last executing test programs: 3m37.998711873s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0xc441) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)) socket(0x848000000015, 0x805, 0x0) 3m31.915857383s ago: executing program 1 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) mount(0x0, 0x0, 0x0, 0x0, 0x0) 3m27.636019226s ago: executing program 1 (id=24): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 3m24.455757619s ago: executing program 1 (id=30): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) 3m23.861987994s ago: executing program 1 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc517ba9b67", 0x98}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000e80000000b010000000004000d6f7e4e4e000082"], 0x18}, 0x2c000811) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) mmap(&(0x7f0000a3e000/0x3000)=nil, 0x3000, 0x7, 0x1010, r4, 0xffffe000) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r0, 0x12) 3m21.764003178s ago: executing program 1 (id=34): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x100, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0x20040000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 3m18.82252584s ago: executing program 0 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r4, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f00000091c0)=""/16384, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, 0x0, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x2a482, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r6, &(0x7f0000000000)={r5, 0xffffffffffffffff, 0x7}) 3m17.274101489s ago: executing program 0 (id=38): socket(0x1, 0x5, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x79) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x68, &(0x7f0000000080), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) 3m15.070869016s ago: executing program 0 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x5, {0x0, 0x7, 0xfff, 0x8, 0x5}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='traceon', 0x7) 3m13.736993069s ago: executing program 0 (id=42): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="75746a782c646973633daeae6172642c02000000", @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000002,namecase=1,errors=remount-ro,iocharset=cp437,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000300), 0xfc, 0x4dc, &(0x7f0000001a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) r4 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1b6) sendfile(r2, r4, 0x0, 0xfffe80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)}, 0x20060) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 3m12.79796332s ago: executing program 0 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc517ba9b67", 0x98}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000e80000000b010000000004000d6f7e4e4e000082"], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, {0x2011}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) mmap(&(0x7f0000a3e000/0x3000)=nil, 0x3000, 0x7, 0x1010, r3, 0xffffe000) 3m10.108362931s ago: executing program 0 (id=49): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xf04, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5460}, @filter_kind_options=@f_basic={{0xa}, {0xe8c, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe74, 0x3, [@m_pedit={0xe70, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1, [{0x80000001, 0xe3, 0x629dca08, 0x82, 0xb, 0x6}]}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0xf04}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 3m6.820222344s ago: executing program 4 (id=54): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}, {&(0x7f0000000140)="e82ce69ab868c5", 0x7}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffefff95a7c0774d1ba712847f8c2a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0xfea000, 0x2000402) lseek(r4, 0x1, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 3m5.416280426s ago: executing program 32 (id=34): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x100, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, '\x00'}], 0x18}, 0x20040000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 3m5.217706608s ago: executing program 4 (id=57): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) 3m2.767957542s ago: executing program 4 (id=61): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) timerfd_create(0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}, {&(0x7f0000000140)="e82ce69ab868c5", 0x7}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffefff95a7c0774d1ba712847f8c2a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) 3m2.067568634s ago: executing program 4 (id=64): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0x7, 0x20, 0x1, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) getpeername$unix(r1, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 3m0.032099344s ago: executing program 4 (id=67): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1b5) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') 2m55.701071496s ago: executing program 4 (id=70): mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) unshare(0x44040000) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x9, 0xc25, 0x1, 0x695, 0xe, "502ca1ecab9861e4d8029df7b84e979ab09a04", 0xe9, 0xe29}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @local}}}, 0xa0) 2m54.314395576s ago: executing program 33 (id=49): socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00) io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xf04, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5460}, @filter_kind_options=@f_basic={{0xa}, {0xe8c, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe74, 0x3, [@m_pedit={0xe70, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1, [{0x80000001, 0xe3, 0x629dca08, 0x82, 0xb, 0x6}]}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0xf04}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 2m40.18675711s ago: executing program 34 (id=70): mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) unshare(0x44040000) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x9, 0xc25, 0x1, 0x695, 0xe, "502ca1ecab9861e4d8029df7b84e979ab09a04", 0xe9, 0xe29}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @local}}}, 0xa0) 16.006418122s ago: executing program 2 (id=222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x3, 0x4, 0x1000, 0x0, r1, 0x0, '\x00', 0x0, r0}, 0x50) socket$tipc(0x1e, 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r2, 0xa0200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000840), &(0x7f0000000140)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 15.480346874s ago: executing program 5 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 13.636364528s ago: executing program 5 (id=224): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000007000fbdbdf25000000000000000000", @ANYRES32=0x0, @ANYBLOB="00080000800000000a000100aaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xb1}}, 'rpc/nfsd.fh/channel\x00'}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000180)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x20000002, 0x141302) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) 13.527314651s ago: executing program 2 (id=225): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 12.18074297s ago: executing program 2 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 10.529305855s ago: executing program 2 (id=229): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x48, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x5, 0x4, {0x5, 0x4, 0x2, 0x2, 0x8, 0x67, 0x0, 0x4, 0x67, 0x200, @dev={0xac, 0x14, 0x14, 0x3c}, @local}}}}}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) lseek(r1, 0xa3d2, 0x1) 9.501802347s ago: executing program 3 (id=230): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$l2tp(0x2, 0x2, 0x73) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) 8.142426431s ago: executing program 3 (id=231): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x217}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 6.282985094s ago: executing program 5 (id=232): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x4000000) 6.151564731s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc517ba9b67", 0x98}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000e80000000b010000000004000d6f7e4e4e000082"], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x4, {0x2011}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) mmap(&(0x7f0000a3e000/0x3000)=nil, 0x3000, 0x7, 0x1010, r3, 0xffffe000) 6.026377864s ago: executing program 5 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.708420225s ago: executing program 5 (id=235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a80)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x3, 0x4, 0x1000, 0x0, r1, 0x0, '\x00', 0x0, r0}, 0x50) socket$tipc(0x1e, 0x4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r2, 0xa0200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000840), &(0x7f0000000140)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.459801023s ago: executing program 3 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, r2, 0x0, 0x40000004, 0x0) 2.593948636s ago: executing program 3 (id=237): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000001c0)={0x17c04, r2, 0x5000, 0x24000007, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r5, 0x0) gettid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0xffffffffffffffff, 0x3, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) 1.985867346s ago: executing program 2 (id=238): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x80800) r1 = semget$private(0x0, 0x20000000102, 0x0) semop(r1, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x8, 0x1800}, {0x1, 0xe65b}], 0x3) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) landlock_restrict_self(0xffffffffffffffff, 0xc) 676.188221ms ago: executing program 2 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 247.579894ms ago: executing program 3 (id=240): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$rxrpc(0x21, 0x2, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') 0s ago: executing program 5 (id=241): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00007100000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006001000060000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') write(0xffffffffffffffff, &(0x7f0000000780)='pcsp', 0x4) r4 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 84.078721][ T5597] cgroup: Unknown subsys name 'net' [ 84.197270][ T5597] cgroup: Unknown subsys name 'cpuset' [ 84.201181][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.830717][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.066313][ T189] cfg80211: failed to load regulatory.db [ 90.127995][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.132603][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.152513][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.160610][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.161976][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.162447][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.174239][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.177521][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.178161][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.179001][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.180149][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.181130][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.183883][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.186445][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.187690][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.188272][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.196923][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.208581][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.215554][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.237069][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.306549][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.308636][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.309382][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.310440][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.311250][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.369214][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.371257][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.387328][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.391283][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.392256][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.224801][ T5612] Bluetooth: hci1: command tx timeout [ 92.224981][ T4927] Bluetooth: hci0: command tx timeout [ 92.303411][ T5612] Bluetooth: hci3: command tx timeout [ 92.303652][ T4927] Bluetooth: hci2: command tx timeout [ 