014000000110001"], 0x7c}}, 0x20044810) 1.637745279s ago: executing program 3 (id=63): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54fb3000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 1.407900031s ago: executing program 4 (id=69): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a80)="3532e45a2a47b082daed2070cfb7486d610cbf2c61047b598bfe9cd45d4f49e6dc94c3258897ce5d1c79245647804c273df7b1f3a090a6db8597d29d858b3192fe623f600cb431634f4182a8b945a95d3c65a8a15745fac45de5b1988172b0e1e7b06a4f3127d260c9dd68402b1c9fbc5f8f1642170dbad52b1c5c43c486a4a957b356916878cd74336ee8f570470acfc47c4fecf1dc4fa15e34231cd2416c365555ac8d16494170df8159af76b077cdea7582961b8b53c94f63f69b2cd2ddd0e70342cb024c085d413f58279cd1f023f6a70bba2764028cd6bd76b24c0cf74de2deb2d78ba54e70e6510c9829ad154fe7b664167f69328b471490a5c0d2b89e1db10f4037369650b57d71894ac4b336cf720de90040d1099bf5a7fdaf560345372f0d896c786fbd34f0257f18b6c8106d21acd12ab2db03dd15fef1d25da97788cd180c6b6d58b33822bf9839ff2ada5f6e2c8a2d1038292cc05b4a5e63fcbde50a915cd851d1c370b3c9be47ce4dc6e5fed05781c3c921c840738783256f861d1ccb710dc593a98a3e416c89abf2cc2eb19c99d5c3ae3341f7c8c14de7c7e997f008ac48eba6d94c828938685ca421ae4e90a9b45a4e5f1b4ace27816746826627b1829208efdd2c46f82b8259a8a3dbf412e5006cff9cf9778c337a0aab9f215edbfb6d1d0b1f9bac9c995a199074abd14f44fd9039983c703335e2451a8d0662655529ccdbf9b0773868c7686817ef845d611704feec78f492b8e55b4d5a2f58629a0a414d91592a68b9e976e563e390a3abada2a39d882059c4d81b67389561a98cf15eceb764642d42a64bfbda38c336ce45d0c2250c5f0c43c956d1dd9313174d312b02a6d15ecaa436f26153ab5dc10c88270e91b4295aa92458ee4f21e59aed97bb07d04cad7ecf0f6c02b3a118415ddcc7f7bb3df02f6e12a94e0626fd75c3a08206f745034f409260f14340d6a89bba185d", 0x2b7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="608013", 0x3}], 0x1}}], 0x4, 0x2400c0a2) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x306}], 0x1) 1.302286606s ago: executing program 2 (id=71): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x45, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000200)={0x0, 0x67b, 0x3, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0], [0xb50, 0x200, 0x0, 0x4], [0x192, 0x7, 0x1, 0x9], [0xf7, 0x9, 0x3, 0x8001]}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r2, 0xc010644d, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000280)=')\\{$%.,$(\x92@#-(\'@\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRES64=r0]) syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000580)='./bus\x00', 0x7, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESHEX, @ANYBLOB="73325bb9629cd81d63ae646d452628", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="91aefd49bf31af5c01eee6f52a6fc63c5a37f3409b71e0f37db39e59ae74bb6029c336e98f5c8a3164679731f187f5d76af655ae305dbea89dfbfc333276f291cff02479796255565a5f430fd8d62f9fa2c129a99f8fd8c620d05dd889c93f4e9684b10c9952306abab82e7ffc1c823426f620844962d30d82cbacff94c2da4a6988a75b18af3638ac706eaa9afbeede0a39b1f4e7af3c5141e92a1036b7ffb81b55d4d3bb64be6df26f1594a648de3330fd0e2993831bdeb970c13194ac2e22a2fc5a557d02d8d4925d6dc1b47473732da622c5234098cd832ea17067"], 0x9f, 0x19e, &(0x7f0000000840)="$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") 1.284348345s ago: executing program 2 (id=73): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x44, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x4, 0x7f, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0x54c9eb945ee6404, "66cd4ee5"}, @global=@item_4={0x3, 0x1, 0x3, "dc4133d5"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x1, 0x2, 0x2, "10"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x8, "7f3bd888"}, @local=@item_4={0x3, 0x2, 0x0, "13c91c3c"}]}}, 0x0}, 0x0) 1.178155218s ago: executing program 3 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1808000, 0x0) r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x19, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.058871953s ago: executing program 0 (id=75): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 1.025721135s ago: executing program 0 (id=76): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) syz_open_dev$video(0x0, 0x101, 0xab02) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) 774.334363ms ago: executing program 4 (id=77): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x169, &(0x7f00000004c0)=ANY=[], 0x0) 774.220801ms ago: executing program 4 (id=78): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/174, 0xae}], 0x1}, 0x7}], 0x1, 0x31, 0x0) 749.586841ms ago: executing program 4 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0xff35) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x0) 735.395812ms ago: executing program 2 (id=80): close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ca8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010417000000000000000a00000a0900010073"], 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x200450c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 690.251699ms ago: executing program 4 (id=81): prlimit64(0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4000, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @opaque="e26ed0d79d903e54efe5e0bef4c0"}}}}}}, 0x0) 690.108795ms ago: executing program 4 (id=82): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') read$FUSE(r3, &(0x7f0000001280)={0x2020}, 0x2020) 689.977902ms ago: executing program 3 (id=83): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x3c, 0x0) 687.679949ms ago: executing program 2 (id=84): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 605.535874ms ago: executing program 2 (id=85): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) 317.116833ms ago: executing program 0 (id=86): syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x1000}}}}}, 0x0) 262.170443ms ago: executing program 2 (id=88): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000008000000000040000004a"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r3, 0x4, 0x3c00) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xd, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 261.499ms ago: executing program 0 (id=89): syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) 130.747269ms ago: executing program 1 (id=90): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df"], 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000"], 0x10c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x4, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20000000) 84.261971ms ago: executing program 1 (id=91): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) 14.232934ms ago: executing program 1 (id=92): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14.093279ms ago: executing program 1 (id=93): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000009001f007068793110"], 0x20}, 0x1, 0x0, 0x0, 0x48002}, 0x4000040) 14.007871ms ago: executing program 1 (id=94): mmap$IORING_OFF_SQ_RING(0x230c11000000, 0x1000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=95): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c00000004"], 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 28.554152][ T4694] cgroup: Unknown subsys name 'net' [ 28.685253][ T4694] cgroup: Unknown subsys name 'cpuset' [ 28.686697][ T4694] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.895126][ T4694] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.823970][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.824521][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.824632][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.824941][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.825016][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.825110][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.825211][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.825398][ T4720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.825819][ T4720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.826035][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.826465][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.826705][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.827062][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.827109][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.827351][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.827517][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.827964][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.828372][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.828874][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.829025][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.830944][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.831056][ T4720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.831159][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.831396][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.832381][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.193163][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.193578][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.193647][ T4708] bridge_slave_0: entered allmulticast mode [ 30.194129][ T4708] bridge_slave_0: entered promiscuous mode [ 30.209656][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.209690][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.209758][ T4708] bridge_slave_1: entered allmulticast mode [ 30.213721][ T4708] bridge_slave_1: entered promiscuous mode [ 30.221712][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.232097][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.259078][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.259179][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.259298][ T4705] bridge_slave_0: entered allmulticast mode [ 30.259709][ T4705] bridge_slave_0: entered promiscuous mode [ 30.282345][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.282398][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.282453][ T4705] bridge_slave_1: entered allmulticast mode [ 30.283066][ T4705] bridge_slave_1: entered promiscuous mode [ 30.290508][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.291267][ T4708] team0: Port device team_slave_0 added [ 30.292049][ T4708] team0: Port device team_slave_1 added [ 30.298135][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.298147][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.298158][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.299094][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.299101][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.299115][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.311027][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311051][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.311099][ T4711] bridge_slave_0: entered allmulticast mode [ 30.311512][ T4711] bridge_slave_0: entered promiscuous mode [ 30.316675][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.325090][ T4705] team0: Port device team_slave_0 added [ 30.334629][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.334659][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.334718][ T4711] bridge_slave_1: entered allmulticast mode [ 30.335135][ T4711] bridge_slave_1: entered promiscuous mode [ 30.340630][ T4705] team0: Port device team_slave_1 added [ 30.353863][ T4708] hsr_slave_0: entered promiscuous mode [ 30.354215][ T4708] hsr_slave_1: entered promiscuous mode [ 30.360520][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.374078][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.379056][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.379067][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.379081][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.384978][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.385074][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.385129][ T4714] bridge_slave_0: entered allmulticast mode [ 30.385586][ T4714] bridge_slave_0: entered promiscuous mode [ 30.389535][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.389558][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.389648][ T4714] bridge_slave_1: entered allmulticast mode [ 30.390047][ T4714] bridge_slave_1: entered promiscuous mode [ 30.399968][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.400817][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.404386][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.404395][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.404407][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.422052][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.422082][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.422135][ T4706] bridge_slave_0: entered allmulticast mode [ 30.422546][ T4706] bridge_slave_0: entered promiscuous mode [ 30.437470][ T4705] hsr_slave_0: entered promiscuous mode [ 30.437754][ T4705] hsr_slave_1: entered promiscuous mode [ 30.437952][ T4705] debugfs: 'hsr0' already exists in 'hsr' [ 30.437983][ T4705] Cannot create hsr debugfs directory [ 30.443659][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.443724][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.443818][ T4706] bridge_slave_1: entered allmulticast mode [ 30.444249][ T4706] bridge_slave_1: entered promiscuous mode [ 30.451566][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.452534][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.455935][ T4711] team0: Port device team_slave_0 added [ 30.456764][ T4711] team0: Port device team_slave_1 added [ 30.460639][ T4714] team0: Port device team_slave_0 added [ 30.461502][ T4714] team0: Port device team_slave_1 added [ 30.472130][ T4706] team0: Port device team_slave_0 added [ 30.478314][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.478325][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.478341][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.493202][ T4706] team0: Port device team_slave_1 added [ 30.493405][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.493414][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.493427][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.496461][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.496467][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.496479][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.501527][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.501538][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.501552][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.511615][ T4711] hsr_slave_0: entered promiscuous mode [ 30.511896][ T4711] hsr_slave_1: entered promiscuous mode [ 30.512088][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.512099][ T4711] Cannot create hsr debugfs directory [ 30.523960][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.523973][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.523987][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.524763][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.524771][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.524781][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.562199][ T4708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.565661][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.566357][ T4708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.567591][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.582275][ T4708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.584812][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.585158][ T4708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.586030][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.596657][ T4714] hsr_slave_0: entered promiscuous mode [ 30.596924][ T4714] hsr_slave_1: entered promiscuous mode [ 30.597127][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.597136][ T4714] Cannot create hsr debugfs directory [ 30.613009][ T4706] hsr_slave_0: entered promiscuous mode [ 30.613330][ T4706] hsr_slave_1: entered promiscuous mode [ 30.613545][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 30.613555][ T4706] Cannot create hsr debugfs directory [ 30.641397][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.641463][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.641624][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.641653][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.690654][ T4705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.691865][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.692222][ T4705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.694374][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.701720][ T4705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.703498][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.703812][ T4705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.705264][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.731681][ T4711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.735604][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.738645][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.738679][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.738752][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.738780][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.740148][ T4711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.741312][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.741966][ T4711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.743693][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.757206][ T4711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.758269][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.759160][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.778739][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.780238][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.784032][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.786135][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.788502][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.789824][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.790095][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.805661][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.806824][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.821541][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.823209][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.823771][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.823800][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.824141][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.824159][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.840969][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.841389][ T4706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.845653][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.847753][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.848740][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.857031][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.857746][ T4706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.858726][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.867034][ T4706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.873736][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.877860][ T4706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.879079][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.881057][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.893684][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.893712][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.904159][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.909326][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.909351][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.926524][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.926549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.961289][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.962279][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.962308][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.972010][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.019174][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.019193][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.020919][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.020933][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.032358][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.032394][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.033712][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.033737][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.047581][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.051805][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.060867][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.060896][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.068102][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.068131][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.080343][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.080361][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.088811][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.126906][ T4708] veth0_vlan: entered promiscuous mode [ 31.128659][ T4708] veth1_vlan: entered promiscuous mode [ 31.161606][ T4708] veth0_macvtap: entered promiscuous mode [ 31.171841][ T4708] veth1_macvtap: entered promiscuous mode [ 31.182455][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.185101][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.213903][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.223435][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.225053][ T1328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.225125][ T1328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.225182][ T1328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.239411][ T4705] veth0_vlan: entered promiscuous mode [ 31.259388][ T4705] veth1_vlan: entered promiscuous mode [ 31.272307][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.282141][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.282158][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.301026][ T4705] veth0_macvtap: entered promiscuous mode [ 31.302147][ T4705] veth1_macvtap: entered promiscuous mode [ 31.318263][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.321218][ T4711] veth0_vlan: entered promiscuous mode [ 31.326765][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.326777][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.331245][ T4711] veth1_vlan: entered promiscuous mode [ 31.344827][ T4706] veth0_vlan: entered promiscuous mode [ 31.346549][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.347496][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.370829][ T4706] veth1_vlan: entered promiscuous mode [ 31.388755][ T4711] veth0_macvtap: entered promiscuous mode [ 31.392517][ T4711] veth1_macvtap: entered promiscuous mode [ 31.396614][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.409193][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.409209][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.418509][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.419944][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.428559][ T4706] veth0_macvtap: entered promiscuous mode [ 31.436425][ T4708] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.448075][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.448089][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.448676][ T4706] veth1_macvtap: entered promiscuous mode [ 31.452212][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.463611][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.465135][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.465371][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.474688][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.484793][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.485482][ T1328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.515514][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.516238][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517524][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517661][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517676][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517691][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.517705][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.558252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.558267][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.585163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.585179][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.596890][ T4714] veth0_vlan: entered promiscuous mode [ 31.700435][ T30] audit: type=1326 audit(31.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4884 comm="syz.0.1" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd79368 code=0x0 [ 31.853000][ T4718] Bluetooth: hci0: command tx timeout [ 31.912861][ T4720] Bluetooth: hci4: command tx timeout [ 31.913037][ T4720] Bluetooth: hci1: command tx timeout [ 31.913621][ T4720] Bluetooth: hci2: command tx timeout [ 31.914514][ T4718] Bluetooth: hci3: command tx timeout [ 32.439060][ T4714] veth1_vlan: entered promiscuous mode [ 32.450113][ T4714] veth0_macvtap: entered promiscuous mode [ 32.451182][ T4714] veth1_macvtap: entered promiscuous mode [ 32.500094][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.500110][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.500277][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.500286][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.525332][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.546982][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.628284][ T1328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.642510][ T4901] loop1: detected capacity change from 0 to 256 [ 32.645384][ T54] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.645600][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.645656][ T54] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.676536][ T4900] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 32.681359][ T4903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 32.681378][ T4903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 32.681406][ T4903] netlink: 'syz.0.6': attribute type 6 has an invalid length. [ 32.704871][ T4897] Zero length message leads to an empty skb [ 32.718125][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 32.718139][ T4908] nbd: illegal input index 335544320 [ 32.729599][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.729614][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.742222][ T4910] syz.2.9(4910): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 32.782784][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.782800][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.913545][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 32.935192][ T4928] netlink: 'syz.3.11': attribute type 10 has an invalid length. [ 32.953699][ T4928] team0: Port device dummy0 added [ 32.994217][ T4931] loop4: detected capacity change from 0 to 256 [ 32.995437][ T4931] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.999505][ T4931] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.432585][ T4939] syzkaller0: entered promiscuous mode [ 33.432605][ T4939] syzkaller0: entered allmulticast mode [ 33.483798][ T4953] loop5: detected capacity change from 0 to 7 [ 33.489683][ T4953] Dev loop5: unable to read RDB block 7 [ 33.489702][ T4953] loop5: unable to read partition table [ 33.489775][ T4953] loop5: partition table beyond EOD, truncated [ 33.489798][ T4953] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 33.528590][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 33.542336][ T4955] openvswitch: netlink: Flow actions attr not present in new flow. [ 33.752420][ T4965] tipc: Started in network mode [ 33.752444][ T4965] tipc: Node identity 1000001, cluster identity 4711 [ 33.752455][ T4965] tipc: Node number set to 16777217 [ 33.830079][ T4971] loop1: detected capacity change from 0 to 256 [ 33.834947][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.835136][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.929190][ T4718] Bluetooth: hci0: command tx timeout [ 34.032871][ T4718] Bluetooth: hci3: command tx timeout [ 34.033371][ T4718] Bluetooth: hci2: command tx timeout [ 34.033430][ T4718] Bluetooth: hci1: command tx timeout [ 34.033558][ T4718] Bluetooth: hci4: command tx timeout [ 34.443198][ T4801] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.446316][ T4980] loop4: detected capacity change from 0 to 256 [ 34.592966][ T4991] loop4: detected capacity change from 0 to 512 [ 34.885947][ T4801] usb 1-1: Using ep0 maxpacket: 8 [ 34.890209][ T4801] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=67.ea [ 34.897499][ T4801] usb 1-1: config 13 has an invalid interface number: 54 but max is 0 [ 34.897519][ T4801] usb 1-1: config 13 has no interface number 0 [ 34.897540][ T4801] usb 1-1: config 13 interface 54 has no altsetting 0 [ 34.898955][ T4991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.900057][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.900071][ T4801] usb 1-1: Product: syz [ 34.900080][ T4801] usb 1-1: Manufacturer: syz [ 34.900087][ T4801] usb 1-1: SerialNumber: syz [ 34.933980][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.937094][ T4998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.950691][ T4717] Bluetooth: Frame is too long (len 16, expected len 4) [ 35.019320][ T4717] block nbd4: Receive control failed (result -107) [ 35.026941][ T4699] block nbd4: shutting down sockets [ 35.141256][ T4801] keyspan 1-1:13.54: Keyspan - (without firmware) converter detected [ 35.143347][ T4801] usb 1-1: USB disconnect, device number 2 [ 35.145197][ T4801] keyspan 1-1:13.54: device disconnected [ 36.038613][ T4717] Bluetooth: hci0: command tx timeout [ 36.072983][ T4718] Bluetooth: hci1: command tx timeout [ 36.073006][ T4718] Bluetooth: hci2: command tx timeout [ 36.073023][ T4718] Bluetooth: hci3: command tx timeout [ 36.073101][ T4717] Bluetooth: hci4: command tx timeout [ 36.228857][ T5024] FAULT_INJECTION: forcing a failure. [ 36.228857][ T5024] name failslab, interval 1, probability 0, space 0, times 1 [ 36.228880][ T5024] CPU: 1 UID: 0 PID: 5024 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT [ 36.228891][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.228896][ T5024] Call trace: [ 36.228899][ T5024] show_stack+0x2c/0x3c (C) [ 36.228920][ T5024] __dump_stack+0x30/0x40 [ 36.228934][ T5024] dump_stack_lvl+0xd8/0x12c [ 36.228945][ T5024] dump_stack+0x1c/0x28 [ 36.228956][ T5024] should_fail_ex+0x418/0x58c [ 36.228970][ T5024] should_failslab+0xc4/0x120 [ 36.228984][ T5024] __kmalloc_cache_noprof+0x94/0x5fc [ 36.228992][ T5024] xprt_alloc+0x48c/0x754 [ 36.229002][ T5024] xs_setup_xprt+0xa0/0x324 [ 36.229011][ T5024] xs_setup_tcp+0x8c/0x6d4 [ 36.229020][ T5024] xprt_create_transport+0x164/0x61c [ 36.229028][ T5024] rpc_create+0x408/0x734 [ 36.229039][ T5024] nfs_create_rpc_client+0x450/0x60c [ 36.229050][ T5024] nfs4_alloc_client+0x6e8/0xaf8 [ 36.229061][ T5024] nfs_get_client+0xa64/0xdb0 [ 36.229071][ T5024] nfs4_set_client+0x324/0x52c [ 36.229081][ T5024] nfs4_create_server+0x3c8/0xd88 [ 36.229092][ T5024] nfs4_try_get_tree+0x4c/0x114 [ 36.229105][ T5024] nfs_get_tree+0xbf0/0xf18 [ 36.229116][ T5024] vfs_get_tree+0x90/0x28c [ 36.229126][ T5024] fc_mount+0x24/0xac [ 36.229135][ T5024] do_new_mount+0x2a4/0x538 [ 36.229146][ T5024] path_mount+0x5f0/0xa88 [ 36.229156][ T5024] do_mount+0xe8/0x148 [ 36.229165][ T5024] __arm64_sys_mount+0x33c/0x388 [ 36.229176][ T5024] invoke_syscall+0x98/0x244 [ 36.229188][ T5024] el0_svc_common+0xec/0x23c [ 36.229200][ T5024] do_el0_svc+0x4c/0x5c [ 36.229211][ T5024] el0_svc+0x60/0x1d8 [ 36.229233][ T5024] el0t_64_sync_handler+0x44/0x104 [ 36.229244][ T5024] el0t_64_sync+0x198/0x19c [ 36.279705][ T5029] IPVS: set_ctl: invalid protocol: 135 172.30.0.5:20002 [ 36.307817][ T5033] loop0: detected capacity change from 0 to 4096 [ 36.402993][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.403171][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.430913][ T5033] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 36.430931][ T5033] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 36.430937][ T5033] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 36.430962][ T5033] loop0: [ 37.397803][ T5061] Bluetooth: MGMT ver 1.23 [ 37.940632][ T5074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 38.073139][ T4720] Bluetooth: hci0: command tx timeout [ 38.103783][ T5072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 38.117066][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.117252][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.141276][ T5086] FAULT_INJECTION: forcing a failure. [ 38.141276][ T5086] name failslab, interval 1, probability 0, space 0, times 0 [ 38.141296][ T5086] CPU: 0 UID: 0 PID: 5086 Comm: syz.2.68 Not tainted syzkaller #0 PREEMPT [ 38.141307][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.141312][ T5086] Call trace: [ 38.141315][ T5086] show_stack+0x2c/0x3c (C) [ 38.141336][ T5086] __dump_stack+0x30/0x40 [ 38.141350][ T5086] dump_stack_lvl+0xd8/0x12c [ 38.141362][ T5086] dump_stack+0x1c/0x28 [ 38.141373][ T5086] should_fail_ex+0x418/0x58c [ 38.141386][ T5086] should_failslab+0xc4/0x120 [ 38.141398][ T5086] __kmalloc_noprof+0x108/0x6c8 [ 38.141412][ T5086] __seq_open_private+0x34/0xd4 [ 38.141425][ T5086] seq_open_net+0x138/0x1ec [ 38.141433][ T5086] proc_reg_open+0x220/0x468 [ 38.141446][ T5086] do_dentry_open+0x5c4/0xfbc [ 38.141457][ T5086] vfs_open+0x44/0x2dc [ 38.141467][ T5086] path_openat+0x1084/0x18f0 [ 38.141477][ T5086] do_file_open+0x1c8/0x2e8 [ 38.141486][ T5086] do_sys_openat2+0x114/0x1e8 [ 38.141497][ T5086] do_sys_open+0xb0/0xe0 [ 38.141507][ T5086] __arm64_sys_openat+0xa8/0xc4 [ 38.141518][ T5086] invoke_syscall+0x98/0x244 [ 38.141534][ T5086] el0_svc_common+0xec/0x23c [ 38.141546][ T5086] do_el0_svc+0x4c/0x5c [ 38.141557][ T5086] el0_svc+0x60/0x1d8 [ 38.141568][ T5086] el0t_64_sync_handler+0x44/0x104 [ 38.141579][ T5086] el0t_64_sync+0x198/0x19c [ 38.153583][ T4720] Bluetooth: hci4: command tx timeout [ 38.153604][ T4720] Bluetooth: hci3: command tx timeout [ 38.153650][ T4717] Bluetooth: hci2: command tx timeout [ 38.153665][ T4717] Bluetooth: hci1: command tx timeout [ 38.191880][ T5089] 9p: Bad value for 'rfdno' [ 38.195180][ T5089] loop2: detected capacity change from 0 to 8 [ 38.199911][ T5089] Filesystem uses "xz" compression. This is not supported [ 38.257516][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.257714][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.292345][ T5096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.295415][ T5096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.840514][ T5117] loop2: detected capacity change from 0 to 1024 [ 38.840922][ T5117] EXT4-fs: Ignoring removed orlov option [ 38.876117][ T5117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.889290][ T5117] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 38.912596][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.305803][ T5134] Bluetooth: MGMT ver 1.23 [ 39.335188][ T5136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.336547][ T5136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.387833][ T5138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.90'. [ 39.440458][ T5140] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 39.521650][ T1090] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 39.524948][ T4808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.569115][ T5151] kcov: kcov_start: t = ffff0000c67b3b00, size = 524288, area = ffff80009b20a000 [ 39.569171][ T5151] Unable to handle kernel paging request at virtual address dfff800000000065 [ 39.569180][ T5151] KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f] [ 39.569186][ T5151] Mem abort info: [ 39.569190][ T5151] ESR = 0x0000000096000005 [ 39.569194][ T5151] EC = 0x25: DABT (current EL), IL = 32 bits [ 39.569200][ T5151] SET = 0, FnV = 0 [ 39.569204][ T5151] EA = 0, S1PTW = 0 [ 39.569208][ T5151] FSC = 0x05: level 1 translation fault [ 39.569213][ T5151] Data abort info: [ 39.569216][ T5151] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 39.569221][ T5151] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 39.569231][ T5151] GCS = 0, Overlay = 0, DirtyBit = 0 [ 39.569236][ T5151] [dfff800000000065] address between user and kernel address ranges [ 39.569305][ T5151] Internal error: Oops: 0000000096000005 [#1] SMP [ 39.585553][ T5151] Modules linked in: [ 39.586330][ T5151] CPU: 1 UID: 0 PID: 5151 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT [ 39.587874][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.589647][ T5151] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.591043][ T5151] pc : wacom_intuos_irq+0x28d0/0x2984 [ 39.591982][ T5151] lr : wacom_intuos_irq+0x8c/0x2984 [ 39.592930][ T5151] sp : ffff8000927176e0 [ 39.593665][ T5151] x29: ffff800092717740 x28: dfff800000000000 x27: 1fffe0001aba7a49 [ 39.595083][ T5151] x26: 1fffe0001aba7a32 x25: ffff0000d5d3d248 x24: ffff0000d5d3d190 [ 39.596567][ T5151] x23: 0000000000000000 x22: ffff0000f354c0ae x21: dfff800000000000 [ 39.598071][ T5151] x20: 1fffe0001e6a9815 x19: 0000000000000328 x18: 00000000ffffffff [ 39.599606][ T5151] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008a707000 [ 39.601123][ T5151] x14: ffff80008af3f2b0 x13: 0000000000000001 x12: 0000000000000003 [ 39.602560][ T5151] x11: 0000000000000000 x10: 000000000000000f x9 : 0000000000000000 [ 39.603976][ T5151] x8 : 0000000000000065 x7 : 0000000000000000 x6 : 0000000000000000 [ 39.605420][ T5151] x5 : ffff80008a930f98 x4 : 0000000000000008 x3 : ffff80008479c3d4 [ 39.606877][ T5151] x2 : 0000000000000000 x1 : ffff0000c67b3b00 x0 : 0000000000000000 [ 39.608330][ T5151] dump_backtrace(regs = 0000000059c34e7d tsk = 0000000000000000) [ 39.609691][ T5151] Call trace: [ 39.610259][ T5151] wacom_intuos_irq+0x28d0/0x2984 (P) [ 39.611199][ T5151] wacom_wac_irq+0x798/0x59b8 [ 39.612014][ T5151] wacom_raw_event+0x930/0xa74 [ 39.612889][ T5151] __hid_input_report+0x32c/0x408 [ 39.613814][ T5151] hid_safe_input_report+0x50/0x68 [ 39.614696][ T5151] uhid_dev_input2+0xb0/0x134 [ 39.615520][ T5151] uhid_char_write+0x40c/0xa24 [ 39.616352][ T5151] vfs_write+0x2a4/0xa0c [ 39.617099][ T5151] ksys_write+0x12c/0x228 [ 39.617874][ T5151] __arm64_sys_write+0x84/0x98 [ 39.618696][ T5151] invoke_syscall+0x98/0x244 [ 39.619484][ T5151] el0_svc_common+0xec/0x23c [ 39.620265][ T5151] do_el0_svc+0x4c/0x5c [ 39.620982][ T5151] el0_svc+0x60/0x1d8 [ 39.621676][ T5151] el0t_64_sync_handler+0x44/0x104 [ 39.622545][ T5151] el0t_64_sync+0x198/0x19c [ 39.623318][ T5151] Code: 910ca273 d2d00015 d343fe68 f2fbfff5 (387c6908) [ 39.624520][ T5151] ---[ end trace 0000000000000000 ]--- [ 39.663332][ T5114] sctp: sctp_close: sk:000000006115c80e, timeout:0 [ 39.663355][ T5114] sctp: sctp_destroy_sock: sk:000000006115c80e [ 39.663488][ T5122] kcov: kcov_task_exit: t = ffff0000d84b5880, kcov->t = ffff0000d84b5880 [ 39.902273][ T5151] Kernel panic - not syncing: Oops: Fatal exception [ 39.907181][ T5151] SMP: stopping secondary CPUs [ 39.907997][ T5151] Kernel Offset: disabled [ 39.908883][ T5151] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 39.910128][ T5151] Memory Limit: none [ 40.189315][ T5151] Rebooting in 86400 seconds..