last executing test programs: 50.401662352s ago: executing program 3 (id=26): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000019580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f00000195c0)={0x0, 0x0, &(0x7f0000019600)={&(0x7f0000019640)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000019880)={&(0x7f0000019540)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000019840)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xe777bb1c91e6baa8) openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, 0x0, 0x4, 0x1) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 38.993995194s ago: executing program 3 (id=39): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f00000001c0)=[{0x209, 0x9, 0x0, 0x7fc00100}, {0x645, 0xe, 0x8, 0x100001}, {0x6, 0x3, 0x9, 0x3f800000}, {0x4, 0x0, 0x9, 0xfffffff8}, {0x82f, 0xc, 0x0, 0x10001}, {0x7, 0x7, 0xcd}]}) inotify_init1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000240)={r1, 0x80001, 0x80000004}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x220002) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000380)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$dsp(r3, &(0x7f0000000780)=""/4086, 0xff6) write$dsp(r2, &(0x7f0000001780)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$mtd(&(0x7f00000017c0), 0x46, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000001880), 0x2, 0x143102) writev(r4, &(0x7f00000018c0)=[{&(0x7f0000001900)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) 33.870116947s ago: executing program 0 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000900)=""/102392, 0x18ff8) pipe(&(0x7f0000019940)) rseq(&(0x7f0000019980), 0x20, 0x0, 0x0) io_pgetevents(0x0, 0x1, 0x0, &(0x7f0000019d40), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) 33.651448956s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r1, &(0x7f00000008c0)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x179) 32.225774901s ago: executing program 0 (id=46): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', 0x0, &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) 29.897806562s ago: executing program 3 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632025f61bee2d2b43bd5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a2063"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.106200977s ago: executing program 0 (id=52): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b01020301090224000100", @ANYRES64], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00') ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) 25.960252959s ago: executing program 3 (id=54): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) pipe2$watch_queue(&(0x7f0000000100), 0x80) add_key(0x0, &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="f8", 0x1, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000003200)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000001c200)={0x0, 0x0, &(0x7f000001c240)={&(0x7f000001c280)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f000001c3c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video(&(0x7f000001c440), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f000001c480)={0x2, @pix={0x2, 0x2002, 0x64737664, 0x0, 0x0, 0x1, 0x6, 0xfeedcaff, 0x3, 0x0, 0x1, 0x5}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c580)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f000001c5c0)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000001c640)={0x0, 0x0, &(0x7f000001c680)={&(0x7f000001c6c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 24.674458111s ago: executing program 0 (id=56): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r6, r5, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYRES64, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, &(0x7f0000019600)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f0000000000950000000000"], &(0x7f0000019640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) socket(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019680)={0x0, 0x2a, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYRESDEC=r4], 0xcdc}, 0x1, 0x0, 0x0, 0xa89cb915cb77a2cd}, 0x89) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x68, r8, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000019880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 22.976558516s ago: executing program 3 (id=59): r0 = msgget(0x0, 0x322) msgctl$IPC_RMID(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/7, 0x7, 0x3, 0x9}) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x10000000f, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0xeb, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x103, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x8, 0x7, 0x5, 0x0, 0xe, 0x312, 0x81, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x53cf697b, 0x4, 0x4, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x8024, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x3975, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0x1003]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 19.000570842s ago: executing program 4 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r2, &(0x7f00000008c0)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x179) 18.659819618s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000940)='./proc/sys/kernel/hostname\x00', &(0x7f00000006c0), 0x2000090, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18.350701337s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x20, 0x7, 0x1, 0xca8, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x49, 0x1, 0x0, [{@broadcast, 0x1}, {@remote, 0xffffffff}, {@empty, 0x4}]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0x4, [0xfffffffd]}, @noop, @generic={0x83, 0xc, "d6687ef5df164e4d22ae"}, @rr={0x7, 0x1b, 0x92, [@multicast1, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xfd, [@private=0xa010100, @local, @multicast2, @rand_addr=0x64010102, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000400000000000040e3ffffff000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 15.363627343s ago: executing program 1 (id=65): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 15.339380108s ago: executing program 4 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x10000, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x4010) 15.020345567s