92.384065][ T4927] Bluetooth: hci4: command tx timeout [ 92.462825][ T4927] Bluetooth: hci5: command tx timeout [ 92.820717][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.821158][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.821280][ T5611] bridge_slave_0: entered allmulticast mode [ 92.833659][ T5611] bridge_slave_0: entered promiscuous mode [ 92.886664][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.886769][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.886906][ T5611] bridge_slave_1: entered allmulticast mode [ 92.888700][ T5611] bridge_slave_1: entered promiscuous mode [ 93.004226][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.004386][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.004516][ T5610] bridge_slave_0: entered allmulticast mode [ 93.006324][ T5610] bridge_slave_0: entered promiscuous mode [ 93.038414][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.055225][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.055385][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.055511][ T5610] bridge_slave_1: entered allmulticast mode [ 93.057145][ T5610] bridge_slave_1: entered promiscuous mode [ 93.059048][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.059162][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.059327][ T5629] bridge_slave_0: entered allmulticast mode [ 93.061998][ T5629] bridge_slave_0: entered promiscuous mode [ 93.100261][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.167042][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.167161][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.167310][ T5629] bridge_slave_1: entered allmulticast mode [ 93.169547][ T5629] bridge_slave_1: entered promiscuous mode [ 93.288910][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.289212][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.289525][ T5618] bridge_slave_0: entered allmulticast mode [ 93.291164][ T5618] bridge_slave_0: entered promiscuous mode [ 93.301107][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.321329][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.321444][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.321781][ T5622] bridge_slave_0: entered allmulticast mode [ 93.326257][ T5622] bridge_slave_0: entered promiscuous mode [ 93.332957][ T5611] team0: Port device team_slave_0 added [ 93.351750][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.351881][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.352037][ T5618] bridge_slave_1: entered allmulticast mode [ 93.354982][ T5618] bridge_slave_1: entered promiscuous mode [ 93.360457][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.364803][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.365030][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.366310][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.366462][ T5622] bridge_slave_1: entered allmulticast mode [ 93.368947][ T5622] bridge_slave_1: entered promiscuous mode [ 93.390808][ T5611] team0: Port device team_slave_1 added [ 93.391230][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.391345][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.391494][ T5617] bridge_slave_0: entered allmulticast mode [ 93.394828][ T5617] bridge_slave_0: entered promiscuous mode [ 93.484306][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.511885][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.512089][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.512451][ T5617] bridge_slave_1: entered allmulticast mode [ 93.515425][ T5617] bridge_slave_1: entered promiscuous mode [ 93.521525][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.526285][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.562424][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.607864][ T5610] team0: Port device team_slave_0 added [ 93.610624][ T5610] team0: Port device team_slave_1 added [ 93.628006][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.628847][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.628864][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.628898][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.684972][ T5629] team0: Port device team_slave_0 added [ 93.702916][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.702938][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.702984][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.706012][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.708204][ T5618] team0: Port device team_slave_0 added [ 93.727705][ T5629] team0: Port device team_slave_1 added [ 93.760837][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.763898][ T5618] team0: Port device team_slave_1 added [ 93.764924][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.764944][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.764988][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.824019][ T5622] team0: Port device team_slave_0 added [ 93.831318][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.831339][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.831383][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.898434][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.898453][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.898487][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.913935][ T5622] team0: Port device team_slave_1 added [ 93.915034][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.915054][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.915098][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.979588][ T5617] team0: Port device team_slave_0 added [ 93.980720][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.980741][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.980800][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.991134][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.991156][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.991199][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.038495][ T5611] hsr_slave_0: entered promiscuous mode [ 94.039910][ T5611] hsr_slave_1: entered promiscuous mode [ 94.054115][ T5617] team0: Port device team_slave_1 added [ 94.116876][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.116897][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.116937][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.173710][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.173728][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.173762][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.182648][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.182669][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.182702][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.194152][ T5610] hsr_slave_0: entered promiscuous mode [ 94.195361][ T5610] hsr_slave_1: entered promiscuous mode [ 94.196233][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 94.196305][ T5610] Cannot create hsr debugfs directory [ 94.261713][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.261735][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.261779][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.316181][ T5629] hsr_slave_0: entered promiscuous mode [ 94.317363][ T5629] hsr_slave_1: entered promiscuous mode [ 94.318302][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 94.318329][ T5629] Cannot create hsr debugfs directory [ 94.326459][ T4927] Bluetooth: hci0: command tx timeout [ 94.326503][ T4927] Bluetooth: hci1: command tx timeout [ 94.383118][ T5612] Bluetooth: hci3: command tx timeout [ 94.383209][ T4927] Bluetooth: hci2: command tx timeout [ 94.422313][ T5618] hsr_slave_0: entered promiscuous mode [ 94.423751][ T5618] hsr_slave_1: entered promiscuous mode [ 94.424641][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 94.424668][ T5618] Cannot create hsr debugfs directory [ 94.462881][ T4927] Bluetooth: hci4: command tx timeout [ 94.553092][ T4927] Bluetooth: hci5: command tx timeout [ 94.565581][ T5622] hsr_slave_0: entered promiscuous mode [ 94.566965][ T5622] hsr_slave_1: entered promiscuous mode [ 94.567871][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 94.567898][ T5622] Cannot create hsr debugfs directory [ 94.635126][ T5617] hsr_slave_0: entered promiscuous mode [ 94.636009][ T5617] hsr_slave_1: entered promiscuous mode [ 94.636627][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 94.636654][ T5617] Cannot create hsr debugfs directory [ 95.218653][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.236952][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.237901][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.240857][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.241829][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.270789][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.276682][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.283564][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.371710][ T5611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.381424][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.384436][ T5611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.396450][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.399045][ T5611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.410427][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.417830][ T5611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.428065][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.523950][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.528285][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.543658][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.551165][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.552158][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.560038][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.577060][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.583310][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.708047][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.712538][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.729969][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.740756][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.741698][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.755975][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.766395][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.781156][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.788655][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.857436][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.906732][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.907088][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.908029][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.911485][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.912407][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.932352][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.962385][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.972977][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.973950][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.977463][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.025039][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.025207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.057422][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.175283][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.178535][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.181929][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.206858][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.221944][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.227508][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.228533][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.235884][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.260972][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.261092][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.281158][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.287214][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.330952][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.331072][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.383202][ T5612] Bluetooth: hci0: command tx timeout [ 96.383298][ T4927] Bluetooth: hci1: command tx timeout [ 96.389309][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.446321][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.464186][ T5612] Bluetooth: hci3: command tx timeout [ 96.464276][ T4927] Bluetooth: hci2: command tx timeout [ 96.466028][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.466148][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.515038][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.515156][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.543321][ T4927] Bluetooth: hci4: command tx timeout [ 96.595523][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.624546][ T4927] Bluetooth: hci5: command tx timeout [ 96.638964][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.647688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.648223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.735949][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.736074][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.829557][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.881744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.881869][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.988618][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.988764][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.018517][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.152397][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.216739][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.216864][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.270108][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.270230][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.972716][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.204193][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.225111][ T5610] veth0_vlan: entered promiscuous mode [ 98.276769][ T5610] veth1_vlan: entered promiscuous mode [ 98.464141][ T5612] Bluetooth: hci0: command tx timeout [ 98.464198][ T4927] Bluetooth: hci1: command tx timeout [ 98.491784][ T5610] veth0_macvtap: entered promiscuous mode [ 98.531681][ T5610] veth1_macvtap: entered promiscuous mode [ 98.544249][ T5612] Bluetooth: hci3: command tx timeout [ 98.546083][ T4927] Bluetooth: hci2: command tx timeout [ 98.626477][ T4927] Bluetooth: hci4: command tx timeout [ 98.680016][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.704511][ T4927] Bluetooth: hci5: command tx timeout [ 98.717625][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.741296][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.813686][ T3352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.813832][ T3352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.813894][ T3352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.813953][ T3352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.163669][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.230938][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.230966][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.361081][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.361109][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.378258][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.526536][ T5611] veth0_vlan: entered promiscuous mode [ 99.568801][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.609417][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.611675][ T5622] veth0_vlan: entered promiscuous mode [ 99.632342][ T5611] veth1_vlan: entered promiscuous mode [ 99.701557][ T5622] veth1_vlan: entered promiscuous mode [ 99.743571][ T5618] veth0_vlan: entered promiscuous mode [ 99.806743][ T5618] veth1_vlan: entered promiscuous mode [ 99.861626][ T5611] veth0_macvtap: entered promiscuous mode [ 99.901767][ T5611] veth1_macvtap: entered promiscuous mode [ 99.920968][ T5617] veth0_vlan: entered promiscuous mode [ 99.939474][ T5622] veth0_macvtap: entered promiscuous mode [ 99.964104][ T5617] veth1_vlan: entered promiscuous mode [ 99.967635][ T5622] veth1_macvtap: entered promiscuous mode [ 100.163575][ T4927] Bluetooth: hci0: failed to read key size for handle 200 [ 100.220559][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.310383][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.468597][ T3352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.470571][ T3352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.482208][ T3352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.507861][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.716389][ T5618] veth0_macvtap: entered promiscuous mode [ 100.776991][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.799915][ T5618] veth1_macvtap: entered promiscuous mode [ 100.818279][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.843564][ T5617] veth0_macvtap: entered promiscuous mode [ 100.884491][ T5629] veth0_vlan: entered promiscuous mode [ 100.889703][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.892235][ T5617] veth1_macvtap: entered promiscuous mode [ 100.929251][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.945542][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.945569][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.970747][ T3352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.970812][ T3352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.970872][ T3352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.033895][ T5629] veth1_vlan: entered promiscuous mode [ 101.056527][ T3352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.056592][ T3352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.056654][ T3352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.085212][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.099094][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.099121][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.157508][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.238993][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.239029][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.326010][ T5629] veth0_macvtap: entered promiscuous mode [ 101.331715][ T5629] veth1_macvtap: entered promiscuous mode [ 101.360909][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.373409][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.510572][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.510602][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.566425][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.567417][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.567602][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.568620][ T50] IPVS: starting estimator thread 0... [ 101.653156][ T5847] IPVS: using max 22 ests per chain, 52800 per kthread [ 101.673265][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.673479][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.708582][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.711259][ T95] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.765542][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.765569][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.839475][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.839502][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.935831][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.313583][ T3352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.313710][ T3352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.392302][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.392368][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.010608][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.010639][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.189193][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.189224][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.314346][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.314376][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.602759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.449644][ T5943] syz.0.19 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 123.449703][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 123.449747][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 123.449769][ T5943] Call Trace: [ 123.449781][ T5943] [ 123.449796][ T5943] dump_stack_lvl+0x100/0x190 [ 123.449855][ T5943] dump_header+0xfb/0x606 [ 123.449900][ T5943] oom_kill_process.cold+0xd/0x380 [ 123.449949][ T5943] out_of_memory+0x340/0x14f0 [ 123.449998][ T5943] ? __pfx_out_of_memory+0x10/0x10 [ 123.450037][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.450102][ T5943] mem_cgroup_out_of_memory+0xc6/0x130 [ 123.450163][ T5943] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 123.450221][ T5943] ? find_held_lock+0x2b/0x80 [ 123.450282][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.450329][ T5943] ? do_raw_spin_unlock+0x145/0x1e0 [ 123.450377][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.450427][ T5943] ? _raw_spin_unlock+0x28/0x50 [ 123.450492][ T5943] try_charge_memcg+0x783/0xf60 [ 123.450551][ T5943] ? __pfx_try_charge_memcg+0x10/0x10 [ 123.450598][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.450644][ T5943] ? find_held_lock+0x2b/0x80 [ 123.450695][ T5943] ? rcu_read_unlock+0x17/0x60 [ 123.450743][ T5943] ? rcu_read_unlock+0x17/0x60 [ 123.450789][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.450851][ T5943] obj_cgroup_charge_pages+0x2b/0x1f0 [ 123.450903][ T5943] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 123.450960][ T5943] __alloc_frozen_pages_noprof+0x534/0x3300 [ 123.451025][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451076][ T5943] ? __lock_acquire+0x5c0/0x1f40 [ 123.451117][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451163][ T5943] ? psi_group_change+0x457/0xa20 [ 123.451225][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451272][ T5943] ? find_held_lock+0x2b/0x80 [ 123.451324][ T5943] ? psi_memstall_leave+0x19c/0x360 [ 123.451385][ T5943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.451442][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451491][ T5943] ? try_charge_memcg+0x183/0xf60 [ 123.451545][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451599][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451645][ T5943] ? __lock_acquire+0x5c0/0x1f40 [ 123.451692][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451738][ T5943] ? lock_acquire+0x1d1/0x380 [ 123.451779][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451825][ T5943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.451869][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.451914][ T5943] ? policy_nodemask+0xed/0x4f0 [ 123.451972][ T5943] alloc_pages_mpol+0x201/0x550 [ 123.452016][ T5943] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.452059][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.452121][ T5943] alloc_pages_noprof+0x1a/0x160 [ 123.452171][ T5943] pgd_alloc+0x4d/0x630 [ 123.452224][ T5943] ? mutex_init_lockdep+0xf1/0x120 [ 123.452272][ T5943] mm_init+0x6a3/0xef0 [ 123.452338][ T5943] copy_process+0x47f3/0x8370 [ 123.452405][ T5943] ? __pfx_copy_process+0x10/0x10 [ 123.452443][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.452493][ T5943] ? futex_wake+0x4ea/0x5e0 [ 123.452555][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.452604][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.452664][ T5943] kernel_clone+0x176/0x9d0 [ 123.452708][ T5943] ? __pfx_kernel_clone+0x10/0x10 [ 123.452769][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.452824][ T5943] __do_sys_clone+0xd9/0x120 [ 123.452866][ T5943] ? __pfx___do_sys_clone+0x10/0x10 [ 123.452938][ T5943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.452994][ T5943] do_syscall_64+0x123/0x790 [ 123.453047][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.453088][ T5943] RIP: 0033:0x7f340eb9e159 [ 123.453119][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.453156][ T5943] RSP: 002b:00007f340f9a5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 123.453194][ T5943] RAX: ffffffffffffffda RBX: 00007f340ee25fa0 RCX: 00007f340eb9e159 [ 123.453220][ T5943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 123.453244][ T5943] RBP: 00007f340ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 123.453269][ T5943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 123.453293][ T5943] R13: 00007f340ee26038 R14: 00007f340ee25fa0 R15: 00007fff7d8a6698 [ 123.453343][ T5943] [ 123.726289][ T5951] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 123.726289][ T5951] program syz.5.31 not setting count and/or reply_len properly [ 124.158570][ T5943] memory: usage 96kB, limit 96kB, failcnt 42 [ 124.158599][ T5943] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 124.158680][ T5943] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 124.158704][ T5943] Memory cgroup stats for /syz0/test: [ 124.158995][ T5943] cache 0 [ 124.159010][ T5943] rss 0 [ 124.159023][ T5943] rss_huge 0 [ 124.159036][ T5943] shmem 0 [ 124.159066][ T5943] mapped_file 0 [ 124.159080][ T5943] dirty 0 [ 124.159092][ T5943] writeback 0 [ 124.159106][ T5943] workingset_refault_anon 0 [ 124.159121][ T5943] workingset_refault_file 0 [ 124.159136][ T5943] swap 4096 [ 124.159149][ T5943] swapcached 4096 [ 124.159163][ T5943] pgpgin 1 [ 124.159176][ T5943] pgpgout 1 [ 124.159192][ T5943] pgfault 21 [ 124.159205][ T5943] pgmajfault 