last executing test programs: 42.02811571s ago: executing program 4 (id=5): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r6, 0x0) 36.406107497s ago: executing program 4 (id=25): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0xfe, 0x0) 34.396479098s ago: executing program 4 (id=26): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15aba33a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f722fc58055b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775aafb8c5509086fdba99dba8fbbc7557df3769126732212b33004a42396dc614c501eddeec8a88861f6de3c01bcdf31dfbd3e1165bbb954434723aa31dfedf3d91791aed6773b6ba1b221c46e5f2c9d6e55a659b29b7865b0a4a66d7ae364022"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x26}, 0x28) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x200, 0xfffffff9, 0x0, 0x7f}, 0x10) recvmmsg$unix(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/251, 0xfb}], 0x1}}], 0x1, 0x40010020, 0x0) dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)) 28.264667712s ago: executing program 4 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4220000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r3, @ANYRESHEX=r2], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffdca, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24060050}, 0x8000) socket$kcm(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.991270092s ago: executing program 1 (id=34): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x7b, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_deladdr={0x4c, 0x15, 0x800, 0x70bd29, 0x25dfdbff, {0x2, 0x78, 0x18, 0x1}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010101}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0x4b7b0e70, 0x2, 0xd, 0xbfb6}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000885) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 15.381182967s ago: executing program 3 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) execve(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44890}, 0x8840) 15.301846109s ago: executing program 0 (id=45): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 15.29332559s ago: executing program 1 (id=46): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000100)="dfffff76", 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x200) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r4) close(0x4) 11.377737456s ago: executing program 32 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4220000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r3, @ANYRESHEX=r2], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffdca, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24060050}, 0x8000) socket$kcm(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.234038737s ago: executing program 3 (id=49): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 11.194029308s ago: executing program 1 (id=50): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 11.165763129s ago: executing program 0 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x80000, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) memfd_secret(0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10001) socketpair$unix(0x1, 0x2, 0x0, 0x0) 10.022816638s ago: executing program 3 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x9, [{{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0xe22, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @remote}}]}, 0x510) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 9.919004564s ago: executing program 0 (id=53): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) 9.909637955s ago: executing program 2 (id=54): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) execve(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44890}, 0x8840) 9.683393067s ago: executing program 3 (id=55): socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 9.273176479s ago: executing program 1 (id=56): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x7b, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_deladdr={0x4c, 0x15, 0x800, 0x70bd29, 0x25dfdbff, {0x2, 0x78, 0x18, 0x1}, [@IFA_ADDRESS={0x8, 0x1, @private=0xa010101}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0x4b7b0e70, 0x2, 0xd, 0xbfb6}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000885) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) 9.235628039s ago: executing program 2 (id=57): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newlink={0x30, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000100)="dfffff76", 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x200) syz_usb_disconnect(r3) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x422) syz_usb_disconnect(0xffffffffffffffff) close(0x4) 6.170085862s ago: executing program 0 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 5.640142104s ago: executing program 3 (id=59): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.38895575s ago: executing program 2 (id=60): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.929560624s ago: executing program 2 (id=61): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.748846975s ago: executing program 3 (id=62): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') 2.000548724s ago: executing program 0 (id=63): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x80000, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r1, &(0x7f0000001180)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) memfd_secret(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) pipe(&(0x7f0000000600)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.61451612s ago: executing program 2 (id=64): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x9, [{{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0xe22, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @remote}}]}, 0x510) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 1.252915956s ago: executing program 1 (id=65): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 907.017461ms ago: executing program 0 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) 583.172591ms ago: executing program 2 (id=67): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setfsgid(0xee00) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000b790000000000000000000000000000000180a4406b25edf58ea8bac77d6390d"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r5, 0x1, &(0x7f0000002a00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f00000000c0)='34', 0x2, 0x8000000000005}]) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "fefe807eb3"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 0s ago: executing program 1 (id=68): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 83.996883][ T5792] cgroup: Unknown subsys name 'net' [ 84.228668][ T5792] cgroup: Unknown subsys name 'cpuset' [ 84.273936][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.902428][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.667477][ T991] cfg80211: failed to load regulatory.db [ 