ago: executing program 1 (id=68): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000f00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000010c0), 0x8) listen(r3, 0x5) accept(r3, 0x0, 0x0) 12.209990264s ago: executing program 1 (id=69): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) pipe2$watch_queue(&(0x7f0000000100), 0x80) add_key(0x0, &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="f8", 0x1, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000003200)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000001c200)={0x0, 0x0, &(0x7f000001c240)={&(0x7f000001c280)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f000001c3c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video(&(0x7f000001c440), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f000001c480)={0x2, @pix={0x2, 0x2002, 0x64737664, 0x0, 0x0, 0x1, 0x6, 0xfeedcaff, 0x3, 0x0, 0x1, 0x5}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001c580)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f000001c5c0)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000001c640)={0x0, 0x0, &(0x7f000001c680)={&(0x7f000001c6c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) 11.04081219s ago: executing program 1 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) 10.549298388s ago: executing program 2 (id=71): ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000100)={0x0, 0x40, 0x2, 0xffffffff, 0x10, 0xfffffed8, 0x2, 0xfffffed8, 0x20, 0x4000001, 0x20, 0x1, &(0x7f0000000180)=[0xfffffffc], 0x1, 0x0}) inotify_init1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000240)={r0, 0x80001, 0x80000004}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x220002) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000380)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$dsp(r2, &(0x7f0000000780)=""/4086, 0xff6) write$dsp(r1, &(0x7f0000001780)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$mtd(&(0x7f00000017c0), 0x46, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000001880), 0x2, 0x143102) writev(r3, &(0x7f00000018c0)=[{&(0x7f0000001900)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) 9.870819246s ago: executing program 4 (id=72): getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x3, 0x1) bind(r2, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) r3 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) connect(r3, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) 5.839582728s ago: executing program 32 (id=59): r0 = msgget(0x0, 0x322) msgctl$IPC_RMID(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/7, 0x7, 0x3, 0x9}) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x10000000f, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) timerfd_create(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0xeb, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x103, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x2, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x8, 0x7, 0x5, 0x0, 0xe, 0x312, 0x81, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x53cf697b, 0x4, 0x4, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x356, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x8024, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x3975, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0x1003]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.639822349s ago: executing program 0 (id=74): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019180)=0x7) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000192c0)={'bond0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019300)={0x6, 0x3, &(0x7f00000193c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000019400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019440)={r5, r4, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=ANY=[@ANYRES64, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019540)={0x10, 0x4, &(0x7f0000019600)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f0000000000950000000000"], &(0x7f0000019640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) socket(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019680)={0x0, 0x2a, &(0x7f00000196c0)={&(0x7f0000019700)=ANY=[@ANYRESDEC=r3], 0xcdc}, 0x1, 0x0, 0x0, 0xa89cb915cb77a2cd}, 0x89) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000019740), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)={0x68, r7, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000019880)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 5.578278551s ago: executing program 2 (id=75): socket(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_acct\x00') timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000c00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000e80)={'dummy0\x00', 0x0}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x22, r5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.560896676s ago: executing program 4 (id=76): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/hostname\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000940)='./proc/sys/kernel/hostname\x00', &(0x7f00000006c0), 0x2000090, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.196146776s ago: executing program 4 (id=77): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)="39afabf445b93dc11880518260bb4f8db20c78a639c56692", 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x30}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x2, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x6, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000080)="0080048b0038e2", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x606}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000020000000c00044000000000000000052c000000180a01080000000000000000070000040900010073797a31000000000c00054000000000000000016c00000006100b040000000000000000020000000900010073797a300000000000400004803c0001800a0001006d617463680000002c000280080002400000000108000240000000021800030000000000ffffffff00000000ffffffff0200000014000000110001000000639496cd4a680000000000000200000ae96ea0e8c84656a6a15385096e5b04398a6c9836d63dd465127aa110abcef2d01d0e24d710f374b226e1de50ed8917b767be0200000000000000928186e53458927f3dda9e96b1284869e2106008c59d29e786ab506d5c08a083d7f799fb2d5f617c42f424f3f2cbf0c26556cb0000000000000000a85180"], 0xe0}, 0x1, 0x0, 0x0, 0x24000890}, 