0 [ 124.159218][ T5943] inactive_anon 0 [ 124.159232][ T5943] active_anon 0 [ 124.159246][ T5943] inactive_file 0 [ 124.159261][ T5943] active_file 0 [ 124.159275][ T5943] unevictable 0 [ 124.159288][ T5943] hierarchical_memory_limit 98304 [ 124.159305][ T5943] hierarchical_memsw_limit 9223372036854771712 [ 124.159322][ T5943] total_cache 0 [ 124.159336][ T5943] total_rss 0 [ 124.159349][ T5943] total_rss_huge 0 [ 124.159363][ T5943] total_shmem 0 [ 124.159376][ T5943] total_mapped_file 0 [ 124.159391][ T5943] total_dirty 0 [ 124.159404][ T5943] total_writeback 0 [ 124.159418][ T5943] total_workingset_refault_anon 0 [ 124.159434][ T5943] total_workingset_refault_file 0 [ 124.159450][ T5943] total_swap 4096 [ 124.159464][ T5943] total_swapcached 4096 [ 124.159479][ T5943] total_pgpgin 1 [ 124.159492][ T5943] total_pgpgout 1 [ 124.159506][ T5943] total_pgfault 21 [ 124.159520][ T5943] total_pgmajfault 0 [ 124.159534][ T5943] total_inactive_anon 0 [ 124.159549][ T5943] total_active_anon 0 [ 124.159564][ T5943] total_inactive_file 0 [ 124.159578][ T5943] total_active_file 0 [ 124.159593][ T5943] total_unevictable 0 [ 124.159607][ T5943] anon_cost 0 [ 124.159620][ T5943] file_cost 0 [ 124.159634][ T5943] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.19,pid=5942,uid=0 [ 124.159892][ T5943] Memory cgroup out of memory: Killed process 5942 (syz.0.19) total-vm:104300kB, anon-rss:1424kB, file-rss:23064kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 125.873300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.689780][ T4927] Bluetooth: hci1: failed to read key size for handle 200 [ 128.853317][ T189] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.266591][ T189] usb 5-1: device descriptor read/all, error -71 [ 131.720751][ T5993] loop0: detected capacity change from 0 to 256 [ 131.743843][ T5993] exfat: Unknown parameter 'utjx' [ 131.967544][ T6000] xt_LOG: level 115 >= 8 [ 132.239036][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.240146][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.233936][ T6017] loop3: detected capacity change from 0 to 512 [ 136.522892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.266981][ T6017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.267117][ T6017] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.346137][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.693828][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.699421][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.731030][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.745893][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.026268][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.293858][ T6048] loop3: detected capacity change from 0 to 256 [ 141.294982][ T6048] exfat: Unknown parameter 'utjx' [ 141.427162][ T6049] loop3: detected capacity change from 0 to 512 [ 141.459899][ T6049] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 141.545542][ T6049] xt_LOG: level 115 >= 8 [ 141.877586][ T6052] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 141.877586][ T6052] program syz.4.57 not setting count and/or reply_len properly [ 144.202830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 144.461736][ T5612] Bluetooth: hci6: command tx timeout [ 144.859684][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.148961][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.542904][ T5612] Bluetooth: hci6: command tx timeout [ 146.690304][ T6088] FAULT_INJECTION: forcing a failure. [ 146.690304][ T6088] name failslab, interval 1, probability 0, space 0, times 0 [ 146.690353][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz.4.67 Not tainted syzkaller #0 PREEMPT(full) [ 146.690397][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 146.690420][ T6088] Call Trace: [ 146.690433][ T6088] [ 146.690447][ T6088] dump_stack_lvl+0x100/0x190 [ 146.690508][ T6088] should_fail_ex.cold+0x5/0xa [ 146.690552][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.690607][ T6088] should_failslab+0xc2/0x120 [ 146.690648][ T6088] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 146.690712][ T6088] ? __d_alloc+0x35/0xa50 [ 146.690764][ T6088] __d_alloc+0x35/0xa50 [ 146.690813][ T6088] d_alloc_parallel+0x105/0x14c0 [ 146.690881][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.690928][ T6088] ? lock_acquire+0x1d1/0x380 [ 146.690966][ T6088] ? __d_lookup+0x73/0x4a0 [ 146.691021][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.691074][ T6088] ? __pfx_d_alloc_parallel+0x10/0x10 [ 146.691135][ T6088] ? __d_lookup+0x25c/0x4a0 [ 146.691189][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.691244][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.691291][ T6088] ? __d_lookup+0x266/0x4a0 [ 146.691360][ T6088] lookup_open+0x6bb/0x1990 [ 146.691433][ T6088] path_openat+0xa2c/0x2440 [ 146.691479][ T6088] ? __pfx_path_openat+0x10/0x10 [ 146.691532][ T6088] do_file_open+0x20e/0x430 [ 146.691575][ T6088] ? __pfx_do_file_open+0x10/0x10 [ 146.691631][ T6088] ? __pfx_kfree_link+0x10/0x10 [ 146.691704][ T6088] ? _raw_spin_unlock+0x28/0x50 [ 146.691762][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.691809][ T6088] ? alloc_fd+0x471/0x7a0 [ 146.691861][ T6088] do_sys_openat2+0x10f/0x1e0 [ 146.691906][ T6088] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.691981][ T6088] __x64_sys_openat+0x12d/0x210 [ 146.692028][ T6088] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.692083][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.692143][ T6088] do_syscall_64+0x123/0x790 [ 146.692189][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.692229][ T6088] RIP: 0033:0x7f1878b5e98e [ 146.692259][ T6088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 146.692297][ T6088] RSP: 002b:00007f1879a5dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.692334][ T6088] RAX: ffffffffffffffda RBX: 00007f1879a5e6c0 RCX: 00007f1878b5e98e [ 146.692361][ T6088] RDX: 0000000000000002 RSI: 00007f1879a5df90 RDI: ffffffffffffff9c [ 146.692386][ T6088] RBP: 00007f1878c3506b R08: 0000000000000000 R09: 0000000000000000 [ 146.692410][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.692434][ T6088] R13: 00007f1878e26038 R14: 00007f1878e25fa0 R15: 00007fff2f18f558 [ 146.692484][ T6088] [ 146.802833][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.503685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.804827][ T5612] Bluetooth: hci6: command tx timeout [ 149.419211][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.064709][ T5751] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 150.206581][ T6102] loop3: detected capacity change from 0 to 256 [ 150.227892][ T6102] exfat: Unknown parameter 'utjx' [ 150.254390][ T5751] usb 5-1: not running at top speed; connect to a high speed hub [ 150.254467][ T5751] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 150.256388][ T5751] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 150.260204][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.260242][ T5751] usb 5-1: Product: syz [ 150.260269][ T5751] usb 5-1: Manufacturer: syz [ 150.260296][ T5751] usb 5-1: SerialNumber: syz [ 150.505393][ T6103] xt_LOG: level 115 >= 8 [ 150.862823][ T5612] Bluetooth: hci6: command tx timeout [ 150.946907][ T5751] oti6858 5-1:1.0: oti6858 converter detected [ 150.967599][ T5751] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 152.081976][ T12] bridge_slave_1: left allmulticast mode [ 152.135947][ T12] bridge_slave_1: left promiscuous mode [ 152.190429][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.719880][ T12] bridge_slave_0: left allmulticast mode [ 152.719984][ T12] bridge_slave_0: left promiscuous mode [ 152.721715][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.033211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 154.442889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 155.835125][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.885447][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.896569][ T12] bond0 (unregistering): Released all slaves [ 156.019262][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.032433][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.049554][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.053461][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.054229][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.002823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 158.142889][ T4927] Bluetooth: hci4: command tx timeout [ 158.338036][ T6152] syz.3.80 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 158.338093][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(full) [ 158.338138][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 158.338161][ T6152] Call Trace: [ 158.338173][ T6152] [ 158.338187][ T6152] dump_stack_lvl+0x100/0x190 [ 158.338248][ T6152] dump_header+0xfb/0x606 [ 158.338295][ T6152] oom_kill_process.cold+0xd/0x380 [ 158.338345][ T6152] out_of_memory+0x340/0x14f0 [ 158.338397][ T6152] ? __pfx_out_of_memory+0x10/0x10 [ 158.338439][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.338501][ T6152] mem_cgroup_out_of_memory+0xc6/0x130 [ 158.338562][ T6152] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 158.338627][ T6152] ? find_held_lock+0x2b/0x80 [ 158.338689][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.338736][ T6152] ? do_raw_spin_unlock+0x145/0x1e0 [ 158.338788][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.338835][ T6152] ? _raw_spin_unlock+0x28/0x50 [ 158.338902][ T6152] try_charge_memcg+0x783/0xf60 [ 158.338960][ T6152] ? __pfx_try_charge_memcg+0x10/0x10 [ 158.339008][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339055][ T6152] ? find_held_lock+0x2b/0x80 [ 158.339107][ T6152] ? rcu_read_unlock+0x17/0x60 [ 158.339155][ T6152] ? rcu_read_unlock+0x17/0x60 [ 158.339203][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339265][ T6152] obj_cgroup_charge_pages+0x2b/0x1f0 [ 158.339318][ T6152] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 158.339376][ T6152] __alloc_frozen_pages_noprof+0x534/0x3300 [ 158.339442][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339489][ T6152] ? __lock_acquire+0x5c0/0x1f40 [ 158.339531][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339578][ T6152] ? psi_group_change+0x457/0xa20 [ 158.339647][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339701][ T6152] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.339755][ T6152] ? __lock_acquire+0x5c0/0x1f40 [ 158.339792][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339840][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.339889][ T6152] ? __pfx___css_rstat_updated+0x10/0x10 [ 158.339950][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.340000][ T6152] ? __lock_acquire+0x5c0/0x1f40 [ 158.340044][ T6152] ? find_held_lock+0x2b/0x80 [ 158.340097][ T6152] ? rcu_read_unlock+0x17/0x60 [ 158.340141][ T6152] ? rcu_read_unlock+0x17/0x60 [ 158.340189][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.340244][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.340292][ T6152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.340338][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.340386][ T6152] ? policy_nodemask+0xed/0x4f0 [ 158.340434][ T6152] alloc_pages_mpol+0x201/0x550 [ 158.340479][ T6152] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 158.340520][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.340582][ T6152] alloc_pages_noprof+0x1a/0x160 [ 158.340639][ T6152] pgd_alloc+0x4d/0x630 [ 158.340694][ T6152] ? mutex_init_lockdep+0xf1/0x120 [ 158.340742][ T6152] mm_init+0x6a3/0xef0 [ 158.340810][ T6152] copy_process+0x47f3/0x8370 [ 158.340877][ T6152] ? __pfx_copy_process+0x10/0x10 [ 158.340916][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.340966][ T6152] ? futex_wake+0x4ea/0x5e0 [ 158.341027][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.341078][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.341139][ T6152] kernel_clone+0x176/0x9d0 [ 158.341184][ T6152] ? __pfx_kernel_clone+0x10/0x10 [ 158.341244][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.341300][ T6152] __do_sys_clone+0xd9/0x120 [ 158.341342][ T6152] ? __pfx___do_sys_clone+0x10/0x10 [ 158.341415][ T6152] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.341472][ T6152] do_syscall_64+0x123/0x790 [ 158.341518][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.341558][ T6152] RIP: 0033:0x7f88b419e159 [ 158.341589][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.341631][ T6152] RSP: 002b:00007f88b5057fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 158.341669][ T6152] RAX: ffffffffffffffda RBX: 00007f88b4425fa0 RCX: 00007f88b419e159 [ 158.341695][ T6152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 158.341720][ T6152] RBP: 00007f88b423506b R08: 0000000000000000 R09: 0000000000000000 [ 158.341744][ T6152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.341769][ T6152] R13: 00007f88b4426038 R14: 00007f88b4425fa0 R15: 00007fff24541fd8 [ 158.341819][ T6152] [ 158.488865][ T6152] memory: usage 96kB, limit 96kB, failcnt 42 [ 158.488893][ T6152] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 158.488917][ T6152] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 158.488939][ T6152] Memory cgroup stats for /syz3/test: [ 158.489164][ T6152] cache 0 [ 158.489179][ T6152] rss 0 [ 158.489195][ T6152] rss_huge 0 [ 158.489207][ T6152] shmem 0 [ 158.489220][ T6152] mapped_file 0 [ 158.489234][ T6152] dirty 0 [ 158.489246][ T6152] writeback 0 [ 158.489260][ T6152] workingset_refault_anon 0 [ 158.489290][ T6152] workingset_refault_file 0 [ 158.489305][ T6152] swap 0 [ 158.489318][ T6152] swapcached 0 [ 158.489331][ T6152] pgpgin 0 [ 158.489344][ T6152] pgpgout 0 [ 158.489357][ T6152] pgfault 0 [ 158.489370][ T6152] pgmajfault 0 [ 158.489383][ T6152] inactive_anon 0 [ 158.489397][ T6152] active_anon 0 [ 158.489410][ T6152] inactive_file 0 [ 158.489424][ T6152] active_file 0 [ 158.489438][ T6152] unevictable 0 [ 158.489451][ T6152] hierarchical_memory_limit 98304 [ 158.489467][ T6152] hierarchical_memsw_limit 9223372036854771712 [ 158.489484][ T6152] total_cache 0 [ 158.489497][ T6152] total_rss 0 [ 158.489511][ T6152] total_rss_huge 0 [ 158.489524][ T6152] total_shmem 0 [ 158.489538][ T6152] total_mapped_file 0 [ 158.489552][ T6152] total_dirty 0 [ 158.489565][ T6152] total_writeback 0 [ 158.489579][ T6152] total_workingset_refault_anon 0 [ 158.489595][ T6152] total_workingset_refault_file 0 [ 158.489610][ T6152] total_swap 0 [ 158.489624][ T6152] total_swapcached 0 [ 158.489638][ T6152] total_pgpgin 0 [ 158.489651][ T6152] total_pgpgout 0 [ 158.489665][ T6152] total_pgfault 0 [ 158.489678][ T6152] total_pgmajfault 0 [ 158.489692][ T6152] total_inactive_anon 0 [ 158.489707][ T6152] total_active_anon 0 [ 158.489721][ T6152] total_inactive_file 0 [ 158.489735][ T6152] total_active_file 0 [ 158.489749][ T6152] total_unevictable 0 [ 158.489764][ T6152] anon_cost 0 [ 158.489777][ T6152] file_cost 0 [ 158.489791][ T6152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.80,pid=6149,uid=0 [ 158.510156][ T6152] Memory cgroup out of memory: Killed process 6149 (syz.3.80) total-vm:104300kB, anon-rss:1428kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 159.045786][ T12] hsr_slave_0: left promiscuous mode [ 159.054681][ T12] hsr_slave_1: left promiscuous mode [ 159.055690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.055740][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.064614][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.064641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.131474][ T12] veth1_macvtap: left promiscuous mode [ 159.131548][ T12] veth0_macvtap: left promiscuous mode [ 159.131681][ T12] veth1_vlan: left promiscuous mode [ 159.131790][ T12] veth0_vlan: left promiscuous mode [ 159.504627][ T4927] Bluetooth: hci3: failed to read key size for handle 200 [ 160.223292][ T4927] Bluetooth: hci4: command tx timeout [ 161.713048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.500166][ T4927] Bluetooth: hci4: command tx timeout [ 162.636152][ T12] team0 (unregistering): Port device team_slave_1 removed [ 164.618567][ T4927] Bluetooth: hci4: command tx timeout [ 164.804433][ T12] team0 (unregistering): Port device team_slave_0 removed [ 165.140716][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.151461][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.160785][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.162108][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.177380][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.417080][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.644735][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.644861][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.645006][ T6040] bridge_slave_0: entered allmulticast mode [ 165.695096][ T6040] bridge_slave_0: entered promiscuous mode [ 165.713710][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.717158][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.717305][ T6040] bridge_slave_1: entered allmulticast mode [ 165.746376][ T6040] bridge_slave_1: entered promiscuous mode [ 165.955448][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.986900][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.224320][ T6040] team0: Port device team_slave_0 added [ 166.291776][ T6040] team0: Port device team_slave_1 added [ 167.589213][ T5612] Bluetooth: hci0: command tx timeout [ 168.015921][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.015947][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.015992][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.108771][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.108793][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.108837][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.256766][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.393331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 170.180152][ T5612] Bluetooth: hci0: command tx timeout [ 170.590159][ T6040] hsr_slave_0: entered promiscuous mode [ 170.593274][ T6040] hsr_slave_1: entered promiscuous mode [ 170.595680][ T6040] debugfs: 'hsr0' already exists in 'hsr' [ 170.595708][ T6040] Cannot create hsr debugfs directory [ 170.695859][ T189] usb 5-1: USB disconnect, device number 4 [ 170.800429][ T189] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 170.815855][ T189] oti6858 5-1:1.0: device disconnected [ 170.918188][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.942302][ T6228] process 'syz.2.88' launched './file1' with NULL argv: empty string added [ 171.282239][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.446993][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 171.489225][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.233415][ T4927] Bluetooth: hci0: command tx timeout [ 173.545591][ T12] bridge_slave_1: left allmulticast mode [ 173.545627][ T12] bridge_slave_1: left promiscuous mode [ 173.545858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.627928][ T12] bridge_slave_0: left allmulticast mode [ 173.627961][ T12] bridge_slave_0: left promiscuous mode [ 173.628223][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.312833][ T4927] Bluetooth: hci0: command tx timeout [ 177.390133][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.541429][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.608479][ T12] bond0 (unregistering): Released all slaves [ 179.584367][ T6281] loop2: detected capacity change from 0 to 256 [ 179.587657][ T6281] exfat: Unknown parameter 'utjx' [ 179.712592][ T6282] loop2: detected capacity change from 0 to 512 [ 179.739094][ T6282] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 179.798396][ T6282] xt_LOG: level 115 >= 8 [ 183.267383][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 184.270768][ T6040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.472523][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.475771][ T6040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.503147][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.660597][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.660723][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.660876][ T6120] bridge_slave_0: entered allmulticast mode [ 184.681222][ T6120] bridge_slave_0: entered promiscuous mode [ 184.764377][ T6040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.781425][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.786077][ T6040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.809396][ T6040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.810864][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.811057][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.811216][ T6120] bridge_slave_1: entered allmulticast mode [ 184.818942][ T6120] bridge_slave_1: entered promiscuous mode [ 188.104060][ T12] hsr_slave_0: left promiscuous mode [ 188.109022][ T12] hsr_slave_1: left promiscuous mode [ 188.109976][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.110004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.112495][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.112521][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.162447][ T12] veth1_macvtap: left promiscuous mode [ 188.162491][ T12] veth0_macvtap: left promiscuous mode [ 188.162613][ T12] veth1_vlan: left promiscuous mode [ 188.162695][ T12] veth0_vlan: left promiscuous mode [ 188.687773][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.604068][ T12] team0 (unregistering): Port device team_slave_0 removed [ 191.039179][ T6120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.144897][ T6120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.171736][ T6334] loop2: detected capacity change from 0 to 256 [ 191.177525][ T6334] exfat: Unknown parameter 'utjx' [ 191.329205][ T6336] loop2: detected capacity change from 0 to 512 [ 191.343200][ T6336] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 191.384063][ T6336] xt_LOG: level 115 >= 8 [ 191.817440][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.847607][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.848261][ T6186] bridge_slave_0: entered allmulticast mode [ 191.855815][ T6339] comedi comedi1: pc212e: a I/O base address must be specified [ 191.951820][ T6186] bridge_slave_0: entered promiscuous mode [ 192.635941][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.636913][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.693830][ T6186] bridge_slave_1: entered allmulticast mode [ 192.828834][ T6186] bridge_slave_1: entered promiscuous mode [ 192.977995][ T6120] team0: Port device team_slave_0 added [ 192.981053][ T6120] team0: Port device team_slave_1 added [ 194.816676][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.816752][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.888458][ T6186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.889240][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.889260][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.889305][ T6120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.900945][ T6186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.969000][ T6120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.969023][ T6120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.969069][ T6120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.349138][ T6120] hsr_slave_0: entered promiscuous mode [ 196.350268][ T6120] hsr_slave_1: entered promiscuous mode [ 196.351050][ T6120] debugfs: 'hsr0' already exists in 'hsr' [ 196.351077][ T6120] Cannot create hsr debugfs directory [ 196.388478][ T6186] team0: Port device team_slave_0 added [ 196.434785][ T6186] team0: Port device team_slave_1 added [ 198.542257][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.693907][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.693934][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.693979][ T6186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.834428][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.834453][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.834500][ T6186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.785353][ T6186] hsr_slave_0: entered promiscuous mode [ 199.788086][ T6186] hsr_slave_1: entered promiscuous mode [ 199.788951][ T6186] debugfs: 'hsr0' already exists in 'hsr' [ 199.788978][ T6186] Cannot create hsr debugfs directory [ 200.085133][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.397862][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.499430][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.506362][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 202.518393][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.519939][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.521035][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.521788][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.838437][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.515326][ T6401] loop2: detected capacity change from 0 to 256 [ 204.538505][ T6401] exfat: Unknown parameter 'utjx' [ 204.544984][ T5612] Bluetooth: hci5: command tx timeout [ 204.722935][ T6405] xt_LOG: level 115 >= 8 [ 205.188314][ T6120] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.224295][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.320338][ T6120] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.388774][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.400487][ T6120] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.451156][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.523589][ T6120] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.278821][ T5612] Bluetooth: hci5: command tx timeout [ 207.324492][ T6120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.610454][ T12] bridge_slave_1: left allmulticast mode [ 207.610491][ T12] bridge_slave_1: left promiscuous mode [ 207.610720][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.660334][ T12] bridge_slave_0: left allmulticast mode [ 207.660372][ T12] bridge_slave_0: left promiscuous mode [ 207.660594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.455581][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.491691][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.538636][ T12] bond0 (unregistering): Released all slaves [ 209.344816][ T5612] Bluetooth: hci5: command tx timeout [ 209.778322][ T6449] syzkaller0: entered promiscuous mode [ 209.778354][ T6449] syzkaller0: entered allmulticast mode [ 210.208617][ T6186] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.271678][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.277018][ T6186] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 210.318798][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.330257][ T6186] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 210.349862][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.350825][ T6186] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 210.391672][ T6186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.424111][ T5612] Bluetooth: hci5: command tx timeout [ 212.956084][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 212.978201][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.980323][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.981230][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.012438][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.025173][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.626157][ T12] hsr_slave_0: left promiscuous mode [ 214.628108][ T12] hsr_slave_1: left promiscuous mode [ 214.628861][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.628883][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.633537][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.633563][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.670198][ T12] veth1_macvtap: left promiscuous mode [ 214.670242][ T12] veth0_macvtap: left promiscuous mode [ 214.670363][ T12] veth1_vlan: left promiscuous mode [ 214.670447][ T12] veth0_vlan: left promiscuous mode [ 216.426418][ T5612] Bluetooth: hci6: command tx timeout [ 216.426963][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 216.427041][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 216.427087][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 218.472857][ T4927] Bluetooth: hci6: command tx timeout [ 220.791528][ T4927] Bluetooth: hci6: command tx timeout [ 221.272971][ T12] team0 (unregistering): Port device team_slave_1 removed [ 221.355824][ T12] team0 (unregistering): Port device team_slave_0 removed [ 222.902848][ T4927] Bluetooth: hci6: command tx timeout [ 223.267624][ T6186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.322327][ T6186] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.347559][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.347681][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.656857][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.657271][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.822913][ T5751] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 224.841884][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.842071][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.842212][ T6382] bridge_slave_0: entered allmulticast mode [ 224.844779][ T6382] bridge_slave_0: entered promiscuous mode [ 224.847956][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.848141][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.848310][ T6382] bridge_slave_1: entered allmulticast mode [ 224.850444][ T6382] bridge_slave_1: entered promiscuous mode [ 224.866766][ T6541] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 224.866766][ T6541] program syz.3.141 not setting count and/or reply_len properly [ 224.998834][ T5751] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 225.012037][ T5751] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 225.012075][ T5751] usb 3-1: config 0 has no interface number 0 [ 225.012145][ T5751] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.043903][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.043943][ T5751] usb 3-1: Product: syz [ 225.043970][ T5751] usb 3-1: Manufacturer: syz [ 225.043991][ T5751] usb 3-1: SerialNumber: syz [ 225.104784][ T5751] usb 3-1: config 0 descriptor?? [ 225.146065][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.149826][ T5751] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 225.194729][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.400377][ T5751] usb 3-1: USB disconnect, device number 2 [ 225.434547][ T5751] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 225.487608][ T6382] team0: Port device team_slave_0 added [ 225.492129][ T6382] team0: Port device team_slave_1 added [ 225.561998][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.562018][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.562061][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.805297][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.810829][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.828766][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.830205][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.830940][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.932336][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.932359][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.932404][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.014362][ T52] Bluetooth: hci4: command tx timeout [ 229.344841][ T6574] loop5: detected capacity change from 0 to 256 [ 229.345986][ T6574] exfat: Unknown parameter 'utjx' [ 229.447251][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 229.518066][ T6575] xt_LOG: level 115 >= 8 [ 231.818573][ T4927] Bluetooth: hci4: command tx timeout [ 231.982494][ T6382] hsr_slave_0: entered promiscuous mode [ 231.995466][ T6382] hsr_slave_1: entered promiscuous mode [ 231.996058][ T6382] debugfs: 'hsr0' already exists in 'hsr' [ 231.996078][ T6382] Cannot create hsr debugfs directory [ 233.822877][ T4927] Bluetooth: hci4: command tx timeout [ 235.140140][ T6614] comedi comedi1: pc212e: a I/O base address must be specified [ 236.301436][ T4927] Bluetooth: hci4: command tx timeout [ 237.060521][ T6622] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 237.060580][ T6622] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 237.060616][ T6622] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 243.586478][ T6649] comedi comedi1: pc212e: a I/O base address must be specified [ 244.282018][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.292213][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.295815][ T6487] bridge_slave_0: entered allmulticast mode [ 244.357635][ T6487] bridge_slave_0: entered promiscuous mode [ 244.630245][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.630434][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.630591][ T6487] bridge_slave_1: entered allmulticast mode [ 244.632692][ T6487] bridge_slave_1: entered promiscuous mode [ 244.701448][ T12] bridge_slave_1: left allmulticast mode [ 244.701478][ T12] bridge_slave_1: left promiscuous mode [ 244.701687][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.728473][ T12] bridge_slave_0: left allmulticast mode [ 244.728519][ T12] bridge_slave_0: left promiscuous mode [ 244.731770][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.790394][ T12] bridge_slave_1: left allmulticast mode [ 244.790424][ T12] bridge_slave_1: left promiscuous mode [ 244.790634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.805712][ T12] bridge_slave_0: left allmulticast mode [ 244.805741][ T12] bridge_slave_0: left promiscuous mode [ 244.805971][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.117942][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.141922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.171599][ T12] bond0 (unregistering): Released all slaves [ 247.062143][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.173394][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.309495][ T12] bond0 (unregistering): Released all slaves [ 247.421043][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.425812][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.477455][ T6487] team0: Port device team_slave_0 added [ 247.517769][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 247.761123][ T6487] team0: Port device team_slave_1 added [ 247.886515][ T12] hsr_slave_0: left promiscuous mode [ 247.891801][ T12] hsr_slave_1: left promiscuous mode [ 247.901816][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.911839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.974225][ T12] hsr_slave_0: left promiscuous mode [ 247.977685][ T12] hsr_slave_1: left promiscuous mode [ 247.978390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.979403][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.111832][ T6668] loop3: detected capacity change from 0 to 256 [ 249.120129][ T6668] exfat: Unknown parameter 'utjx' [ 249.224953][ T6669] xt_LOG: level 115 >= 8 [ 249.955320][ T12] team0 (unregistering): Port device team_slave_1 removed [ 253.136698][ T12] team0 (unregistering): Port device team_slave_0 removed [ 255.135554][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.135633][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.520636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 258.563391][ T12] team0 (unregistering): Port device team_slave_0 removed [ 259.331194][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.331219][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.331275][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.380602][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.380624][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.380670][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.770387][ T6487] hsr_slave_0: entered promiscuous mode [ 261.793850][ T6487] hsr_slave_1: entered promiscuous mode [ 261.802947][ T6487] debugfs: 'hsr0' already exists in 'hsr' [ 261.802974][ T6487] Cannot create hsr debugfs directory [ 262.793256][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.810906][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.811937][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.823318][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.824376][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.659368][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.659491][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.659647][ T6556] bridge_slave_0: entered allmulticast mode [ 263.678232][ T6556] bridge_slave_0: entered promiscuous mode [ 263.834060][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.834177][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.834324][ T6556] bridge_slave_1: entered allmulticast mode [ 263.848732][ T6556] bridge_slave_1: entered promiscuous mode [ 264.863142][ T4927] Bluetooth: hci0: command tx timeout [ 265.417990][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.440999][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.601654][ T6749] loop2: detected capacity change from 0 to 256 [ 265.607404][ T6749] exfat: Unknown parameter 'utjx' [ 266.032107][ T6753] xt_LOG: level 115 >= 8 [ 266.700024][ T6556] team0: Port device team_slave_0 added [ 266.715333][ T6556] team0: Port device team_slave_1 added [ 266.943466][ T4927] Bluetooth: hci0: command tx timeout [ 268.183321][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 268.910521][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.910545][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.910590][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.921230][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.921251][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.921295][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.031987][ T4927] Bluetooth: hci0: command tx timeout [ 271.123131][ T4927] Bluetooth: hci0: command tx timeout [ 273.439340][ T6556] hsr_slave_0: entered promiscuous mode [ 273.450152][ T6556] hsr_slave_1: entered promiscuous mode [ 273.455329][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 273.455356][ T6556] Cannot create hsr debugfs directory [ 274.003699][ T4927] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 276.072074][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.082549][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.092170][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.101299][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.102078][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.239308][ T6814] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 277.239308][ T6814] program syz.5.190 not setting count and/or reply_len properly [ 278.562875][ T52] Bluetooth: hci5: command tx timeout [ 278.709800][ T6822] loop5: detected capacity change from 0 to 256 [ 278.720445][ T6822] exfat: Unknown parameter 'utjx' [ 278.729004][ T12] bridge_slave_1: left allmulticast mode [ 278.729052][ T12] bridge_slave_1: left promiscuous mode [ 278.729324][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.465790][ T6822] xt_LOG: level 115 >= 8 [ 279.763241][ T12] bridge_slave_0: left allmulticast mode [ 279.763277][ T12] bridge_slave_0: left promiscuous mode [ 279.763503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.021064][ T52] Bluetooth: hci5: command tx timeout [ 282.248344][ T6840] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 282.248344][ T6840] program syz.5.195 not setting count and/or reply_len properly [ 284.113193][ T52] Bluetooth: hci5: command tx timeout [ 285.971506][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.001657][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.022925][ T12] bond0 (unregistering): Released all slaves [ 286.146091][ T52] Bluetooth: hci5: command tx timeout [ 286.426187][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.448289][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.451331][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.478335][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.484059][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.640244][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 287.045224][ T12] hsr_slave_0: left promiscuous mode [ 287.059699][ T12] hsr_slave_1: left promiscuous mode [ 287.060640][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.088026][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.255768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.281793][ T12] team0 (unregistering): Port device team_slave_0 removed [ 288.543307][ T52] Bluetooth: hci6: command tx timeout [ 289.262203][ T6883] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 289.262470][ T6883] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 289.262594][ T6883] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 290.150764][ T6890] comedi comedi1: pc212e: a I/O base address must be specified [ 290.632903][ T52] Bluetooth: hci6: command tx timeout [ 292.703194][ T52] Bluetooth: hci6: command tx timeout [ 295.129965][ T52] Bluetooth: hci6: command tx timeout [ 295.636524][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.636613][ T6725] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.636740][ T6725] bridge_slave_0: entered allmulticast mode [ 295.666414][ T6725] bridge_slave_0: entered promiscuous mode [ 295.682195][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.682312][ T6725] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.682472][ T6725] bridge_slave_1: entered allmulticast mode [ 295.712396][ T6725] bridge_slave_1: entered promiscuous mode [ 296.196519][ T6725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.099542][ T6725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.279681][ T6725] team0: Port device team_slave_0 added [ 299.398670][ T6725] team0: Port device team_slave_1 added [ 299.449383][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.450861][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.450983][ T6800] bridge_slave_0: entered allmulticast mode [ 299.462014][ T6800] bridge_slave_0: entered promiscuous mode [ 299.651457][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.651574][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.651730][ T6800] bridge_slave_1: entered allmulticast mode [ 299.664701][ T6800] bridge_slave_1: entered promiscuous mode [ 299.815774][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.815798][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.815839][ T6725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.819272][ T6725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.819293][ T6725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.819338][ T6725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.916276][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.035563][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.962717][ T6800] team0: Port device team_slave_0 added [ 301.316062][ T6800] team0: Port device team_slave_1 added [ 302.987882][ T6725] hsr_slave_0: entered promiscuous mode [ 302.989058][ T6725] hsr_slave_1: entered promiscuous mode [ 302.989893][ T6725] debugfs: 'hsr0' already exists in 'hsr' [ 302.989920][ T6725] Cannot create hsr debugfs directory [ 303.235351][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.235374][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.235419][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.434992][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.435014][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.435061][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.683105][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 303.706866][ T12] bridge_slave_1: left allmulticast mode [ 303.706896][ T12] bridge_slave_1: left promiscuous mode [ 303.707108][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.734966][ T12] bridge_slave_0: left allmulticast mode [ 303.734994][ T12] bridge_slave_0: left promiscuous mode [ 303.735198][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.778733][ T12] bridge_slave_1: left allmulticast mode [ 303.778763][ T12] bridge_slave_1: left promiscuous mode [ 303.778974][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.805479][ T12] bridge_slave_0: left allmulticast mode [ 303.805510][ T12] bridge_slave_0: left promiscuous mode [ 303.808712][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.840525][ T12] bridge_slave_1: left allmulticast mode [ 303.840555][ T12] bridge_slave_1: left promiscuous mode [ 303.840755][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.865591][ T12] bridge_slave_0: left allmulticast mode [ 303.865621][ T12] bridge_slave_0: left promiscuous mode [ 303.865822][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.093501][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.108413][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.142478][ T12] bond0 (unregistering): Released all slaves [ 307.268132][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.303417][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.308962][ T12] bond0 (unregistering): Released all slaves [ 309.002734][ T5872] IPVS: starting estimator thread 0... [ 309.103047][ T7001] IPVS: using max 22 ests per chain, 52800 per kthread [ 309.771149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.842098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.863182][ T7008] comedi comedi1: pc212e: a I/O base address must be specified [ 309.892409][ T12] bond0 (unregistering): Released all slaves [ 311.661513][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.661633][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.661775][ T6862] bridge_slave_0: entered allmulticast mode [ 311.688545][ T6862] bridge_slave_0: entered promiscuous mode [ 311.938212][ T12] hsr_slave_0: left promiscuous mode [ 311.941243][ T12] hsr_slave_1: left promiscuous mode [ 311.942173][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.971497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.982946][ T12] hsr_slave_0: left promiscuous mode [ 312.995485][ T12] hsr_slave_1: left promiscuous mode [ 313.000528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.024234][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.999126][ T12] hsr_slave_0: left promiscuous mode [ 315.028112][ T12] hsr_slave_1: left promiscuous mode [ 315.057467][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.110540][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.470082][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.470180][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.026664][ T12] team0 (unregistering): Port device team_slave_1 removed [ 317.126423][ T12] team0 (unregistering): Port device team_slave_0 removed [ 318.058661][ T7053] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 318.058948][ T7053] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 318.059076][ T7053] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 319.342028][ T12] team0 (unregistering): Port device team_slave_1 removed [ 319.398055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.025185][ T12] team0 (unregistering): Port device team_slave_1 removed [ 324.046556][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.049540][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.050295][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.051971][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.054050][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.136519][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.475779][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.475919][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.476062][ T6862] bridge_slave_1: entered allmulticast mode [ 324.478201][ T6862] bridge_slave_1: entered promiscuous mode [ 324.639448][ T6800] hsr_slave_0: entered promiscuous mode [ 324.642377][ T6800] hsr_slave_1: entered promiscuous mode [ 324.657765][ T6800] debugfs: 'hsr0' already exists in 'hsr' [ 324.657792][ T6800] Cannot create hsr debugfs directory [ 324.765377][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.958353][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.096767][ T7090] syzkaller0: entered promiscuous mode [ 325.096799][ T7090] syzkaller0: entered allmulticast mode [ 325.187764][ T7099] [ 325.190103][ T7099] ====================================================== [ 325.197115][ T7099] WARNING: possible circular locking dependency detected [ 325.204128][ T7099] syzkaller #0 Not tainted [ 325.208540][ T7099] ------------------------------------------------------ [ 325.215551][ T7099] syz.5.241/7099 is trying to acquire lock: [ 325.221445][ T7099] ffffffff904010a8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.232746][ T7099] [ 325.232746][ T7099] but task is already holding lock: [ 325.240105][ T7099] ffff888077bd3580 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 325.250583][ T7099] [ 325.250583][ T7099] which lock already depends on the new lock. [ 325.250583][ T7099] [ 325.260964][ T7099] [ 325.260964][ T7099] the existing dependency chain (in reverse order) is: [ 325.269957][ T7099] [ 325.269957][ T7099] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 325.278657][ T7099] lock_acquire+0x1d1/0x380 [ 325.283674][ T7099] down_write+0x8b/0x1f0 [ 325.288436][ T7099] configfs_depend_item_unlocked+0xf3/0x6a0 [ 325.294857][ T7099] usbg_make_tpg+0x251/0x610 [ 325.299974][ T7099] target_fabric_make_tpg+0xab/0x8c0 [ 325.305770][ T7099] configfs_mkdir+0x525/0xd40 [ 325.310974][ T7099] vfs_mkdir+0x364/0x850 [ 325.315736][ T7099] filename_mkdirat+0x48b/0x5e0 [ 325.321101][ T7099] __x64_sys_mkdirat+0x89/0xc0 [ 325.326377][ T7099] do_syscall_64+0x123/0x790 [ 325.331480][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.337886][ T7099] [ 325.337886][ T7099] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 325.345793][ T7099] lock_acquire+0x1d1/0x380 [ 325.350809][ T7099] __mutex_lock+0x1a4/0x1bd0 [ 325.355915][ T7099] tcm_alloc_inst+0x5f/0x1e0 [ 325.361034][ T7099] try_get_usb_function_instance+0x136/0x1f0 [ 325.367533][ T7099] usb_get_function_instance+0x16/0x70 [ 325.373512][ T7099] function_make+0x18c/0x3f0 [ 325.378615][ T7099] configfs_mkdir+0x525/0xd40 [ 325.383819][ T7099] vfs_mkdir+0x364/0x850 [ 325.388583][ T7099] filename_mkdirat+0x48b/0x5e0 [ 325.393947][ T7099] __x64_sys_mkdirat+0x89/0xc0 [ 325.399225][ T7099] do_syscall_64+0x123/0x790 [ 325.404327][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.410734][ T7099] [ 325.410734][ T7099] -> #1 (func_lock){+.+.