90.118773][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.134712][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.140260][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.141864][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.142796][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.176953][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.178909][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.180769][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.182863][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.234553][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.237882][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.267528][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.269605][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.284040][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.284989][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.311193][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.312800][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.314196][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.315746][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.320696][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.371314][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.381787][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.385198][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.386455][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.392523][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.249909][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 91.257813][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 91.380578][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 91.559860][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 91.604719][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 92.210865][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.211809][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.212129][ T5803] bridge_slave_0: entered allmulticast mode [ 92.215280][ T5803] bridge_slave_0: entered promiscuous mode [ 92.233460][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.233597][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.234321][ T5806] bridge_slave_0: entered allmulticast mode [ 92.237101][ T5806] bridge_slave_0: entered promiscuous mode [ 92.265365][ T5808] Bluetooth: hci1: command tx timeout [ 92.335343][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.335475][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.335597][ T5803] bridge_slave_1: entered allmulticast mode [ 92.336974][ T5803] bridge_slave_1: entered promiscuous mode [ 92.344445][ T5808] Bluetooth: hci3: command tx timeout [ 92.344532][ T5808] Bluetooth: hci2: command tx timeout [ 92.344609][ T5808] Bluetooth: hci0: command tx timeout [ 92.350381][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.350527][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.350725][ T5806] bridge_slave_1: entered allmulticast mode [ 92.354940][ T5806] bridge_slave_1: entered promiscuous mode [ 92.423327][ T5805] Bluetooth: hci4: command tx timeout [ 92.679069][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.679159][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.679255][ T5815] bridge_slave_0: entered allmulticast mode [ 92.680565][ T5815] bridge_slave_0: entered promiscuous mode [ 92.954179][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.954267][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.954365][ T5815] bridge_slave_1: entered allmulticast mode [ 92.955861][ T5815] bridge_slave_1: entered promiscuous mode [ 92.960252][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.960498][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.960671][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.960867][ T5809] bridge_slave_0: entered allmulticast mode [ 92.962877][ T5809] bridge_slave_0: entered promiscuous mode [ 92.975973][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.146671][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.146880][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.146975][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.147077][ T5809] bridge_slave_1: entered allmulticast mode [ 93.148554][ T5809] bridge_slave_1: entered promiscuous mode [ 93.154716][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.163564][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.163712][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.163923][ T5810] bridge_slave_0: entered allmulticast mode [ 93.167124][ T5810] bridge_slave_0: entered promiscuous mode [ 93.525808][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.526098][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.526314][ T5810] bridge_slave_1: entered allmulticast mode [ 93.530685][ T5810] bridge_slave_1: entered promiscuous mode [ 93.687074][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.006130][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.007385][ T5803] team0: Port device team_slave_0 added [ 94.009526][ T5806] team0: Port device team_slave_0 added [ 94.015474][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.195686][ T5803] team0: Port device team_slave_1 added [ 94.197159][ T5806] team0: Port device team_slave_1 added [ 94.199250][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.202509][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.343263][ T5805] Bluetooth: hci1: command tx timeout [ 94.423321][ T5805] Bluetooth: hci0: command tx timeout [ 94.423355][ T5805] Bluetooth: hci2: command tx timeout [ 94.423374][ T5805] Bluetooth: hci3: command tx timeout [ 94.503470][ T5808] Bluetooth: hci4: command tx timeout [ 94.518847][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.521441][ T5815] team0: Port device team_slave_0 added [ 94.806706][ T5815] team0: Port device team_slave_1 added [ 94.975267][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.975279][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.975292][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.977823][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.977843][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.977869][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.980128][ T5809] team0: Port device team_slave_0 added [ 95.134558][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.134571][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.134584][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.135493][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.135503][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.135515][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.137134][ T5809] team0: Port device team_slave_1 added [ 95.138529][ T5810] team0: Port device team_slave_0 added [ 95.305482][ T5810] team0: Port device team_slave_1 added [ 95.306360][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.306372][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.306389][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.464666][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.464681][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.464697][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.467181][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.467192][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.467204][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.694856][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.694870][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.694907][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.695813][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.695822][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.695834][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.921511][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.921528][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.921545][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.934600][ T5803] hsr_slave_0: entered promiscuous mode [ 95.936169][ T5803] hsr_slave_1: entered promiscuous mode [ 95.984172][ T5806] hsr_slave_0: entered promiscuous mode [ 95.984938][ T5806] hsr_slave_1: entered promiscuous mode [ 95.985575][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 95.985648][ T5806] Cannot create hsr debugfs directory [ 96.249900][ T5815] hsr_slave_0: entered promiscuous mode [ 96.250612][ T5815] hsr_slave_1: entered promiscuous mode [ 96.251141][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 96.251155][ T5815] Cannot create hsr debugfs directory [ 96.423444][ T5808] Bluetooth: hci1: command tx timeout [ 96.471340][ T5809] hsr_slave_0: entered promiscuous mode [ 96.472017][ T5809] hsr_slave_1: entered promiscuous mode [ 96.472522][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 96.472537][ T5809] Cannot create hsr debugfs directory [ 96.503385][ T5808] Bluetooth: hci3: command tx timeout [ 96.503416][ T5808] Bluetooth: hci2: command tx timeout [ 96.503435][ T5808] Bluetooth: hci0: command tx timeout [ 96.583266][ T5805] Bluetooth: hci4: command tx timeout [ 96.700653][ T5810] hsr_slave_0: entered promiscuous mode [ 96.701360][ T5810] hsr_slave_1: entered promiscuous mode [ 96.701869][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 96.701885][ T5810] Cannot create hsr debugfs directory [ 98.040639][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.066839][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.099535][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.160353][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.290914][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.319545][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.360409][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.410310][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.504558][ T5805] Bluetooth: hci1: command tx timeout [ 98.532655][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.583849][ T5805] Bluetooth: hci0: command tx timeout [ 98.583890][ T5805] Bluetooth: hci2: command tx timeout [ 98.583914][ T5805] Bluetooth: hci3: command tx timeout [ 98.589007][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.622932][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.672527][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.673266][ T5808] Bluetooth: hci4: command tx timeout [ 98.811055][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.854238][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.891324][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.935833][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.022560][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.092546][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.119802][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.160746][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.207064][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.247902][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.288686][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.289176][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.316456][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.339113][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.339202][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.410860][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.440410][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.440640][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.466380][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.490248][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.490366][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.569869][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.608226][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.629394][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.629563][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.681994][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.691084][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.761010][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.826040][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.840867][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.841041][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.917137][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.917403][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.028349][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.072709][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.080432][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.146055][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.146329][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.190806][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.365271][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.549898][ T5803] veth0_vlan: entered promiscuous mode [ 100.640493][ T5803] veth1_vlan: entered promiscuous mode [ 100.667876][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.700809][ T5806] veth0_vlan: entered promiscuous mode [ 100.779805][ T5806] veth1_vlan: entered promiscuous mode [ 100.831983][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.865234][ T5803] veth0_macvtap: entered promiscuous mode [ 100.889317][ T5803] veth1_macvtap: entered promiscuous mode [ 100.928643][ T5815] veth0_vlan: entered promiscuous mode [ 100.936772][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.960586][ T5806] veth0_macvtap: entered promiscuous mode [ 100.981755][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.004949][ T5815] veth1_vlan: entered promiscuous mode [ 101.010839][ T5806] veth1_macvtap: entered promiscuous mode [ 101.053352][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.112194][ T3564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.137641][ T3564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.149976][ T3564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.161096][ T5809] veth0_vlan: entered promiscuous mode [ 101.169660][ T3564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.187534][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.312789][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.321288][ T5809] veth1_vlan: entered promiscuous mode [ 101.436432][ T3564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.439396][ T5815] veth0_macvtap: entered promiscuous mode [ 101.442280][ T3564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.448966][ T3564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.480672][ T3564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486088][ T5815] veth1_macvtap: entered promiscuous mode [ 101.615990][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.616014][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.732155][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.782462][ T5809] veth0_macvtap: entered promiscuous mode [ 101.796893][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.809612][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.809632][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.848949][ T5809] veth1_macvtap: entered promiscuous mode [ 101.879011][ T5810] veth0_vlan: entered promiscuous mode [ 101.890713][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.920439][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.921546][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.921567][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.937883][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.970988][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.020804][ T5810] veth1_vlan: entered promiscuous mode [ 102.090090][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.127443][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.127465][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.222892][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.307250][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.311634][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.319130][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.329776][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.591774][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.591798][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.595960][ T5810] veth0_macvtap: entered promiscuous mode [ 102.748108][ T37] audit: type=1326 audit(1762529888.967:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.0.1" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb1310f6c9 code=0x0 [ 102.801143][ T5810] veth1_macvtap: entered promiscuous mode [ 102.806767][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 102.837036][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.837072][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.886270][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.886302][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.033259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.183283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.243752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.343139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.308534][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.308558][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.470938][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.470961][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.586873][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.667849][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.756017][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.756042][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.756358][ T3607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.766777][ T3607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.780377][ T3607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.781596][ T3607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.215298][ T5961] input: syz1 as /devices/virtual/input/input5 [ 108.968247][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.968268][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.026095][ T5808] Bluetooth: unknown link type 128 [ 111.026857][ T4892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.026878][ T4892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.081998][ T5972] netlink: 'syz.3.15': attribute type 2 has an invalid length. [ 113.063667][ T5808] Bluetooth: hci4: command tx timeout [ 113.713332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.903727][ T5989] 9pnet_virtio: no channels available for device syz [ 118.763127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.263149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.263186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.934311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.383242][ T5808] Bluetooth: unknown link type 128 [ 121.398023][ T6004] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 121.604851][ T6007] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.22'. [ 122.423421][ T5808] Bluetooth: hci3: command tx timeout [ 124.049533][ T6010] netlink: 72 bytes leftover after parsing attributes in process `syz.0.22'. [ 125.181543][ T6020] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.23'. [ 125.318525][ T6022] netlink: 72 bytes leftover after parsing attributes in process `syz.1.23'. [ 126.610332][ T6015] syz.0.22 (6015): drop_caches: 2 [ 127.006353][ T6022] syz.1.23 (6022): drop_caches: 2 [ 127.126650][ T6040] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.28'. [ 127.267860][ T6043] netlink: 72 bytes leftover after parsing attributes in process `syz.2.28'. [ 129.055364][ T6041] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.26'. [ 133.412342][ T6043] syz.2.28 (6043): drop_caches: 2 [ 133.918805][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.918989][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.034995][ T6043] syz.2.28 (6043): drop_caches: 2 [ 134.251414][ T37] audit: type=1326 audit(1762529920.477:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6057 comm="syz.4.31" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efefdb8f6c9 code=0x0 [ 134.348118][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 134.355574][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.355606][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.421558][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.421594][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.566075][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.919129][ T6074] 9pnet_virtio: no channels available for device syz [ 137.303438][ T6085] Process accounting resumed [ 140.273529][ T991] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.388803][ T5808] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 140.683712][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.683751][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.683775][ T991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.683825][ T991] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.683849][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.852212][ T991] usb 3-1: config 0 descriptor?? [ 144.522825][ T5808] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 144.697172][ T5808] Bluetooth: hci1: Injecting HCI hardware error event [ 144.851849][ T991] usbhid 3-1:0.0: can't add hid device: -71 [ 144.852001][ T991] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 144.895568][ T5808] Bluetooth: hci1: hardware error 0x00 [ 145.025319][ T991] usb 3-1: USB disconnect, device number 2 [ 145.569714][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.603135][ T5805] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 145.772692][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.772768][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.928448][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.928572][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.928710][ T9] usb 2-1: Product: syz [ 145.928728][ T9] usb 2-1: Manufacturer: syz [ 145.928744][ T9] usb 2-1: SerialNumber: syz [ 148.845582][ T9] usb 2-1: config 0 descriptor?? [ 149.031196][ T9] usb 2-1: can't set config #0, error -71 [ 149.051704][ T9] usb 2-1: USB disconnect, device number 2 [ 149.623400][ T5805] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 149.624087][ T5805] Bluetooth: hci0: Injecting