0x404c080) r5 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r5, &(0x7f0000000800)="1234", 0x4, 0x0, &(0x7f0000000880)={0x2, 0x1234, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 4.150141411s ago: executing program 2 (id=78): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) 1.660339006s ago: executing program 4 (id=79): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000f00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000010c0), 0x8) listen(r3, 0x5) accept(r3, 0x0, 0x0) 1.240803672s ago: executing program 1 (id=80): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x60842, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000340)={r0}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000380)={0x33, 0x1f, 0xa, 0xb, 0x0, 0x81}) ioctl(r1, 0x890b, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r1, &(0x7f0000000400), 0x12) connect$x25(r1, &(0x7f0000000440)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) eventfd(0x201) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000600)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0xff00, 0x80, 0x1, 0x2d8}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa007, 0x2000, 0x1, 0xb2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb38e, 0x20, 0x1, 0x1c9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8229, 0x8c1, 0x0, 0x3dc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3ab8, 0x1, 0x5, 0x38c, 0x0, r1}}], 0x4, &(0x7f0000000940)={0x2e, 0x1, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x4, 0x3f5, 0x0, &(0x7f0000001b00)=@buf_4k="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"}}, &(0x7f0000001a80)) timer_settime(r3, 0x1, &(0x7f0000001ac0)={{}, {0x77359400}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x202000, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000280)={0x84000800, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 1.105315594s ago: executing program 2 (id=81): socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) pselect6(0x40, &(0x7f00000006c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000700)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 598.881035ms ago: executing program 2 (id=82): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 0s ago: executing program 2 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x14, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@s}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x20, 0x7, 0x1, 0xca8, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x68, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x49, 0x1, 0x0, [{@broadcast, 0x1}, {@remote, 0xffffffff}, {@empty, 0x4}]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0x4, [0xfffffffd]}, @noop, @generic={0x83, 0xc, "d6687ef5df164e4d22ae"}, @rr={0x7, 0x1b, 0x92, [@multicast1, @private=0xa010102, @rand_addr=0x64010102, @multicast1, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0xfd, [@private=0xa010100, @local, @multicast2, @rand_addr=0x64010102, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000400000000000040e3ffffff000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.40' (ED25519) to the list of known hosts. [ 92.280023][ T5582] cgroup: Unknown subsys name 'net' [ 92.541563][ T5582] cgroup: Unknown subsys name 'cpuset' [ 92.585486][ T5582] cgroup: Unknown subsys name 'rlimit' [ 92.647284][ T1004] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 94.608952][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.266247][ T4910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.293565][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.309827][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.335497][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.350655][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.364224][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.366211][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.369109][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.369806][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.370670][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.371117][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.372135][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.407300][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.412150][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.413878][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.414655][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.414973][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.419643][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.420102][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.423633][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.426379][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.426892][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.429885][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.433085][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.433516][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.597639][ T60] Bluetooth: hci3: command tx timeout [ 99.597655][ T5610] Bluetooth: hci4: command tx timeout [ 99.597831][ T60] Bluetooth: hci2: command tx timeout [ 99.597843][ T5610] Bluetooth: hci1: command tx timeout [ 99.597943][ T60] Bluetooth: hci0: command tx timeout [ 100.482263][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.482415][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.482977][ T5597] bridge_slave_0: entered allmulticast mode [ 100.509804][ T5597] bridge_slave_0: entered promiscuous mode [ 100.582820][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.582960][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.583169][ T5597] bridge_slave_1: entered allmulticast mode [ 100.586176][ T5597] bridge_slave_1: entered promiscuous mode [ 100.592664][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.592873][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.593046][ T5596] bridge_slave_0: entered allmulticast mode [ 100.596839][ T5596] bridge_slave_0: entered promiscuous mode [ 100.602541][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.602669][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.602847][ T5594] bridge_slave_0: entered allmulticast mode [ 100.606925][ T5594] bridge_slave_0: entered promiscuous mode [ 