}-{4:4}: [ 325.417859][ T7099] lock_acquire+0x1d1/0x380 [ 325.422878][ T7099] __mutex_lock+0x1a4/0x1bd0 [ 325.427982][ T7099] try_get_usb_function_instance+0x26/0x1f0 [ 325.434397][ T7099] usb_get_function_instance+0x16/0x70 [ 325.440376][ T7099] function_make+0x18c/0x3f0 [ 325.445479][ T7099] configfs_mkdir+0x525/0xd40 [ 325.450685][ T7099] vfs_mkdir+0x364/0x850 [ 325.455449][ T7099] filename_mkdirat+0x48b/0x5e0 [ 325.460822][ T7099] __x64_sys_mkdirat+0x89/0xc0 [ 325.466100][ T7099] do_syscall_64+0x123/0x790 [ 325.471203][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.477609][ T7099] [ 325.477609][ T7099] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 325.485867][ T7099] check_prev_add+0xeb/0xe60 [ 325.490968][ T7099] __lock_acquire+0x1528/0x1f40 [ 325.496329][ T7099] lock_acquire+0x1d1/0x380 [ 325.501344][ T7099] __mutex_lock+0x1a4/0x1bd0 [ 325.506448][ T7099] uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.513140][ T7099] configfs_symlink+0x695/0x1340 [ 325.518604][ T7099] vfs_symlink+0x178/0x4d0 [ 325.523542][ T7099] filename_symlinkat+0x2a6/0x560 [ 325.529083][ T7099] __x64_sys_symlinkat+0x9c/0xe0 [ 325.534551][ T7099] do_syscall_64+0x123/0x790 [ 325.539655][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.546059][ T7099] [ 325.546059][ T7099] other info that might help us debug this: [ 325.546059][ T7099] [ 325.556266][ T7099] Chain exists of: [ 325.556266][ T7099] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#26 [ 325.556266][ T7099] [ 325.571234][ T7099] Possible unsafe locking scenario: [ 325.571234][ T7099] [ 325.578662][ T7099] CPU0 CPU1 [ 325.584012][ T7099] ---- ---- [ 325.589367][ T7099] lock(&sb->s_type->i_mutex_key#26); [ 325.594828][ T7099] lock(tpg_instances_lock); [ 325.602015][ T7099] lock(&sb->s_type->i_mutex_key#26); [ 325.609993][ T7099] lock(gadget_subsys.su_mutex); [ 325.615009][ T7099] [ 325.615009][ T7099] *** DEADLOCK *** [ 325.615009][ T7099] [ 325.623131][ T7099] locks held by syz.5.241/7099: 2, last CPU#0: [ 325.629270][ T7099] #0: ffff88801e348460 (sb_writers#15){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 325.638795][ T7099] #1: ffff888077bd3580 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 325.649712][ T7099] [ 325.649712][ T7099] stack backtrace: [ 325.655583][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.5.241 Not tainted syzkaller #0 PREEMPT(full) [ 325.664773][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 325.674818][ T7099] Call Trace: [ 325.678087][ T7099] [ 325.681003][ T7099] dump_stack_lvl+0x100/0x190 [ 325.685684][ T7099] print_circular_bug.cold+0x178/0x1be [ 325.691156][ T7099] check_noncircular+0x146/0x160 [ 325.696102][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.701738][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.707386][ T7099] check_prev_add+0xeb/0xe60 [ 325.711972][ T7099] __lock_acquire+0x1528/0x1f40 [ 325.716824][ T7099] lock_acquire+0x1d1/0x380 [ 325.721320][ T7099] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.727665][ T7099] ? __pfx___might_resched+0x10/0x10 [ 325.732979][ T7099] __mutex_lock+0x1a4/0x1bd0 [ 325.737564][ T7099] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.743904][ T7099] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.750243][ T7099] ? __lock_acquire+0xe8b/0x1f40 [ 325.755177][ T7099] ? __pfx___mutex_lock+0x10/0x10 [ 325.760200][ T7099] ? make_vfsuid+0xec/0x140 [ 325.764715][ T7099] ? __pfx___might_resched+0x10/0x10 [ 325.770009][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.775640][ T7099] ? make_vfsgid+0xf1/0x140 [ 325.780156][ T7099] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.786496][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.792126][ T7099] uvcg_streaming_header_allow_link+0x7c/0x650 [ 325.798301][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.803934][ T7099] ? inode_permission+0x374/0x620 [ 325.808959][ T7099] ? mntput_no_expire+0xe7/0x220 [ 325.813910][ T7099] configfs_symlink+0x695/0x1340 [ 325.818859][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.824492][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.830122][ T7099] ? security_inode_permission+0xbf/0x250 [ 325.835853][ T7099] ? __pfx_configfs_symlink+0x10/0x10 [ 325.841237][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.846872][ T7099] vfs_symlink+0x178/0x4d0 [ 325.851292][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.856927][ T7099] filename_symlinkat+0x2a6/0x560 [ 325.861952][ T7099] ? __pfx_filename_symlinkat+0x10/0x10 [ 325.867499][ T7099] ? strncpy_from_user+0x19d/0x2d0 [ 325.872619][ T7099] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.878250][ T7099] ? do_getname+0x191/0x390 [ 325.882763][ T7099] __x64_sys_symlinkat+0x9c/0xe0 [ 325.887711][ T7099] do_syscall_64+0x123/0x790 [ 325.892303][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.898201][ T7099] RIP: 0033:0x7fae4d59e159 [ 325.902606][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.922206][ T7099] RSP: 002b:00007fae4e4d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 325.930612][ T7099] RAX: ffffffffffffffda RBX: 00007fae4d825fa0 RCX: 00007fae4d59e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.938573][ T7099] RDX: 00002000000003c0 RSI: ffffffffffffff9c RDI: 0000200000000380 [ 325.946532][ T7099] RBP: 00007fae4d63506b R08: 0000000000000000 R09: 0000000000000000 [ 325.954505][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.962466][ T7099] R13: 00007fae4d826038 R14: 00007fae4d825fa0 R15: 00007ffc447e6198 [ 325.970443][ T7099] [ 326.063276][ T6862] team0: Port device team_slave_0 added [ 326.065865][ T6862] team0: Port device team_slave_1 added [ 326.142827][ T4927] Bluetooth: hci4: command tx timeout [ 328.080298][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.203701][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.237930][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.325707][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.407468][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 328.468386][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.529879][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.590910][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.681065][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.811025][ T12] bridge_slave_1: left allmulticast mode [ 328.811056][ T12] bridge_slave_1: left promiscuous mode [ 328.811213][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.819775][ T12] bridge_slave_0: left allmulticast mode [ 328.819803][ T12] bridge_slave_0: left promiscuous mode [ 328.819948][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.861070][ T12] bridge_slave_1: left allmulticast mode [ 328.861097][ T12] bridge_slave_1: left promiscuous mode [ 328.861235][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.862465][ T12] bridge_slave_0: left allmulticast mode [ 328.862497][ T12] bridge_slave_0: left promiscuous mode [ 328.862636][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.907229][ T12] bridge_slave_1: left allmulticast mode [ 328.907257][ T12] bridge_slave_1: left promiscuous mode [ 328.907397][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.934544][ T12] bridge_slave_0: left allmulticast mode [ 328.934573][ T12] bridge_slave_0: left promiscuous mode [ 328.934711][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.980613][ T12] bridge_slave_1: left allmulticast mode [ 328.980637][ T12] bridge_slave_1: left promiscuous mode [ 328.980743][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.009317][ T12] bridge_slave_0: left allmulticast mode [ 329.009339][ T12] bridge_slave_0: left promiscuous mode [ 329.009444][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.219315][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.221168][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.222434][ T12] bond0 (unregistering): Released all slaves [ 329.280794][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.282471][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.305583][ T12] bond0 (unregistering): Released all slaves [ 329.353574][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.356491][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.357438][ T12] bond0 (unregistering): Released all slaves [ 329.389339][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.390733][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.391625][ T12] bond0 (unregistering): Released all slaves [ 329.416421][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 329.709198][ T12] hsr_slave_0: left promiscuous mode [ 329.709895][ T12] hsr_slave_1: left promiscuous mode [ 329.710462][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.710495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.711071][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.711094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.726327][ T12] hsr_slave_0: left promiscuous mode [ 329.731674][ T12] hsr_slave_1: left promiscuous mode [ 329.732251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.732275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.740493][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.740517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.764655][ T12] hsr_slave_0: left promiscuous mode [ 329.773743][ T12] hsr_slave_1: left promiscuous mode [ 329.774290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.779563][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.804634][ T12] veth1_macvtap: left promiscuous mode [ 329.804671][ T12] veth0_macvtap: left promiscuous mode [ 329.804763][ T12] veth1_vlan: left promiscuous mode [ 329.804821][ T12] veth0_vlan: left promiscuous mode [ 329.829745][ T12] veth1_macvtap: left promiscuous mode [ 329.829781][ T12] veth0_macvtap: left promiscuous mode [ 329.829860][ T12] veth1_vlan: left promiscuous mode [ 329.829927][ T12] veth0_vlan: left promiscuous mode [ 330.013005][ T12] team0 (unregistering): Port device team_slave_1 removed [ 330.023779][ T12] team0 (unregistering): Port device team_slave_0 removed [ 330.080746][ T12] team0 (unregistering): Port device team_slave_1 removed [ 330.090636][ T12] team0 (unregistering): Port device team_slave_0 removed [ 330.210881][ T12] team0 (unregistering): Port device team_slave_1 removed [ 330.224781][ T12] team0 (unregistering): Port device team_slave_0 removed [ 330.338813][ T12] team0 (unregistering): Port device team_slave_1 removed [ 330.350543][ T12] team0 (unregistering): Port device team_slave_0 removed [ 330.404362][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 330.753317][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 331.072203][ T12] IPVS: stop unused estimator thread 0... [ 331.171202][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.184686][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 331.217782][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.269361][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.313654][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.410114][ T12] bridge_slave_1: left allmulticast mode [ 331.410146][ T12] bridge_slave_1: left promiscuous mode [ 331.410303][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.419419][ T12] bridge_slave_0: left allmulticast mode [ 331.419452][ T12] bridge_slave_0: left promiscuous mode [ 331.419600][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.452382][ T12] bridge_slave_1: left allmulticast mode [ 331.452418][ T12] bridge_slave_1: left promiscuous mode [ 331.452555][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.471707][ T12] bridge_slave_0: left allmulticast mode [ 331.471734][ T12] bridge_slave_0: left promiscuous mode [ 331.471879][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.571359][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.582064][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.585464][ T12] bond0 (unregistering): Released all slaves [ 331.626993][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.628743][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.629841][ T12] bond0 (unregistering): Released all slaves [ 331.665918][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 331.830273][ T12] hsr_slave_0: left promiscuous mode [ 331.830785][ T12] hsr_slave_1: left promiscuous mode [ 331.831374][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.831399][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.831975][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.832005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.839444][ T12] hsr_slave_0: left promiscuous mode [ 331.845725][ T12] hsr_slave_1: left promiscuous mode [ 331.846273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.853766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.875678][ T12] veth1_macvtap: left promiscuous mode [ 331.875714][ T12] veth0_macvtap: left promiscuous mode [ 331.875807][ T12] veth1_vlan: left promiscuous mode [ 331.875876][ T12] veth0_vlan: left promiscuous mode [ 332.059617][ T12] team0 (unregistering): Port device team_slave_1 removed [ 332.082375][ T12] team0 (unregistering): Port device team_slave_0 removed [ 332.217841][ T12] team0 (unregistering): Port device team_slave_1 removed [ 332.231636][ T12] team0 (unregistering): Port device team_slave_0 removed [ 332.712557][ T12] IPVS: stop unused estimator thread 0... [ 333.660314][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 334.028076][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 334.346358][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 334.694077][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 335.010205][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21