HCI hardware error event [ 149.625969][ T5811] Bluetooth: hci0: hardware error 0x00 [ 150.627780][ T5805] Bluetooth: unknown link type 128 [ 150.684180][ T6140] netlink: 'syz.0.53': attribute type 2 has an invalid length. [ 150.921226][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.933966][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.935098][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.937643][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.938634][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.143269][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 151.964087][ T6030] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.115939][ T5811] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 152.152579][ T6030] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.152652][ T6030] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.207777][ T6030] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.207846][ T6030] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.207868][ T6030] usb 3-1: Product: syz [ 152.207950][ T6030] usb 3-1: Manufacturer: syz [ 152.207968][ T6030] usb 3-1: SerialNumber: syz [ 152.539926][ T6030] usb 3-1: config 0 descriptor?? [ 152.922338][ T6030] usb 3-1: selecting invalid altsetting 0 [ 152.983679][ T5811] Bluetooth: hci5: command tx timeout [ 154.716898][ T6157] 9pnet_virtio: no channels available for device syz [ 155.063304][ T5811] Bluetooth: hci5: command tx timeout [ 157.272870][ T5811] Bluetooth: hci5: command tx timeout [ 157.325820][ T6030] usb 3-1: USB disconnect, device number 3 [ 157.408276][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.949022][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 159.313298][ T5811] Bluetooth: hci5: command tx timeout [ 266.923025][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 266.923040][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29/2:b..l P6185/2:b..l P5170/1:b..l P5809/4:b..l P16/1:b..l P6193/1:b..l [ 266.923106][ C0] rcu: (detected by 0, t=10502 jiffies, g=12181, q=490 ncpus=2) [ 266.923119][ C0] task:syz.2.67 state:R running task stack:24112 pid:6193 tgid:6192 ppid:5803 task_flags:0x400140 flags:0x00080001 [ 266.923224][ C0] Call Trace: [ 266.923229][ C0] [ 266.923240][ C0] __schedule+0x16f3/0x4c20 [ 266.923277][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.923338][ C0] ? __pfx___schedule+0x10/0x10 [ 266.923360][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.923385][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 266.923407][ C0] preempt_schedule_irq+0xb5/0x150 [ 266.923425][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 266.923451][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 266.923467][ C0] irqentry_exit+0x6f/0x90 [ 266.923484][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 266.923498][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 266.923515][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 ab 4f 6e f6 cc [ 266.923526][ C0] RSP: 0018:ffffc90008397418 EFLAGS: 00000246 [ 266.923539][ C0] RAX: 0000000000000001 RBX: ffff888028b46000 RCX: ffff888059791e00 [ 266.923607][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000 [ 266.923619][ C0] RBP: ffffc900083974a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.923628][ C0] R10: dffffc0000000000 R11: fffff9400025c1c7 R12: ffffc900083975c0 [ 266.923637][ C0] R13: 00000000000007d7 R14: 1ffff92001072e84 R15: dffffc0000000000 [ 266.923666][ C0] rcu_read_lock_sched_held+0x60/0x100 [ 266.923685][ C0] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 266.923703][ C0] ? kthread_blkcg+0x59/0xe0 [ 266.923725][ C0] blkcg_css+0x71/0x1d0 [ 266.923745][ C0] ? blk_cgroup_congested+0x1d/0x210 [ 266.923759][ C0] blk_cgroup_congested+0xbc/0x210 [ 266.923774][ C0] __folio_throttle_swaprate+0x67/0x190 [ 266.923796][ C0] shmem_add_to_page_cache+0x6f1/0xbc0 [ 266.923824][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 266.923856][ C0] shmem_get_folio_gfp+0x7d2/0x1a70 [ 266.923895][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 266.923913][ C0] ? rcu_read_unlock_special+0x35b/0x470 [ 266.923932][ C0] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 266.923953][ C0] shmem_fault+0x170/0x380 [ 266.923979][ C0] __do_fault+0x138/0x390 [ 266.923995][ C0] handle_mm_fault+0x23c6/0x3400 [ 266.924013][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 266.924035][ C0] ? handle_mm_fault+0xdb/0x3400 [ 266.924059][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 266.924079][ C0] ? follow_page_pte+0xc0d/0x1360 [ 266.924105][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 266.924136][ C0] __get_user_pages+0x1685/0x2860 [ 266.924197][ C0] populate_vma_page_range+0x29f/0x3a0 [ 266.924223][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 266.924244][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 266.924335][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 266.924357][ C0] __mm_populate+0x24c/0x380 [ 266.924383][ C0] ? __pfx___mm_populate+0x10/0x10 [ 266.924407][ C0] ? vm_mmap_pgoff+0x353/0x4d0 [ 266.924436][ C0] vm_mmap_pgoff+0x38a/0x4d0 [ 266.924459][ C0] ? __se_sys_futex+0x36f/0x400 [ 266.924485][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.924506][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 266.924531][ C0] ? ksys_mmap_pgoff+0xf5/0x720 [ 266.924557][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 266.924583][ C0] do_syscall_64+0xfa/0xfa0 [ 266.924609][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.924626][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 266.924644][ C0] ? clear_bhb_loop+0x60/0xb0 [ 266.924667][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.924685][ C0] RIP: 0033:0x7feb6024f6c9 [ 266.924702][ C0] RSP: 002b:00007feb5e4ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 SYZFAIL: failed to send rpc fd=3 want=576 sent=0 n=-1 (errno 32: Broken pipe) [ 266.924721][ C0] RAX: ffffffffffffffda RBX: 00007feb604a5fa0 RCX: 00007feb6024f6c9 [ 266.924734][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 266.924747][ C0] RBP: 00007feb602d1f91 R08: ffffffffffffffff R09: 0000000000000000 [ 266.924758][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 266.924769][ C0] R13: 00007feb604a6038 R14: 00007feb604a5fa0 R15: 00007ffc5f010688 [ 266.924802][ C0] [ 266.924810][ C0] task:ktimers/0 state:R running task stack:22808 pid:16 tgid:16 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 266.924868][ C0] Call Trace: [ 266.924875][ C0] [ 266.924886][ C0] __schedule+0x16f3/0x4c20 [ 266.924938][ C0] ? __pfx___schedule+0x10/0x10 [ 266.924963][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.925000][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 266.925028][ C0] preempt_schedule_irq+0xb5/0x150 [ 266.925053][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 266.925085][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 266.925106][ C0] irqentry_exit+0x6f/0x90 [ 266.925129][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 266.925147][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 266.925170][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b 81 06 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 266.925185][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00000206 [ 266.925200][ C0] RAX: 751a2bd19ec6f300 RBX: 0000000000000000 RCX: 751a2bd19ec6f300 [ 266.925213][ C0] RDX: 0000000000000000 RSI: ffffffff8cf64b05 RDI: ffffffff8b3ddd60 [ 266.925226][ C0] RBP: ffffffff81ac8b4c R08: 0000000000000000 R09: ffffffff81ac8b4c [ 266.925238][ C0] R10: dffffc0000000000 R11: ffffffff81ac8ad0 R12: 0000000000000000 [ 266.925259][ C0] R13: ffff8880b8827e78 R14: 0000000000000001 R15: 0000000000000246 [ 266.925275][ C0] ? hrtimer_run_softirq+0x7c/0x2e0 [ 266.925292][ C0] ? __pfx_hrtimer_run_softirq+0x10/0x10 [ 266.925309][ C0] ? hrtimer_run_softirq+0x7c/0x2e0 [ 266.925351][ C0] rt_spin_lock+0x88/0x3e0 [ 266.925369][ C0] ? hrtimer_run_softirq+0x7c/0x2e0 [ 266.925386][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 266.925409][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 266.925440][ C0] hrtimer_run_softirq+0x7c/0x2e0 [ 266.925464][ C0] handle_softirqs+0x22f/0x710 [ 266.925497][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.925530][ C0] run_ktimerd+0xcf/0x190 [ 266.925554][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 266.925575][ C0] ? schedule+0x91/0x360 [ 266.925606][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 266.925628][ C0] smpboot_thread_fn+0x542/0xa60 [ 266.925652][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 266.925684][ C0] kthread+0x711/0x8a0 [ 266.925713][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 266.925736][ C0] ? __pfx_kthread+0x10/0x10 [ 266.925759][ C0] ? rt_spin_unlock+0x150/0x200 [ 266.925784][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.925802][ C0] ? __pfx_kthread+0x10/0x10 [ 266.925829][ C0] ret_from_fork+0x4bc/0x870 [ 266.925853][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 266.925883][ C0] ? __switch_to_asm+0x39/0x70 [ 266.925901][ C0] ? __switch_to_asm+0x33/0x70 [ 266.925917][ C0] ? __pfx_kthread+0x10/0x10 [ 266.925944][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.925982][ C0] [ 266.925989][ C0] task:syz-executor state:R running task stack:20904 pid:5809 tgid:5809 ppid:5798 task_flags:0x400140 flags:0x00080001 [ 266.926097][ C0] Call Trace: [ 266.926103][ C0] [ 266.926115][ C0] __schedule+0x16f3/0x4c20 [ 266.926165][ C0] ? __pfx___schedule+0x10/0x10 [ 266.926188][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.926229][ C0] ? preempt_schedule+0xae/0xc0 [ 266.926264][ C0] preempt_schedule_common+0x83/0xd0 [ 266.926290][ C0] preempt_schedule+0xae/0xc0 [ 266.926313][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 266.926339][ C0] ? pfn_valid+0xba/0x490 [ 266.926367][ C0] preempt_schedule_thunk+0x16/0x30 [ 266.926392][ C0] ? pfn_valid+0x3fd/0x490 [ 266.926416][ C0] pfn_valid+0x402/0x490 [ 266.926441][ C0] page_table_check_set+0x25/0x730 [ 266.926463][ C0] ? __page_table_check_ptes_set+0x290/0x2f0 [ 266.926492][ C0] copy_pmd_range+0x4790/0x7950 [ 266.926530][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 266.926580][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 266.926613][ C0] ? do_raw_spin_lock+0x121/0x290 [ 266.926652][ C0] copy_page_range+0xaff/0x1170 [ 266.926693][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 266.926710][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 266.926743][ C0] ? dup_mmap+0xf10/0x1ae0 [ 266.926776][ C0] dup_mmap+0xf5b/0x1ae0 [ 266.926821][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 266.926859][ C0] ? mm_init+0xc26/0xe20 [ 266.926889][ C0] copy_mm+0x13c/0x4b0 [ 266.926913][ C0] ? copy_process+0x979/0x3ae0 [ 266.926935][ C0] copy_process+0x1704/0x3ae0 [ 266.926957][ C0] ? wp_page_reuse+0x4db/0x840 [ 266.926986][ C0] ? copy_process+0x979/0x3ae0 [ 266.927022][ C0] ? __pfx_copy_process+0x10/0x10 [ 266.927058][ C0] kernel_clone+0x224/0x7c0 [ 266.927085][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 266.927131][ C0] __x64_sys_clone+0x18b/0x1e0 [ 266.927160][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 266.927202][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 266.927228][ C0] ? do_syscall_64+0xbe/0xfa0 [ 266.927264][ C0] do_syscall_64+0xfa/0xfa0 [ 266.927287][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.927312][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.927330][ C0] ? clear_bhb_loop+0x60/0xb0 [ 266.927353][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.927370][ C0] RIP: 0033:0x7fbfdbe75e13 [ 266.927384][ C0] RSP: 002b:00007ffd2680e088 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 266.927402][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfdbe75e13 [ 266.927414][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 266.927425][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 266.927436][ C0] R10: 0000555572d447d0 R11: 0000000000000246 R12: 0000000000000000 [ 266.927449][ C0] R13: 00000000000927c0 R14: 000000000002700d R15: 00007ffd2680e220 [ 266.927481][ C0] [ 266.927489][ C0] task:udevd state:R running task stack:24072 pid:5170 tgid:5170 ppid:1 task_flags:0x400140 flags:0x00080001 [ 266.927569][ C0] Call Trace: [ 266.927575][ C0] [ 266.927588][ C0] __schedule+0x16f3/0x4c20 [ 266.927635][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.927660][ C0] ? __pfx___schedule+0x10/0x10 [ 266.927680][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 266.927709][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.927744][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 266.927772][ C0] preempt_schedule_irq+0xb5/0x150 [ 266.927796][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 266.927828][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 266.927847][ C0] irqentry_exit+0x6f/0x90 [ 266.927869][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.927888][ C0] RIP: 0010:lock_is_held_type+0x9/0x190 [ 266.927912][ C0] Code: eb b5 e8 1a fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 <41> 55 41 54 53 48 83 ec 10 65 48 8b 05 16 fb e1 06 48 89 44 24 08 [ 266.927926][ C0] RSP: 0018:ffffc90004027800 EFLAGS: 00000202 [ 266.927941][ C0] RAX: 1ffffffff1ab5f01 RBX: ffffffff825625ac RCX: 99caf0a0243c7100 [ 266.927953][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8d5aa840 [ 266.927965][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 266.927975][ C0] R10: ffff888140447de0 R11: ffffffff82563920 R12: dffffc0000000000 [ 266.927988][ C0] R13: 0000000000000000 R14: ffff888024236d20 R15: ffff88814331a870 [ 266.928004][ C0] ? kernfs_root+0x1c/0x230 [ 266.928020][ C0] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 266.928051][ C0] kernfs_root+0xf6/0x230 [ 266.928072][ C0] kernfs_iop_permission+0x6c/0x430 [ 266.928090][ C0] ? __pfx_step_into+0x10/0x10 [ 266.928121][ C0] inode_permission+0x285/0x470 [ 266.928146][ C0] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 266.928169][ C0] link_path_walk+0x232/0xea0 [ 266.928214][ C0] path_lookupat+0x97/0x430 [ 266.928240][ C0] filename_lookup+0x212/0x570 [ 266.928264][ C0] ? vfs_fstatat+0x43/0x170 [ 266.928287][ C0] ? __x64_sys_newfstatat+0x116/0x190 [ 266.928310][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 266.928355][ C0] ? __might_fault+0xb0/0x130 [ 266.928390][ C0] vfs_statx+0xf8/0x550 [ 266.928422][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 266.928445][ C0] ? strncpy_from_user+0x150/0x290 [ 266.928473][ C0] ? getname_flags+0x1e5/0x540 [ 266.928502][ C0] vfs_fstatat+0x118/0x170 [ 266.928530][ C0] __x64_sys_newfstatat+0x116/0x190 [ 266.928546][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.928572][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 