100.612744][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.612870][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.613499][ T5598] bridge_slave_0: entered allmulticast mode [ 100.620361][ T5598] bridge_slave_0: entered promiscuous mode [ 100.692914][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.693028][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.693140][ T5596] bridge_slave_1: entered allmulticast mode [ 100.696108][ T5596] bridge_slave_1: entered promiscuous mode [ 100.698614][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.698775][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.699321][ T5594] bridge_slave_1: entered allmulticast mode [ 100.702524][ T5594] bridge_slave_1: entered promiscuous mode [ 100.705142][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.705276][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.705848][ T5598] bridge_slave_1: entered allmulticast mode [ 100.710317][ T5598] bridge_slave_1: entered promiscuous mode [ 100.712957][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.713082][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.713258][ T5595] bridge_slave_0: entered allmulticast mode [ 100.717198][ T5595] bridge_slave_0: entered promiscuous mode [ 100.857718][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.857882][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.857992][ T5595] bridge_slave_1: entered allmulticast mode [ 100.861370][ T5595] bridge_slave_1: entered promiscuous mode [ 100.871764][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.946566][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.949814][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.955485][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.962928][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.008273][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.010532][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.012963][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.019023][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.096095][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.099855][ T5597] team0: Port device team_slave_0 added [ 101.164241][ T5597] team0: Port device team_slave_1 added [ 101.171798][ T5596] team0: Port device team_slave_0 added [ 101.180548][ T5594] team0: Port device team_slave_0 added [ 101.182957][ T5598] team0: Port device team_slave_0 added [ 101.227610][ T5596] team0: Port device team_slave_1 added [ 101.229522][ T5594] team0: Port device team_slave_1 added [ 101.231272][ T5598] team0: Port device team_slave_1 added [ 101.233122][ T5595] team0: Port device team_slave_0 added [ 101.318412][ T5595] team0: Port device team_slave_1 added [ 101.319563][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.319575][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.319590][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.402321][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.402341][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.402356][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.403326][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.403339][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.403354][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.414880][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.414902][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.415044][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.421249][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.421268][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.421292][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.470716][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.470876][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.470904][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.476125][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.476152][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.476178][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.520280][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.520305][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.520330][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.523743][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.523769][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.523793][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.597382][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.597405][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.597431][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.675895][ T4910] Bluetooth: hci0: command tx timeout [ 101.675941][ T4910] Bluetooth: hci4: command tx timeout [ 101.675965][ T4910] Bluetooth: hci1: command tx timeout [ 101.675989][ T4910] Bluetooth: hci2: command tx timeout [ 101.676024][ T4910] Bluetooth: hci3: command tx timeout [ 101.847814][ T5597] hsr_slave_0: entered promiscuous mode [ 101.851523][ T5597] hsr_slave_1: entered promiscuous mode [ 102.496725][ T5594] hsr_slave_0: entered promiscuous mode [ 102.497644][ T5594] hsr_slave_1: entered promiscuous mode [ 102.498481][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 102.498571][ T5594] Cannot create hsr debugfs directory [ 102.515163][ T5598] hsr_slave_0: entered promiscuous mode [ 102.516655][ T5598] hsr_slave_1: entered promiscuous mode [ 102.518965][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.518993][ T5598] Cannot create hsr debugfs directory [ 102.533030][ T5596] hsr_slave_0: entered promiscuous mode [ 102.534922][ T5596] hsr_slave_1: entered promiscuous mode [ 102.536351][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.536380][ T5596] Cannot create hsr debugfs directory [ 102.613658][ T5595] hsr_slave_0: entered promiscuous mode [ 102.615430][ T5595] hsr_slave_1: entered promiscuous mode [ 102.616476][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 102.616502][ T5595] Cannot create hsr debugfs directory [ 103.526868][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.579618][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.591681][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.629943][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.631754][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.669546][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.693329][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.731174][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.766387][ T60] Bluetooth: hci3: command tx timeout [ 103.766429][ T60] Bluetooth: hci2: command tx timeout [ 103.766453][ T60] Bluetooth: hci1: command tx timeout [ 103.766477][ T60] Bluetooth: hci4: command tx timeout [ 103.766501][ T60] Bluetooth: hci0: command tx timeout [ 103.852571][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.892828][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.904072][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.929985][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.932911][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.969676][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.000482][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.030786][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.191747][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.222977][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.241377][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.279503][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.282761][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.308392][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.348601][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.389486][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.544016][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.571115][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.590581][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.627998][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.645739][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.679758][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.691596][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.721062][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.818813][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.948654][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.991153][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.009876][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.049817][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.061837][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.078780][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.109746][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.124980][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.170269][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.224548][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.227433][ T2808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.318014][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.330169][ T2815] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.330394][ T2815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.456674][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.518459][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.518723][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.588391][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.592127][ T2814] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.592270][ T2814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.750445][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.822311][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.822460][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.845001][ T4910] Bluetooth: hci0: command tx timeout [ 105.845048][ T4910] Bluetooth: hci4: command tx timeout [ 105.845074][ T4910] Bluetooth: hci1: command tx timeout [ 105.845097][ T4910] Bluetooth: hci2: command tx timeout [ 105.845121][ T4910] Bluetooth: hci3: command tx timeout [ 105.846349][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.943263][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.943428][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.127924][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.201480][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.280860][ T2814] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.281115][ T2814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.371992][ T2816] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.372211][ T2816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.539974][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.609535][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.611273][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.763930][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.771722][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.036252][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.469160][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.837676][ T5597] veth0_vlan: entered promiscuous mode [ 107.931611][ T5597] veth1_vlan: entered promiscuous mode [ 108.151358][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.169612][ T5594] veth0_vlan: entered promiscuous mode [ 108.296097][ T5594] veth1_vlan: entered promiscuous mode [ 108.402174][ T5597] veth0_macvtap: entered promiscuous mode [ 108.468559][ T5597] veth1_macvtap: entered promiscuous mode [ 108.562871][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.662193][ T5594] veth0_macvtap: entered promiscuous mode [ 108.673588][ T5598] veth0_vlan: entered promiscuous mode [ 108.707802][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.713599][ T5594] veth1_macvtap: entered promiscuous mode [ 108.761716][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.812707][ T5598] veth1_vlan: entered promiscuous mode [ 108.899481][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.974303][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.081631][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.472934][ T5598] veth0_macvtap: entered promiscuous mode [ 109.587290][ T5598] veth1_macvtap: entered promiscuous mode [ 109.653299][ T1773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.653330][ T1773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.002724][ T5595] veth0_vlan: entered promiscuous mode [ 110.035039][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.035067][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.053301][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.146822][ T5596] veth0_vlan: entered promiscuous mode [ 110.164846][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.171368][ T5595] veth1_vlan: entered promiscuous mode [ 110.203202][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.203232][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.258127][ T5596] veth1_vlan: entered promiscuous mode [ 110.519024][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.519052][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.860751][ T5597] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.010581][ T5595] veth0_macvtap: entered promiscuous mode [ 111.111773][ T5595] veth1_macvtap: entered promiscuous mode [ 111.130767][ T5596] veth0_macvtap: entered promiscuous mode [ 111.228382][ T5596] veth1_macvtap: entered promiscuous mode [ 111.268987][ T1773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.269017][ T1773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.403646][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.562604][ T5792] FAULT_INJECTION: forcing a failure. [ 111.562604][ T5792] name failslab, interval 1, probability 0, space 0, times 1 [ 111.562652][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.562695][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.562709][ T5792] Call Trace: [ 111.562720][ T5792] [ 111.562730][ T5792] dump_stack_lvl+0xe8/0x150 [ 111.562777][ T5792] should_fail_ex+0x46b/0x600 [ 111.562823][ T5792] should_failslab+0xa8/0x100 [ 111.562852][ T5792] __kmalloc_cache_noprof+0xa1/0x680 [ 111.562890][ T5792] ? pstore_init_fs_context+0x50/0x130 [ 111.562915][ T5792] ? pstore_init_fs_context+0x50/0x130 [ 111.562948][ T5792] pstore_init_fs_context+0x50/0x130 [ 111.562974][ T5792] alloc_fs_context+0x9a3/0xd00 [ 111.563019][ T5792] __se_sys_fsopen+0xa5/0x2c0 [ 111.563045][ T5792] do_syscall_64+0x166/0x520 [ 111.563079][ T5792] ? trace_irq_disable+0x3b/0x140 [ 111.563113][ T5792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.563137][ T5792] ? clear_bhb_loop+0x70/0xc0 [ 111.563165][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.563187][ T5792] RIP: 0033:0x7fbd9dc3e2d9 [ 111.563209][ T5792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.563229][ T5792] RSP: 002b:00007fbd9be96028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 111.563256][ T5792] RAX: ffffffffffffffda RBX: 00007fbd9dec5fa0 RCX: 00007fbd9dc3e2d9 [ 111.563274][ T5792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 111.563288][ T5792] RBP: 00007fbd9dcd5888 R08: 0000000000000000 R09: 0000000000000000 [ 111.563303][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.563317][ T5792] R13: 00007fbd9dec6038 R14: 00007fbd9dec5fa0 R15: 00007ffcd6bfc688 [ 111.563354][ T5792] [ 111.627413][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.631300][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.689800][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.689825][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.707754][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.686789][ T5712] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.787442][ T2814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.798962][ T1773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.799416][ T1773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.799980][ T1773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.157147][ T2812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.214566][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 113.270712][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.270949][ T5712] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 113.326037][ T5712] usb 3-1: config 4 interface 0 has no altsetting 0 [ 113.359683][ T5712] usb 3-1: string descriptor 0 read error: -22 [ 113.361114][ T5712] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 113.933382][ T2816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.933411][ T2816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.370777][ T2813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.371081][ T2813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.371296][ T2813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.371566][ T2813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.440674][ T5712] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 114.682459][ T2816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.682490][ T2816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.776319][ T2816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.813576][ T5712] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.814100][ T5712] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 114.814157][ T5712] usb 3-1: media controller created [ 115.102156][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.239414][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.239433][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.538178][ T5712] zl10353_read_register: readreg error (reg=127, ret==0) [ 115.754489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.774459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.784427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.794430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.804430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.814429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.824434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.834433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.844441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.854436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.375923][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.375959][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.516345][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.517471][ T2814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.614677][ T5615] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.802189][ T5615] usb 2-1: Using ep0 maxpacket: 32 [ 116.835679][ T5615] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 116.875603][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 116.875655][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 116.875684][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 116.875709][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 116.875735][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 116.937534][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.937557][ T5615] usb 2-1: Product: syz [ 116.937567][ T5615] usb 2-1: Manufacturer: syz [ 116.937577][ T5615] usb 2-1: SerialNumber: syz [ 117.091047][ T5615] usb 2-1: config 0 descriptor?? [ 117.211172][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.270533][ T5712] usb 3-1: USB disconnect, device number 2 [ 117.289088][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.299316][ T2813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.756210][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.756739][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.896549][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.954349][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.037458][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.037522][ T5615] input input5: Device does not respond to id packet P [ 118.038031][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.038078][ T5615] input input5: Device does not respond to id packet B [ 118.039034][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.039086][ T5615] input input5: Device does not respond to id packet N [ 118.039566][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.043268][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.124784][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.125338][ T5615] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 118.191118][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.191660][ T165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.191897][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.427920][ T5615] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 119.088430][ T5615] usb 2-1: USB disconnect, device number 2 [ 121.759662][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.957449][ T5884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.609943][ T2818] rpcbind: server 127.0.0.1 not responding, timed out [ 138.738948][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.739017][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.230623][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.972200][ T5949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.277820][ T5949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.648554][ T5955] FAULT_INJECTION: forcing a failure. [ 144.648554][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 144.648605][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 144.648632][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.648647][ T5955] Call Trace: [ 144.648657][ T5955] [ 144.648668][ T5955] dump_stack_lvl+0xe8/0x150 [ 144.648714][ T5955] should_fail_ex+0x46b/0x600 [ 144.648761][ T5955] should_failslab+0xa8/0x100 [ 144.648799][ T5955] __kmalloc_cache_noprof+0xa1/0x680 [ 144.648836][ T5955] ? comedi_device_postconfig+0x4ae/0xd00 [ 144.648868][ T5955] ? comedi_device_postconfig+0x4ae/0xd00 [ 144.648907][ T5955] comedi_device_postconfig+0x4ae/0xd00 [ 144.648954][ T5955] comedi_device_attach+0x554/0x730 [ 144.648990][ T5955] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 144.649036][ T5955] ? kasan_quarantine_put+0xbb/0x1f0 [ 144.649071][ T5955] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 144.649116][ T5955] ? do_vfs_ioctl+0x1184/0x1550 [ 144.649154][ T5955] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 144.649187][ T5955] ? __pfx_smack_log+0x10/0x10 [ 144.649229][ T5955] ? smk_tskacc+0x2fb/0x370 [ 144.649264][ T5955] ? smack_file_ioctl+0x265/0x370 [ 144.649303][ T5955] ? __pfx_smack_file_ioctl+0x10/0x10 [ 144.649349][ T5955] ? __fget_files+0x2a/0x420 [ 144.649377][ T5955] ? __fget_files+0x3a8/0x420 [ 144.649404][ T5955] ? __fget_files+0x2a/0x420 [ 144.649437][ T5955] ? bpf_lsm_file_ioctl+0x9/0x20 [ 144.649469][ T5955] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 144.649494][ T5955] __se_sys_ioctl+0xff/0x170 [ 144.649533][ T5955] do_syscall_64+0x166/0x520 [ 144.649565][ T5955] ? trace_irq_disable+0x3b/0x140 [ 144.649598][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.649622][ T5955] ? clear_bhb_loop+0x70/0xc0 [ 144.649651][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.649674][ T5955] RIP: 0033:0x7fbd9dc3e2d9 [ 144.649698][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.649718][ T5955] RSP: 002b:00007fbd9be96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.649745][ T5955] RAX: ffffffffffffffda RBX: 00007fbd9dec5fa0 RCX: 00007fbd9dc3e2d9 [ 144.649762][ T5955] RDX: 0000200000000380 RSI: 0000000040946400 RDI: 0000000000000004 [ 144.649785][ T5955] RBP: 00007fbd9dcd5888 R08: 0000000000000000 R09: 0000000000000000 [ 144.649799][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.649813][ T5955] R13: 00007fbd9dec6038 R14: 00007fbd9dec5fa0 R15: 00007ffcd6bfc688 [ 144.649852][ T5955] [ 144.805919][ T5949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.107456][ T5781] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.221291][ T5949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.305985][ T5781] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.306062][ T5781] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 145.311112][ T5781] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.311148][ T5781] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.311190][ T5781] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 145.311221][ T5781] usb 3-1: config 1 interface 0 has no altsetting 0 [ 145.397972][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.398010][ T5781] usb 3-1: Product: syz [ 145.398028][ T5781] usb 3-1: Manufacturer: syz [ 145.398044][ T5781] usb 3-1: SerialNumber: syz [ 145.534886][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 146.399335][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 146.457282][ T5781] smsusb:smsusb_probe: board id=8, interface number 0 [ 146.457353][ T5781] smsusb:smsusb_probe: Device initialized with return code -19 [ 146.604286][ T5972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.46'. [ 146.605231][ T5972] netlink: 43 bytes leftover after parsing attributes in process `syz.0.46'. [ 146.606151][ T5972] netlink: 'syz.0.46': attribute type 5 has an invalid length. [ 146.606222][ T5972] netlink: 43 bytes leftover after