266.928619][ C0] ? do_syscall_64+0xbe/0xfa0 [ 266.928647][ C0] do_syscall_64+0xfa/0xfa0 [ 266.928673][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.928689][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.928707][ C0] ? clear_bhb_loop+0x60/0xb0 [ 266.928730][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.928747][ C0] RIP: 0033:0x7f856938eb0a [ 266.928761][ C0] RSP: 002b:00007ffed6b10048 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 266.928778][ C0] RAX: ffffffffffffffda RBX: 00007ffed6b104e0 RCX: 00007f856938eb0a [ 266.928791][ C0] RDX: 00007ffed6b10050 RSI: 00007ffed6b104e0 RDI: 00000000ffffff9c [ 266.928803][ C0] RBP: 0000557be9889910 R08: 0000000000000000 R09: 0000000000000001 [ 266.928815][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed6b100e0 [ 266.928826][ C0] R13: 0000000000000100 R14: 0000557be6370be0 R15: 00007ffed6b10b60 [ 266.928858][ C0] [ 266.928865][ C0] task:syz.3.62 state:R running task stack:26632 pid:6185 tgid:6171 ppid:5815 task_flags:0x40044c flags:0x00080001 [ 266.928952][ C0] Call Trace: [ 266.928958][ C0] [ 266.928969][ C0] __schedule+0x16f3/0x4c20 [ 266.928997][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 266.929039][ C0] ? __pfx___schedule+0x10/0x10 [ 266.929064][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.929096][ C0] ? do_raw_spin_lock+0x121/0x290 [ 266.929119][ C0] ? preempt_schedule+0xae/0xc0 [ 266.929145][ C0] preempt_schedule_common+0x83/0xd0 [ 266.929169][ C0] preempt_schedule+0xae/0xc0 [ 266.929192][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 266.929225][ C0] preempt_schedule_thunk+0x16/0x30 [ 266.929261][ C0] rt_spin_lock+0x2fb/0x3e0 [ 266.929284][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 266.929316][ C0] __folio_batch_add_and_move+0x284/0xa90 [ 266.929342][ C0] ? __pfx_lru_activate+0x10/0x10 [ 266.929372][ C0] folio_mark_accessed+0x36c/0x4a0 [ 266.929403][ C0] unmap_page_range+0x18fa/0x3c10 [ 266.929470][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 266.929498][ C0] ? mas_find+0xb0e/0xd30 [ 266.929521][ C0] ? unmap_vmas+0x144/0x580 [ 266.929544][ C0] unmap_vmas+0x399/0x580 [ 266.929573][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 266.929619][ C0] exit_mmap+0x240/0xb40 [ 266.929650][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 266.929672][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 266.929710][ C0] ? __pfx_exit_aio+0x10/0x10 [ 266.929747][ C0] ? uprobe_clear_state+0x288/0x2a0 [ 266.929772][ C0] ? mm_update_next_owner+0xa7/0x870 [ 266.929804][ C0] __mmput+0xcb/0x3d0 [ 266.929827][ C0] exit_mm+0x1da/0x2c0 [ 266.929857][ C0] ? __pfx_exit_mm+0x10/0x10 [ 266.929886][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.929908][ C0] do_exit+0x648/0x2300 [ 266.929933][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.929969][ C0] ? __pfx_do_exit+0x10/0x10 [ 266.929992][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 266.930012][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 266.930047][ C0] do_group_exit+0x21c/0x2d0 [ 266.930064][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.930087][ C0] get_signal+0x125d/0x1310 [ 266.930132][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 266.930156][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 266.930193][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 266.930221][ C0] exit_to_user_mode_loop+0x72/0x130 [ 266.930245][ C0] do_syscall_64+0x2bd/0xfa0 [ 266.930275][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.930299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.930316][ C0] ? clear_bhb_loop+0x60/0xb0 [ 266.930338][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.930355][ C0] RIP: 0033:0x7f10af7ff6c9 [ 266.930369][ C0] RSP: 002b:00007f10ada3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 266.930386][ C0] RAX: 0000000000010106 RBX: 00007f10afa56090 RCX: 00007f10af7ff6c9 [ 266.930397][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 266.930409][ C0] RBP: 00007f10af881f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.930420][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 266.930431][ C0] R13: 00007f10afa56128 R14: 00007f10afa56090 R15: 00007ffd6e6682d8 [ 266.930462][ C0] [ 266.930468][ C0] task:ktimers/1 state:R running task stack:22352 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 266.930519][ C0] Call Trace: [ 266.930525][ C0] [ 266.930536][ C0] __schedule+0x16f3/0x4c20 [ 266.930585][ C0] ? __pfx___schedule+0x10/0x10 [ 266.930606][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 266.930647][ C0] ? preempt_schedule+0xae/0xc0 [ 266.930672][ C0] preempt_schedule_common+0x83/0xd0 [ 266.930696][ C0] preempt_schedule+0xae/0xc0 [ 266.930718][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 266.930750][ C0] preempt_schedule_thunk+0x16/0x30 [ 266.930779][ C0] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 266.930804][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 266.930829][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.930861][ C0] rt_mutex_slowunlock+0x493/0x8a0 [ 266.930881][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 266.930906][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 266.930928][ C0] ? rt_spin_unlock+0x150/0x200 [ 266.930953][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.930977][ C0] snd_seq_check_queue+0x17d/0x560 [ 266.930996][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 266.931025][ C0] ? rt_spin_unlock+0x150/0x200 [ 266.931044][ C0] ? __pfx_snd_seq_check_queue+0x10/0x10 [ 266.931065][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.931089][ C0] ? snd_seq_timer_interrupt+0x34f/0x470 [ 266.931111][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.931132][ C0] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 266.931154][ C0] snd_timer_process_callbacks+0x225/0x2f0 [ 266.931188][ C0] snd_timer_interrupt+0xecb/0x10c0 [ 266.931233][ C0] snd_hrtimer_callback+0x213/0x3a0 [ 266.931268][ C0] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 266.931286][ C0] __hrtimer_run_queues+0x552/0xd40 [ 266.931333][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 266.931358][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 266.931390][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 266.931413][ C0] handle_softirqs+0x22f/0x710 [ 266.931444][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.931477][ C0] run_ktimerd+0xcf/0x190 [ 266.931500][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 266.931522][ C0] ? schedule+0x91/0x360 [ 266.931552][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 266.931573][ C0] smpboot_thread_fn+0x542/0xa60 [ 266.931596][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 266.931628][ C0] kthread+0x711/0x8a0 [ 266.931657][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 266.931679][ C0] ? __pfx_kthread+0x10/0x10 [ 266.931702][ C0] ? rt_spin_unlock+0x150/0x200 [ 266.931727][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.931745][ C0] ? __pfx_kthread+0x10/0x10 [ 266.931772][ C0] ret_from_fork+0x4bc/0x870 [ 266.931797][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 266.931826][ C0] ? __switch_to_asm+0x39/0x70 [ 266.931842][ C0] ? __switch_to_asm+0x33/0x70 [ 266.931859][ C0] ? __pfx_kthread+0x10/0x10 [ 266.931885][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.931922][ C0] [ 266.931930][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10204 jiffies! g12181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 266.931950][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=6035 [ 266.931960][ C0] rcu: rcu_preempt kthread starved for 10205 jiffies! g12181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 266.931978][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 266.931988][ C0] rcu: RCU grace-period kthread stack dump: [ 266.931993][ C0] task:rcu_preempt state:I stack:27352 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 266.932046][ C0] Call Trace: [ 266.932052][ C0] [ 266.932063][ C0] __schedule+0x16f3/0x4c20 [ 266.932108][ C0] ? __lock_acquire+0xab9/0xd20 [ 266.932132][ C0] ? __pfx___schedule+0x10/0x10 [ 266.932172][ C0] ? schedule+0x91/0x360 [ 266.932198][ C0] schedule+0x165/0x360 [ 266.932223][ C0] schedule_timeout+0x12b/0x270 [ 266.932251][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 266.932272][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 266.932297][ C0] ? __pfx_process_timeout+0x10/0x10 [ 266.932322][ C0] ? prepare_to_swait_event+0x341/0x380 [ 266.932351][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 266.932389][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 266.932414][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 266.932445][ C0] ? finish_swait+0xcd/0x1f0 [ 266.932471][ C0] rcu_gp_kthread+0x99/0x390 [ 266.932497][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.932522][ C0] ? __kthread_parkme+0x7b/0x200 [ 266.932545][ C0] ? __kthread_parkme+0x1a1/0x200 [ 266.932575][ C0] kthread+0x711/0x8a0 [ 266.932612][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.932635][ C0] ? __pfx_kthread+0x10/0x10 [ 266.932658][ C0] ? rt_spin_unlock+0x150/0x200 [ 266.932682][ C0] ? rt_spin_unlock+0x161/0x200 [ 266.932699][ C0] ? __pfx_kthread+0x10/0x10 [ 266.932726][ C0] ret_from_fork+0x4bc/0x870 [ 266.932749][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 266.932778][ C0] ? __switch_to_asm+0x39/0x70 [ 266.932795][ C0] ? __switch_to_asm+0x33/0x70 [ 266.932811][ C0] ? __pfx_kthread+0x10/0x10 [ 266.932837][ C0] ret_from_fork_asm+0x1a/0x30 [ 266.932872][ C0] [ 266.932879][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 266.932891][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 266.932910][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.932920][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 266.932943][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 c8 27 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 266.932957][ C0] RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2 [ 266.932972][ C0] RAX: 93c3a96d89fd4d00 RBX: ffffffff81954cf7 RCX: 93c3a96d89fd4d00 [ 266.932984][ C0] RDX: 0000000000000001 RSI: ffffffff8cd8de17 RDI: ffffffff8b3ddd60 [ 266.932996][ C0] RBP: ffffffff8d207ea8 R08: ffff8880b88334db R09: 1ffff1101710669b [ 266.933007][ C0] R10: dffffc0000000000 R11: ffffed101710669c R12: ffffffff8ed63670 [ 266.933018][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1a60640 [ 266.933029][ C0] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 266.933043][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.933056][ C0] CR2: 00007fdee9ccd0a3 CR3: 0000000038b2a000 CR4: 00000000003526f0 [ 266.933073][ C0] Call Trace: [ 266.933080][ C0] [ 266.933085][ C0] default_idle+0x13/0x20 [ 266.933102][ C0] default_idle_call+0x73/0xb0 [ 266.933119][ C0] do_idle+0x1e7/0x510 [ 266.933134][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 266.933158][ C0] ? __pfx_do_idle+0x10/0x10 [ 266.933184][ C0] ? do_idle+0x4eb/0x510 [ 266.933205][ C0] cpu_startup_entry+0x44/0x60 [ 266.933223][ C0] rest_init+0x2de/0x300 [ 266.933244][ C0] start_kernel+0x3ae/0x410 [ 266.933278][ C0] x86_64_start_reservations+0x24/0x30 [ 266.933297][ C0] x86_64_start_kernel+0x143/0x1c0 [ 266.933314][ C0] common_startup_64+0x13e/0x147 [ 266.933357][ C0] [ 336.704821][ T6195] kernel profiling enabled (shift: 34) [ 336.704871][ T6195] profiling shift: 34 too large [ 336.906847][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.906957][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.153467][ T5119] Bluetooth: unknown link type 128 [ 337.220530][ T6199] netlink: 'syz.1.68': attribute type 2 has an invalid length. [ 338.086832][ T6185] Process accounting resumed [ 338.409849][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.419035][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.420052][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.421965][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.422801][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.148202][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 339.148369][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 339.148396][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 339.517386][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.503179][ T5808] Bluetooth: hci3: command tx timeout [ 340.713429][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.713557][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.713778][ T6141] bridge_slave_0: entered allmulticast mode [ 340.721996][ T6141] bridge_slave_0: entered promiscuous mode [ 341.223138][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 341.686675][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.545791][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.583161][ T5814] Bluetooth: hci3: command tx timeout [ 342.762133][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.950653][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 343.264386][ T57] bridge_slave_1: left allmulticast mode [ 343.264595][ T57] bridge_slave_1: left promiscuous mode [ 343.271742][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.325521][ T57] bridge_slave_0: left allmulticast mode [ 343.325542][ T57] bridge_slave_0: left promiscuous mode [ 343.325684][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.663292][ T5814] Bluetooth: hci3: command tx timeout [ 345.033786][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.113743][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.135210][ T57] bond0 (unregistering): Released all slaves [ 345.256184][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.256279][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.256427][ T6205] bridge_slave_0: entered allmulticast mode [ 345.257862][ T6205] bridge_slave_0: entered promiscuous mode [ 345.260110][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.260231][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.260404][ T6205] bridge_slave_1: entered allmulticast mode [ 345.262923][ T6205] bridge_slave_1: entered promiscuous mode [ 345.801325][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.820434][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.295971][ T6205] team0: Port device team_slave_0 added [ 346.406490][ T6205] team0: Port device team_slave_1 added [ 346.753094][ T5814] Bluetooth: hci3: command tx timeout [ 346.768671][ T57] hsr_slave_0: left promiscuous mode [ 346.803262][ T57] hsr_slave_1: left promiscuous mode [ 346.856180][ T57] veth1_macvtap: left promiscuous mode [ 346.856329][ T57] veth0_macvtap: left promiscuous mode [ 346.856484][ T57] veth1_vlan: left promiscuous mode [ 346.856650][ T57] veth0_vlan: left promiscuous mode