parsing attributes in process `syz.0.46'. [ 149.573538][ T5781] usb 3-1: USB disconnect, device number 3 [ 149.644586][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.923417][ T36] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 149.937086][ T36] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 149.937120][ T36] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 149.939909][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.939939][ T36] usb 1-1: Product: syz [ 149.939955][ T36] usb 1-1: Manufacturer: syz [ 149.939969][ T36] usb 1-1: SerialNumber: syz [ 151.040296][ T36] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 151.040330][ T36] usb 1-1: no configuration chosen from 1 choice [ 152.524461][ T36] usb 1-1: USB disconnect, device number 2 [ 153.888027][ T6003] gadgetfs: bound to dummy_udc driver [ 154.349283][ T5802] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 154.349777][ C0] gadgetfs: connected [ 154.353698][ T5802] gadgetfs: disconnected [ 154.692646][ T6012] Bluetooth: ISO socket layer initialized [ 156.792880][ T6016] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.276119][ T5615] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 163.025726][ T5615] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 163.027539][ T5615] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 163.027599][ T5615] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.031710][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.031738][ T5615] usb 3-1: Product: syz [ 163.031755][ T5615] usb 3-1: Manufacturer: syz [ 163.031771][ T5615] usb 3-1: SerialNumber: syz [ 163.153791][ T5615] usb 3-1: config 0 descriptor?? [ 165.013028][ T31] usb 3-1: USB disconnect, device number 4 [ 171.482623][ T6066] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.258806][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.335027][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.336388][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.341704][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.345287][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.550226][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 177.550257][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 29, name: ktimers/1 [ 177.550274][ C1] preempt_count: 0, expected: 0 [ 177.550284][ C1] RCU nest depth: 2, expected: 0 [ 177.550295][ C1] locks held by ktimers/1/29: 4, last CPU#1: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.550311][ C1] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 177.550382][ C1] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 177.550443][ C1] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 177.550507][ C1] #3: ffff888023296358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 177.550573][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 177.550594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.550605][ C1] Call Trace: [ 177.550614][ C1] [ 177.550623][ C1] dump_stack_lvl+0xe8/0x150 [ 177.550653][ C1] __might_resched+0x31b/0x470 [ 177.550687][ C1] lock_sock_nested+0x56/0x130 [ 177.550710][ C1] x25_kill_by_neigh+0x134/0x2a0 [ 177.550731][ C1] ? x25_kill_by_neigh+0x2b/0x2a0 [ 177.550757][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 177.550788][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 177.550819][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 177.550849][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 177.550887][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 177.550923][ C1] lapbeth_napi_poll+0x45/0x90 [ 177.550953][ C1] __napi_poll+0xae/0x550 [ 177.550978][ C1] net_rx_action+0x621/0xd70 [ 177.551012][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 177.551030][ C1] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 177.551069][ C1] ? rt_spin_unlock+0x159/0x200 [ 177.551099][ C1] handle_softirqs+0x1da/0x6d0 [ 177.551137][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 177.551165][ C1] run_ktimerd+0x6a/0x100 [ 177.551192][ C1] smpboot_thread_fn+0x565/0xa70 [ 177.551222][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 177.551257][ C1] kthread+0x38b/0x470 [ 177.551278][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 177.551304][ C1] ? __pfx_kthread+0x10/0x10 [ 177.551328][ C1] ret_from_fork+0x514/0xb70 [ 177.551353][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 177.551373][ C1] ? __switch_to+0xc89/0x1420 [ 177.551406][ C1] ? __pfx_kthread+0x10/0x10 [ 177.551427][ C1] ret_from_fork_asm+0x1a/0x30 [ 177.551466][ C1] [ 177.571169][ T4910] Bluetooth: hci5: command tx timeout [ 179.595223][ T4910] Bluetooth: hci5: command tx timeout [ 180.941239][ T1775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.093486][ T1775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.862834][ T1775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.133316][ T1775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.744255][ T1775] bridge_slave_1: left allmulticast mode [ 183.759325][ T1775] bridge_slave_1: left promiscuous mode [ 183.777086][ T1775] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.018958][ T1775] bridge_slave_0: left allmulticast mode [ 184.018993][ T1775] bridge_slave_0: left promiscuous mode [ 184.019184][ T1775] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.955722][ T1775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.044823][ T1775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.091658][ T1775] bond0 (unregistering): Released all slaves [ 185.124029][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 186.018914][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 186.639539][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.054671][ T1775] hsr_slave_0: left promiscuous mode [ 187.094568][ T1775] hsr_slave_1: left promiscuous mode [ 187.104119][ T1775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.104236][ T1775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.166316][ T1775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.166354][ T1775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.239524][ T1775] veth1_macvtap: left promiscuous mode [ 187.239749][ T1775] veth0_macvtap: left promiscuous mode [ 187.239945][ T1775] veth1_vlan: left promiscuous mode [ 187.240171][ T1775] veth0_vlan: left promiscuous mode